Privacy Policy

Last updated: 29 July 2026

1. Introduction

This Privacy Policy explains how the website operated under the Crazy Arbor Tree Care brand, hereinafter referred to as the “Website”, collects, uses, retains, shares and protects the personal data of its users and clients.

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the “General Data Protection Regulation” or “GDPR”, Portuguese Law No. 58/2019 of 8 August and all other applicable Portuguese and European legislation.

Crazy Arbor Tree Care respects the privacy of its visitors, clients and other data subjects and is committed to ensuring that personal data is processed lawfully, fairly, transparently and appropriately for the purposes for which it is collected.

By using the Website, users acknowledge that they have been informed of this Privacy Policy.

2. Data Controller

The controller responsible for processing personal data is:

Trading name: Crazy Arbor Tree Care
Legal entity: Espiga Exemplar Lda
Portuguese tax identification number: 518127460
Address: Rua da Moinheta 88 – 8365-062 Algoz, Portugal
Email: info@crazyarbor.com

Whenever this Policy refers to Crazy Arbor Tree Care, it means the legal entity identified above.

3. Data Protection Officer

A Data Protection Officer has not currently been appointed.

Any questions relating to privacy, personal data protection or the exercise of data subject rights may be sent to:

info@crazyarbor.com

4. Scope

This Policy applies to personal data processed through:

the Website;
contact and quotation request forms;
communications by email, telephone or other available means;
requests for technical site visits;
the preparation and management of quotations;
the contracting and performance of services;
the administrative, commercial and accounting management of the client relationship.

This Policy does not apply to processing carried out by third-party websites, platforms or services to which the Website may provide links.

5. Personal Data We Collect

Different categories of personal data may be collected depending on how the user contacts or interacts with Crazy Arbor Tree Care.

5.1. Enquiries and quotation requests

When a user requests information, contact, a technical site visit or a quotation, the following data may be collected:

name;
email address;
telephone number;
address or location of the proposed work site;
type of service required;
information about the trees, palm trees, land or area concerned;
information about access, obstacles or existing infrastructure;
preferred dates or periods for the visit or work;
photographs, videos, plans or other documents submitted;
the contents of the message;
other information voluntarily provided.

5.2. Technical visits and performance of services

In connection with a technical site visit, accepted quotation or performance of services, the following data may be processed:

the name and contact details of the client or representative;
the address and location of the work site;
instructions for accessing the site;
information about the owner, condominium or authorised person;
photographs and videos of the trees, land and existing conditions;
technical notes and assessments;
information about risks, structures, cables, pipes or other obstacles;
licences, permissions or consents supplied by the client;
quotations, work orders and contracts;
records of communications and requested changes;
information required for the safe performance of the work;
records of incidents, complaints or subsequent support.

5.3. Billing and payment data

Where services are contracted, the following data may be processed:

name or company name;
Portuguese tax identification number or other tax number;
billing address;
email address;
information about the contracted services;
amounts invoiced and paid;
payment references and records;
accounting and tax documents;
information required to comply with legal obligations.

Crazy Arbor Tree Care does not intend to collect or store complete bank card details through the Website. Where external payment service providers are used, such data will be processed in accordance with the policies and terms of the relevant provider.

5.4. Contact by email, telephone or other means

Where a user contacts Crazy Arbor Tree Care directly, the following data may be processed:

name;
email address;
telephone number;
the contents of the communication;
the date and time of contact;
files or documents submitted;
additional information voluntarily provided.

5.5. Photographs and videos

Photographs or videos submitted by the user or collected during visits and work may include:

trees, palm trees and vegetation;
buildings, gardens, land or outdoor areas;
access routes and infrastructure;
vehicle registration numbers;
addresses or details that identify the location;
people who happen to be present at the site.

Crazy Arbor Tree Care will endeavour to limit the collection and use of these images to what is strictly necessary to assess, quote for, document and carry out the work.

The use of images for promotional, advertising, portfolio or social media purposes will require permission where the images identify the client, other individuals, an address, vehicle registration numbers or other personal information.

5.6. Technical and browsing data

When the Website is used, certain technical data may be collected automatically, including:

IP address;
browser type and version;
operating system;
device type;
browser language;
date and time of access;
pages visited;
approximate duration of the visit;
source of access;
interactions with the Website;
statistical usage data;
technical, security and fraud-prevention logs.

Some of this information may be collected in aggregated or anonymised form and may not directly identify the user.

