Privacy Policy - Tree Surgeons Ickenham

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected by Tree Surgeons Ickenham in connection with the services we provide to customers in the Ickenham area. It applies to all Tree Surgeons Ickenham customers in the area, including individuals who request quotations, make bookings, receive tree surgery services, or otherwise interact with us in relation to our work.

1. Who We Are

Tree Surgeons Ickenham provides tree surgery and related arboricultural services. In the context of this Privacy Policy, we act as the data controller for the personal information we collect and determine how and why it is processed. This policy is intended to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We only collect personal data that is necessary for our legitimate business activities and service delivery. Depending on your interaction with us, we may collect the following categories of information:

Identity information such as your name and, where relevant, the name of your business or property owner.
Contact information such as address, email address, and telephone number.
Property and service information such as site address, tree location, access details, photographs, service instructions, and job notes.
Billing and payment information such as invoice details, transaction records, and payment status.
Communication records such as emails, messages, call notes, and complaint or feedback correspondence.
Technical information if you use our website or online forms, including basic device or browser data and usage records, where applicable.

We do not intentionally collect special category data unless it is required for a specific legal or safety reason and only where lawful to do so. If such data is ever needed, we will process it with appropriate safeguards.

3. How We Use Personal Data

We use personal data to manage customer relationships and to provide our services efficiently and safely. This may include:

responding to enquiries and quotation requests;
arranging site visits and delivering tree surgery services;
assessing access, safety, and operational requirements;
issuing estimates, invoices, receipts, and service updates;
recording work completed and maintaining service histories;
handling complaints, disputes, and insurance-related matters;
meeting legal, tax, accounting, and regulatory obligations;
preventing fraud, misuse, and unauthorised access;
improving service quality, customer experience, and operational efficiency.

We will always process data in a way that is fair, lawful, and transparent, and only for purposes that are compatible with the reason the information was originally collected.

4. Lawful Basis for Processing

Under UK GDPR, we rely on one or more lawful bases depending on the purpose of the processing:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quotation, arranging services, carrying out agreed work, and handling payment and invoicing.

Legal Obligation

We may process and retain information where required to comply with legal duties, including tax, accounting, health and safety, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. This includes managing customer communications, protecting our business, improving services, and maintaining accurate business records.

Consent

In limited cases, we may rely on your consent, for example where optional marketing communications are involved or where a specific action requires consent. Where consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data only when necessary and only with trusted third parties acting as processors or independent controllers under data protection law. These may include:

accounting and bookkeeping providers;
IT and cloud storage providers;
payment processing services;
email, document management, and communications tools;
professional advisers such as insurers, lawyers, or auditors;
subcontractors or operational partners assisting with service delivery, where needed.

Where processors are used, they are required to handle data only on our instructions, to keep it secure, and to comply with applicable data protection requirements. We do not sell personal data.

We may also disclose information if required by law, by a court order, or to protect the rights, property, or safety of Tree Surgeons Ickenham, our customers, staff, or the public.

6. Data Retention

We retain personal data only for as long as it is necessary for the purposes for which it was collected, including for the fulfilment of legal, accounting, and operational requirements. The length of retention depends on the type of information and why it is processed.

Customer and service records may be kept for the duration of the business relationship and for a reasonable period afterwards to handle queries or disputes.
Financial records are typically retained for the period required by tax and accounting law.
Communication records may be retained where needed to demonstrate instructions, resolve issues, or maintain service quality.
Technical and website-related data is retained only for as long as necessary for security, analytics, or functionality purposes.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in accordance with our retention procedures.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are designed to reflect the nature of the data we hold and the risks associated with processing it. While no system can be guaranteed to be completely secure, we take data protection and confidentiality seriously and review our safeguards regularly.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may be limited in certain circumstances, but we will always respond appropriately and in accordance with the law.

Right of access – to obtain confirmation of whether we process your data and to receive a copy of it.
Right to rectification – to have inaccurate or incomplete data corrected.
Right to erasure – to request deletion of your data where it is no longer needed or where another legal basis applies.
Right to restriction – to ask us to limit processing in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will review your request and respond within the time limits set by law. We may need to verify your identity before acting on your request.

9. Third-Party Services and Transfers

In some cases, processors or service providers may store or process data outside the UK. Where this happens, we will ensure appropriate safeguards are in place so that your personal data remains protected to a standard consistent with UK data protection requirements.

We take care to use reliable providers and to ensure that any transfer of personal data is lawful and proportionate to the service being delivered.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published or otherwise communicated to you. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

11. Complaints and Further Information

If you have concerns about how your personal data is used, you have the right to raise a complaint with the relevant data protection authority. You may also contact us to discuss your concerns or to exercise your rights. We will aim to deal with requests promptly, fairly, and in line with our obligations under data protection law.

Tree Surgeons Ickenham is committed to protecting privacy, acting transparently, and maintaining trust with every customer in the Ickenham area. We process personal data only where necessary, keep it secure, and handle it with care and respect.