Privacy Policy - Tree Surgeons Mottingham

This Privacy Policy explains how Tree Surgeons Mottingham collects, uses, stores, shares, and protects personal data relating to customers, prospective customers, suppliers, and other individuals in the Mottingham area. It applies to all Tree Surgeons Mottingham customers in the area, including anyone who contacts us, requests a quotation, books services, receives maintenance or emergency tree work, or otherwise interacts with our business.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018. This policy is written to help you understand what information we process, why we process it, how long we keep it, who may receive it, and what rights you have.

1. Information We Collect

We collect only the personal data that is necessary for the provision of our services, the management of our business, and compliance with legal obligations. The types of information we may collect include:

Identity details: name, title, and any information needed to identify you as a customer or property contact.
Contact details: address, email address, telephone number, and preferred method of communication.
Property and service information: details about the trees, land, access arrangements, site conditions, job specifications, and service history.
Billing and payment information: invoice details, payment status, and records necessary for accounting and tax purposes.
Communication records: emails, call notes, messages, complaint records, and other correspondence.
Technical data: limited information collected from website or digital interactions where relevant, such as IP address or device data, if used for security or service improvement.

We do not intentionally collect special category data unless it is absolutely necessary and we have a lawful basis to do so. If such information is ever provided to us, it will be processed with additional care and safeguards.

2. How We Use Your Personal Data

We use personal data for clear and specific purposes only. These include:

responding to enquiries and preparing quotations;
arranging site visits, assessments, and tree surgery services;
delivering the agreed work safely and efficiently;
managing customer accounts, invoices, and payments;
keeping records of services performed and customer preferences;
handling complaints, disputes, or follow-up issues;
meeting legal, tax, insurance, and regulatory obligations;
protecting our staff, contractors, customers, and property;
improving our operations, service quality, and internal administration.

We do not use your personal data for unrelated purposes unless permitted by law or with your consent where required.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for each use of personal data. Depending on the situation, we may rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, booking services, carrying out tree work, invoicing, and managing any related customer relationship.

Legal Obligation

We process data where necessary to comply with legal requirements, including tax records, accounting duties, health and safety obligations, and insurance-related documentation.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. Examples include maintaining service records, managing our business, preventing fraud, and improving our operations.

Consent

Where required by law, we will ask for your consent before processing certain information. If we rely on consent, you may withdraw it at any time, although this will not affect processing already carried out lawfully.

Vital Interests

In rare circumstances, we may process data to protect someone’s life or physical safety, such as in an urgent emergency situation.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and regulatory requirements. Retention periods may vary depending on the type of data and the reason it is held.

Quotation and enquiry records: generally kept for a reasonable period to manage follow-up or future services.
Customer and service records: retained for as long as needed to provide services and maintain an accurate history of work completed.
Financial records: kept in line with tax and accounting obligations.
Complaints and dispute records: retained for the period necessary to resolve issues and protect legal rights.

When personal data is no longer required, we will securely delete, destroy, or anonymise it where appropriate. We retain data only for as long as necessary and never indefinitely without a valid reason.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for the operation of our business or the delivery of our services. These parties act either as independent controllers or as processors acting on our instructions.

Examples of processors and service providers may include:

IT and cloud storage providers;
accounting and bookkeeping services;
payment processing providers;
customer management and scheduling systems;
professional advisers, such as insurers, auditors, or legal advisers;
subcontractors assisting with tree surgery tasks, where necessary to complete the work.

Where we use processors, we require them to protect your data, process it only on our instructions, and comply with data protection laws. We do not sell personal data.

We may also disclose data if required by law, by a court order, to a regulator, or to protect the rights, safety, or property of our business, customers, or others.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for legitimate business purposes.

While no system can be guaranteed to be completely secure, we work to reduce risk and maintain appropriate safeguards in line with the nature of the data we hold.

7. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: ask us to correct inaccurate or incomplete information.
Right to erasure: request deletion of your data in certain circumstances.
Right to restriction: ask us to limit how we use your data in certain cases.
Right to object: object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability: request transfer of certain data to you or another provider, where applicable.
Right to withdraw consent: if processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. In some cases, we may need to verify your identity before responding. Certain rights may be limited where legal obligations or legitimate business interests apply.

8. International Transfers

If any of our service providers store or process data outside the UK, we will take steps to ensure appropriate safeguards are in place. This may include approved contractual protections or other lawful transfer mechanisms required under data protection law.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect data from children except where it is necessary in the context of a property owner, resident, or legal contact. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The most current version will apply to the data we hold. We encourage customers in the Mottingham area to review this policy periodically so they remain informed about how their data is used.

11. Summary of Your Responsibilities

To help us keep your information accurate and secure, please inform us if your contact details change or if any data you have provided is no longer correct. This helps us maintain reliable records and provide services without unnecessary delay.

By using Tree Surgeons Mottingham services, requesting a quotation, or communicating with us, you acknowledge that your personal data may be processed in accordance with this Privacy Policy. We aim to process all data responsibly, transparently, and only to the extent necessary for legitimate business and service purposes.