Privacy Policy - Tree Surgeons Stjohnswood

This Privacy Policy explains how Tree Surgeons Stjohnswood collects, uses, stores, shares, and protects personal data when providing tree surgery and related services. It applies to all Tree Surgeons Stjohnswood customers in the area, including prospective customers, existing customers, property owners, tenants, and anyone who enquires about our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to personal data processed in connection with our services for customers in St John’s Wood and the surrounding area. It covers individuals who request quotations, book work, receive tree care services, communicate with us, submit feedback, or otherwise interact with Tree Surgeons Stjohnswood. It also applies to business contacts where personal data is involved, such as named employees, landlords, managing agents, or site representatives.

2. Personal data we collect

We collect only the information needed to provide our services effectively and safely. Depending on the nature of the enquiry or work, we may collect the following categories of data:

Identity data such as your name and, where relevant, the name of a business or organisation.
Contact data such as address, email address, and telephone number.
Service and property data such as property access details, site notes, photographs of trees or grounds, service history, and instructions relating to the work.
Payment and billing data such as invoice details, payment status, and transaction records.
Communication data such as messages, enquiries, complaints, and records of telephone or email correspondence.
Technical data where you use our digital systems, including limited device or usage information if collected through standard website or communication tools.
Health and safety data only where necessary, for example access requirements, site risk information, or notes about conditions affecting safe service delivery.

We do not seek to collect special category data unless it is clearly necessary and lawful to do so. If such data is provided to us incidentally, we will handle it with appropriate care and restrictions.

3. How we collect personal data

We may collect personal data directly from you when you:

make an enquiry or request a quote;
book or receive a service;
correspond with us by phone, email, text, or written communication;
provide access or site information;
make a payment or receive an invoice;
leave feedback or raise a complaint.

We may also receive data from third parties where necessary to deliver the service, such as landlords, property managers, insurers, or subcontractors acting on our behalf. In some cases, we may obtain information from publicly available sources or from professional advisers where needed for contractual, legal, or safety reasons.

4. How we use personal data

Tree Surgeons Stjohnswood uses personal data only for legitimate business and legal purposes connected with our services. These purposes may include:

responding to enquiries and providing quotations;
planning, scheduling, and carrying out tree surgery services;
assessing site conditions and managing health and safety;
sending invoices, processing payments, and maintaining financial records;
recording service history and future maintenance needs;
handling complaints, disputes, and aftercare;
meeting legal, tax, insurance, and regulatory obligations;
protecting our business, staff, contractors, and customers from fraud, misuse, or unsafe practices;
improving the quality and efficiency of our services.

5. Lawful basis for processing

We process personal data only where we have a lawful basis to do so. The main lawful bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quotation, scheduling work, carrying out the service, invoicing, and managing related communication.

Legal obligation

We may process data to comply with legal requirements, including tax, accounting, insurance, health and safety, and record-keeping obligations.

Legitimate interests

We may process data where it is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, maintaining service records, preventing fraud, improving operations, and ensuring safe delivery of services.

Consent

In limited cases, we may rely on your consent, particularly where a specific communication or use of data is not covered by another lawful basis. Where consent is used, you may withdraw it at any time.

Vital interests

In exceptional circumstances, we may process data where it is necessary to protect someone’s vital interests, for example in a serious safety emergency.

6. Data sharing and processors

We may share personal data with trusted third parties who help us operate our business and deliver services. These parties act as processors or, in some situations, as independent controllers. We require appropriate contractual and security protections to safeguard your data.

Processors may include:

IT and cloud service providers that store or support our records and communications systems;
accounting and bookkeeping services that help us manage invoices and financial records;
payment service providers that process payments securely;
professional advisers such as legal, insurance, or tax advisers;
subcontractors or specialist contractors involved in delivering parts of the service;
communication and administrative support services that assist with scheduling or record management.

We may also disclose data where required by law, to public authorities, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.

7. International transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place in line with applicable data protection laws. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protective measures.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, insurance, and reporting requirements. Retention periods may vary depending on the type of record and the service involved. In general:

quotation and enquiry records may be retained for a reasonable period to manage follow-up or dispute handling;
customer service and invoice records are typically retained for tax and accounting purposes;
site notes, safety records, and service history may be retained for operational and liability reasons;
correspondence and complaint records may be kept long enough to resolve issues and demonstrate compliance.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed periodically to ensure that we do not keep data longer than necessary.

9. How we protect personal data

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, password protection, secure storage, staff awareness, and careful selection of trusted service providers. While no system can be guaranteed completely secure, we work to maintain a high standard of data protection and operational security.

10. Your rights under data protection law

You have a number of rights regarding your personal data. Subject to legal conditions and exemptions, these rights include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to complain to the UK Information Commissioner’s Office if you believe your data has been handled unlawfully. We encourage you to raise any concerns with us first so that we can try to resolve them promptly and fairly.

11. Marketing communications

If we send marketing communications, we will do so only where permitted by law. You may opt out of receiving marketing messages at any time. Operational communications that are necessary to deliver a service, confirm bookings, or address safety or billing matters are not marketing communications.

12. Third-party links and external services

Where our communications or records refer to third-party services, those providers may have their own privacy policies. We are not responsible for the privacy practices of third parties, so we encourage you to review their policies where relevant.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically to stay informed about how your data is used.

14. Summary of our approach

Tree Surgeons Stjohnswood is committed to processing personal data responsibly, securely, and only when necessary. We collect data to deliver tree surgery services, manage customer relationships, meet legal obligations, and maintain safe operations. We use appropriate lawful bases, work with trusted processors under contract, retain data for justified periods only, and respect your rights under data protection law. This policy applies to all Tree Surgeons Stjohnswood customers in the area and is designed to provide clear and transparent information about our privacy practices.