Privacy Policy

1. Introduction

Treetify ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web and mobile applications and related services (the "Services"). It also describes your rights regarding your personal data and how you can exercise them.

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Data controller

The data controller responsible for your personal data in connection with the Services is Treetify. If you have questions about this policy or our data practices, you can contact us using the details provided in the Contact section below.

3. Information we collect

We collect information that you provide directly to us, that we obtain automatically when you use our Services, and, where applicable, that we receive from third parties.

Information you provide to us

• Account and profile data: name, email address, phone number, profile picture, and other details you give when registering or updating your profile.
• Company and business data: company name, logo, identification number (e.g. company registration number), and any business-related information you add to your account.
• Content you create: customers, grounds, tree records, inspection data, notes, attachments (e.g. photos), and any other content you upload or create within the Services.
• Communications: messages or other content you send to us (e.g. support requests or feedback).

Information we collect automatically

• Usage data: how you use the Services (e.g. pages or screens viewed, actions taken, time spent), device type, operating system, and browser or app version.
• Identifiers: IP address, session identifiers, and similar technical data that may be logged for security and operation of the Services.

We may also use cookies and similar technologies as described in our cookie notice (if published) or as part of this policy.

4. Legal basis for processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

• Contract: to perform our contract with you (e.g. providing the Services, managing your account and content).
• Legitimate interests: to operate, secure, and improve our Services, prevent fraud, and communicate with you about the Services, where our interests are not overridden by your rights.
• Consent: where we ask for your consent (e.g. for optional marketing or non-essential cookies). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation: where we must process data to comply with applicable law.

5. How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Services.
• Create and manage your account and authenticate you.
• Store and display your content (customers, grounds, trees, inspections, attachments) and allow you to manage and share it as the product allows.
• Process and display your profile and company information (including profile picture and company logo) as you choose.
• Communicate with you about the Services (e.g. important updates, security alerts, or support).
• Analyse usage to improve performance, usability, and security.
• Detect, prevent, and address fraud, abuse, or security issues.
• Comply with legal obligations and enforce our terms.

6. Sharing and disclosure of your information

We do not sell your personal data. We may share your information in the following circumstances:

• Service providers: with trusted third parties who assist us in operating the Services (e.g. hosting, analytics, support). These providers are contractually required to protect your data and use it only for the purposes we specify.
• Legal and safety: when required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: in connection with a merger, sale, or other transfer of assets, in which case we will continue to protect your information in line with this policy.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy (e.g. providing the Services, resolving disputes, complying with legal obligations). When you delete your account or request deletion of data, we will delete or anonymise your personal data in line with our retention schedule and applicable law, except where we must keep it for legal, regulatory, or legitimate business purposes.

8. Your rights

Depending on where you live, you may have the following rights in relation to your personal data:

• Access: to request a copy of the personal data we hold about you.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your personal data in certain circumstances.
• Restriction: to request that we limit how we use your data in certain cases.
• Portability: to receive your data in a structured, commonly used format where technically feasible.
• Objection: to object to processing based on legitimate interests or, where applicable, to processing for direct marketing.
• Withdraw consent: where we rely on consent, to withdraw it at any time.
• Complaint: to lodge a complaint with a supervisory authority (e.g. in your country of residence).

To exercise these rights, please contact us using the details below. We will respond within the time required by applicable law.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include secure transmission (e.g. HTTPS), access controls, and regular review of our practices. No method of transmission or storage is completely secure; we encourage you to use a strong password and keep your login details confidential.

10. International transfers

Your information may be processed in countries other than your own. We ensure that such transfers are subject to appropriate safeguards (e.g. standard contractual clauses approved by the European Commission or equivalent) where required by applicable data protection law.

11. Children

Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and indicate the "Last updated" date. If we make material changes, we may notify you by email or through the Services. Your continued use of the Services after such changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at the address or email you have been provided, or via the contact details published on our website or in the application.