Last updated: September 2026 · Tree Key is a trading name of Vector Data Labs
Tree Key ("we", "us", "our") operates the website treekey.uk and the lead-generation service described in our Terms of Service. Tree Key is a trading name of Vector Data Labs, which is the data controller for the personal data described below. For privacy matters, contact contact@treekey.uk.
2.1 Customer data — information about you, our paying customer: name, business name, email, phone number, billing details (processed by Stripe), and your usage of the Service.
2.2 Lead data — information about a third party named in a Lead: typically a planning applicant's or agent's name, sourced from public UK council planning records, and in some cases a business or director name sourced from Companies House. This is data about people who are not our customers and have not signed up to anything.
We process Lead data on the basis of legitimate interests under UK GDPR Article 6(1)(f): our commercial interest in aggregating publicly available planning and company data into a usable directory for tree surgery and arboricultural businesses. A person named in Lead data has the right to object to this processing (Section 8) — where someone objects, we stop processing their data for this purpose unless we can demonstrate compelling legitimate grounds that override their interests, or the data is needed for a legal claim.
We do not use Lead data to build profiles about the individuals named in it beyond what's needed to classify a Lead's relevance.
UK local council planning application registers, Companies House (available under the Open Government Licence), and, where used, publicly listed business contact details. We do not purchase Lead data from private data brokers or scrape data that is not otherwise publicly accessible.
We do not sell personal data to data brokers or advertisers. We do commercially license access to Lead data as the Service itself — stated plainly here, not denied.
Some of our processors (including Stripe and Render) may process data outside the UK. Where this happens, transfers are protected by the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or an equivalent lawful transfer mechanism, as provided by each processor's standard terms.
Both customers and individuals named in Lead data have the right, under UK GDPR, to: request access to the personal data we hold about them; request correction of inaccurate data; request erasure ("right to be forgotten"), subject to our legal bases for retaining it; object to processing based on legitimate interests (Section 3); request restriction of processing in certain circumstances; and lodge a complaint with the Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, contact contact@treekey.uk.
Lead data is retained for 24 months from discovery, after which personal identifiers are anonymized or deleted, though the underlying planning application record may be retained in non-identifying form for business analytics. Customer account data is retained for the life of the account; billing records are kept for 6 years after account closure to meet HMRC record-keeping requirements.
We take reasonable technical and organizational measures to protect personal data: encrypted (HTTPS) connections throughout the Service; account sessions secured with signed, tamper-evident tokens rather than plain credentials; no customer passwords are stored at all (login uses a one-time emailed link, so there is no password database to be breached); and administrative and automated-scan functions are protected by a separate access secret, not exposed publicly.
Tree Key currently sets one cookie: a signed session cookie (treekey_contractor_session) used solely to keep you logged in, marked HttpOnly, Secure, and SameSite=Lax. This is a strictly necessary cookie required for the Service to function, so under UK PECR rules it does not require a cookie consent banner. This will be revisited the moment any analytics, advertising, or tracking cookie is added.
The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from children.
We may update this policy from time to time; material changes will be reflected by an updated "last updated" date, and significant changes affecting Lead data subjects' rights will be communicated where practical.
Questions or requests regarding this policy: contact@treekey.uk.
← Back to Home