Privacy Policy - Tree Surgeons Temple

Last updated: This Privacy Policy explains how Tree Surgeons Temple collects, uses, stores, shares, and protects personal data. It applies to all Tree Surgeons Temple customers in the area, as well as individuals who enquire about our services, request quotations, or otherwise interact with us in connection with tree surgery, arboricultural, and related property services.

1. Who We Are

Tree Surgeons Temple is a service provider operating in the local area and handling personal data in connection with our professional services. We are committed to respecting privacy and processing personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy is intended to explain in clear terms what data we collect, why we collect it, how long we keep it, who we share it with, and what rights individuals have over their information.

2. Personal Data We Collect

We collect only the personal data that is necessary to provide our services, manage customer relationships, and meet our legal obligations. The categories of personal data we may collect include:

Identity data such as your name or the name of your business.
Contact data such as your address, email address, and telephone number.
Service information such as details of the work requested, site access notes, property information, and instructions relevant to carrying out tree surgery services.
Billing and payment data such as invoice details, payment status, and transaction records.
Communication data such as emails, messages, call notes, and records of complaints or feedback.
Technical data such as basic website usage information if you submit an enquiry through an online form, where applicable.
Legal and compliance data where required for insurance, dispute resolution, safeguarding, or regulatory purposes.

We do not seek to collect sensitive personal data unless it is necessary and appropriate for a lawful purpose. If such information is ever needed, we will handle it with additional care and only where permitted by law.

3. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To plan, deliver, and manage tree surgery and related services.
To communicate with customers about appointments, site visits, or service updates.
To issue invoices, process payments, and maintain financial records.
To handle complaints, warranty matters, or disputes.
To comply with legal, tax, accounting, insurance, and regulatory requirements.
To improve our services and maintain internal records.
To protect our business, customers, staff, and property from fraud, abuse, or misuse.

We only use personal data in ways that are fair, lawful, and transparent. We will not use your information for purposes that are incompatible with the original reason it was collected unless the law permits us to do so.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Tree Surgeons Temple may rely on one or more of the following lawful bases:

Contract: We process personal data when it is necessary to enter into or perform a contract with you, such as delivering a service you requested.
Legal obligation: We process data where needed to comply with legal duties, including tax, accounting, health and safety, and record-keeping requirements.
Legitimate interests: We process data to run and improve our business, manage customer relationships, prevent fraud, and resolve disputes, provided these interests do not override your rights and freedoms.
Consent: In limited situations, we may rely on your consent, for example where explicit permission is required for a particular communication or optional processing activity. You may withdraw consent at any time.

Where we rely on legitimate interests, we balance our interests against your privacy rights to make sure the processing remains appropriate and proportionate.

5. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate our business. These recipients may act as processors or independent controllers depending on the context. We only share information when necessary and only under appropriate safeguards.

Examples of processors and service providers may include:

IT and cloud storage providers that support secure data storage, email, and business systems.
Accounting and bookkeeping providers that assist with invoicing, tax preparation, and financial administration.
Payment service providers that process transactions securely.
Customer communication tools used to manage enquiries, scheduling, or service updates.
Professional advisers such as solicitors, insurers, or auditors where required.

We may also disclose information where required by law, to protect our legal rights, or to prevent harm, fraud, or unlawful activity. Any third party receiving personal data is expected to process it securely, use it only for the agreed purpose, and comply with data protection law.

6. International Transfers

If any of our processors store or access personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law. Our aim is to ensure that your information remains protected wherever it is processed.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason for keeping it.

Enquiry records: kept for a reasonable period after the enquiry, unless they lead to a customer relationship or legal obligation requiring longer retention.
Customer and service records: retained for the duration of the relationship and for an additional period after completion of services to address any follow-up, disputes, or claims.
Financial records: kept in line with tax and accounting requirements.
Communication and complaint records: retained as long as needed to resolve issues and demonstrate appropriate handling.

When information is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe manner.

8. Data Security

We take the security of personal data seriously and apply appropriate technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, limited staff access, and procedures for handling personal data responsibly.

However, no method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. If a personal data breach occurs that affects your rights and freedoms, we will respond in accordance with legal requirements.

9. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may be subject to certain conditions or exemptions, but we will always aim to respond properly and fairly.

Right of access: You can ask for a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete information.
Right to erasure: You can ask us to delete your data in certain circumstances.
Right to restriction: You can ask us to limit how we use your data in certain situations.
Right to object: You can object to processing based on legitimate interests, and to direct marketing where applicable.
Right to data portability: You may request certain information in a structured, commonly used format where the law allows.
Right to withdraw consent: Where processing relies on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will review your request and respond within the timeframe required by law. We may need to verify your identity before acting on a request.

10. Complaints

If you are concerned about how your personal data has been handled, you have the right to raise the matter with the relevant data protection authority. In the UK, this is the Information Commissioner’s Office (ICO). We would also appreciate the opportunity to address any concern directly and resolve it promptly where possible.

11. Children’s Data

Our services are directed at adults and property owners or authorised representatives. We do not knowingly collect personal data from children for marketing or service administration purposes. If we become aware that we have inadvertently collected such data without appropriate legal basis, we will take steps to delete it where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any revised version will take effect when published or otherwise communicated. We encourage customers and service users to review this policy periodically so they remain informed about how their data is protected.

By using our services, making an enquiry, or otherwise providing personal data to Tree Surgeons Temple, you acknowledge that your information will be handled in accordance with this Privacy Policy and applicable data protection law.