Privacy Policy - Tree Surgeons Waterloo

Tree Surgeons Waterloo is committed to protecting the privacy and personal data of all customers, prospective customers, and website or service users in the Waterloo area. This Privacy Policy explains how personal information is collected, used, stored, shared, and protected in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Tree Surgeons Waterloo customers in the area, including people who enquire about services, request quotations, receive tree surgery work, or otherwise interact with our business.

1. Who We Are

For the purposes of data protection law, Tree Surgeons Waterloo acts as the data controller in relation to the personal data we collect and use for our services. This means we determine why and how your personal data is processed. We are responsible for ensuring that your information is handled lawfully, fairly, transparently, and securely.

2. Personal Data We Collect

We only collect data that is necessary for providing tree surgery and related services, managing our customer relationships, and meeting legal or operational obligations. The categories of personal data we may collect include:

Identity information such as your name and title.
Contact information such as your address, email address, and telephone number.
Service information such as details of the work requested, site access requirements, preferences, and instructions.
Property information such as the address of the work location, photographs relevant to the work, and notes regarding trees, hedges, or site conditions.
Payment information such as billing details and transaction records, where applicable.
Communication data such as emails, messages, call notes, and complaint records.
Technical data where relevant, including limited information about how you interact with digital communications.
Legal and compliance information where we must verify ownership, permissions, or safety-related requirements.

We do not deliberately collect special category personal data unless it is necessary and lawful to do so, and only in exceptional circumstances. If such information is provided to us, we will handle it with additional care and only for a valid purpose.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To plan, deliver, and manage tree surgery services.
To arrange site visits, surveys, and appointments.
To communicate with you about your instructions, work progress, or service outcomes.
To issue invoices, process payments, and keep accounting records.
To maintain safety standards and assess risks related to the work.
To manage complaints, disputes, or warranty-related matters.
To comply with legal, regulatory, tax, and insurance obligations.
To improve our customer service and operational processes.

We only process your data where there is a lawful reason to do so and where the processing is proportionate to the purpose.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis before we process personal data. Tree Surgeons Waterloo relies on the following lawful bases:

Contract – where processing is necessary to enter into or perform a contract with you, such as providing a quotation or carrying out agreed work.
Legal obligation – where we must process data to meet legal duties, including tax, accounting, health and safety, or record-keeping requirements.
Legitimate interests – where processing is necessary for our legitimate business interests and does not override your rights and freedoms, such as managing customer relationships, improving services, preventing fraud, or keeping secure records.
Consent – where we ask for your permission, for example for certain optional communications or specific uses of information not covered by another lawful basis.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of any processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for the purposes described in this Policy. Such parties may act as processors or independent controllers depending on the service provided. We require all processors to handle personal data securely and only in accordance with our instructions and applicable law.

Examples of processors or third parties we may use include:

IT and data storage providers that host secure systems, email services, or document storage.
Accounting and invoicing providers that assist with bookkeeping, billing, and tax compliance.
Payment service providers that process card or bank transactions.
Customer relationship and communication tools used to manage enquiries and records.
Professional advisers such as insurers, legal advisers, or accountants where required.
Subcontractors or specialist contractors where needed to deliver a service safely and effectively.
Public authorities where disclosure is required by law or necessary to protect rights, safety, or property.

We do not sell personal data. If personal data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place to protect your information.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, insurance, and reporting requirements. Retention periods may vary depending on the type of data and the nature of our relationship with you.

In general, we may retain:

Quotation and enquiry records for a reasonable period to manage follow-up, disputes, or future service requests.
Customer and job records for as long as needed to support service delivery, legal compliance, and business records.
Financial and tax records for the period required by law.
Safety and incident records for as long as necessary to meet legal duties and manage claims.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in a controlled manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access on a need-to-know basis. While no system is completely risk-free, we take reasonable steps to protect the information entrusted to us.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to ask us to limit the way we use your data in certain cases.
Right to data portability – to receive certain data in a structured, commonly used format, where applicable.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law and may need to verify your identity before acting on your request. Some rights may be limited where we must retain information for legal or legitimate business reasons.

9. Cookies and Similar Technologies

If we use digital tools that place cookies or similar technologies, they are used only where necessary, or with your consent when required by law. These technologies may help with basic functionality, security, or understanding how a service is used. You can manage cookie preferences through your browser settings where applicable.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data handling practices. The updated version will apply from the date it is published or otherwise made available. We encourage you to review this Policy periodically so that you remain informed about how we protect your information.

11. How We Use Personal Data Fairly

Tree Surgeons Waterloo values transparency and accountability. We will only use personal data for clear and legitimate purposes, and we will not process it in a way that is incompatible with those purposes. We aim to keep the information we hold accurate and relevant, and we take care to avoid collecting excessive data. Where possible, we use minimal, proportionate information to provide our services effectively and safely.

Summary of Our Commitment

Tree Surgeons Waterloo processes personal data lawfully, securely, and with respect for your rights. We collect only the information needed to provide services, meet our obligations, and improve our operations. We retain data only for as long as necessary, use trusted processors under appropriate safeguards, and uphold your rights under UK GDPR. This Privacy Policy applies to all Tree Surgeons Waterloo customers in the area and is intended to provide clear and fair information about how your data is handled.