6. Purposes of Processing

Personal data may be processed for the following purposes:

responding to enquiries or contact requests;
analysing quotation requests;
preparing and presenting commercial proposals;
scheduling technical visits and work;
assessing trees, land, access and site conditions;
communicating with prospective and existing clients;
entering into and performing service contracts;
organising teams, equipment, travel and technical resources;
ensuring the safety of the work;
managing changes, cancellations and rescheduling;
issuing quotations, invoices, receipts and other documents;
processing and confirming payments;
providing support after completion of the work;
managing complaints, incidents or requests for clarification;
establishing, exercising or defending rights in administrative, judicial or out-of-court proceedings;
complying with legal, tax, accounting and regulatory obligations;
preventing fraud, misuse and security incidents;
ensuring the operation and security of the Website;
producing statistics and analysing Website use;
improving the services, content and user experience.

Personal data will not be used for purposes that are incompatible with those for which it was originally collected.

7. Lawful Bases for Processing

Under Article 6 of the GDPR, personal data may be processed on the following lawful bases:

7.1. Steps taken before entering into a contract

Where a data subject requests information, a quotation, a technical visit or other steps before potentially contracting a service.

7.2. Performance of a contract

Where processing is necessary to enter into, perform and manage a service contract, including scheduling the work, communicating with the client, billing and providing subsequent assistance.

7.3. Compliance with legal obligations

Where processing is necessary to comply with legal, tax, accounting, administrative, employment, safety or public authority obligations.

7.4. Legitimate interests

Processing may be based on the legitimate interests of Crazy Arbor Tree Care, including:

ensuring information security;
preventing fraud and misuse;
protecting people, workers, property and equipment;
documenting the condition of the site and performance of the work;
managing and improving business activities;
responding to complaints;
establishing, exercising or defending rights;
continuously improving the Website and services;
producing usage statistics.

Where processing is based on legitimate interests, Crazy Arbor Tree Care will balance those interests against the rights, freedoms and reasonable expectations of the data subjects.

7.5. Consent

Processing may be based on consent where:

the user authorises non-essential cookies or technologies;
the user authorises the use of photographs or videos for promotional purposes;
the user authorises marketing communications, where applicable;
consent is required for a specific purpose.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before it was withdrawn.

8. Enquiries, Quotation Requests and Technical Visits

Data provided through forms or other contact methods will be used to assess the request, respond to the user, request further information, prepare a quotation and, where necessary, arrange a technical site visit.

Submitting a request does not, by itself, create a contract for the provision of services.

Crazy Arbor Tree Care may request photographs, videos, the location, approximate measurements, access information or other relevant conditions in order to carry out a preliminary assessment.

Where the information provided is insufficient to prepare a quotation, an on-site visit may be required.

9. Performance of Services

Where a quotation is accepted, the necessary personal data may be used to:

confirm the identity and contact details of the client;
organise and carry out the work;
access the work site;
communicate with the owner, representative, condominium or authorised person;
obtain or confirm information regarding licences and permissions;
record the conditions found on site;
document the performance of the work;
ensure compliance with safety requirements;
manage payments, billing and tax documentation;
deal with subsequent requests, complaints or incidents.

10. Disclosure to Processors and Partners

Where necessary to prepare or perform the services, certain data may be disclosed to subcontractors, technicians or partners of Crazy Arbor Tree Care.

These recipients may include:

professionals or businesses assisting with the work;
operators of machinery, platforms, cranes or other equipment;
transport, logistics or waste-removal providers;
specialist technical service providers;
suppliers of equipment or resources required for the work.

Only the data strictly necessary for the relevant purpose will be disclosed.

Providers processing data on behalf of Crazy Arbor Tree Care are subject to confidentiality, security and data protection obligations.

Where an organisation processes personal data for its own purposes, it will be responsible for that processing under applicable law.

11. Recipients of Personal Data

Personal data may be disclosed, where necessary and legally permitted, to:

web-hosting providers;
IT and technical support providers;
email and communications service providers;
businesses responsible for developing or maintaining the Website;
contact, client or document management platforms;
accounting, tax and administrative service providers;
banks and payment service providers;
subcontractors and partners involved in providing the services;
insurers, insurance intermediaries, consultants and legal advisers;
dispute resolution bodies;
courts, police, tax, administrative or regulatory authorities;
other organisations where required by law or authorised by the data subject.

Crazy Arbor Tree Care does not sell or trade the personal data of its users or clients.

12. Tools and Services Used by the Website

The Website may use third-party technological tools to support its operation, security, performance measurement and user experience.

12.1. Google Analytics 4

Google Analytics 4 may be used to obtain statistical information about the use of the Website, such as pages visited, source of access, approximate session duration and interactions.

Where legally required, this tool will only be activated after the user has provided consent through the cookie management platform.

12.2. Google Tag Manager

Google Tag Manager may be used to manage technical tags and services installed on the Website.

Other services may be loaded through this tool and, where legally applicable, their activation will depend on the user’s consent.

12.3. Google Maps

Some pages may include maps provided by Google to display locations, operating areas or help identify sites.

Using these maps may involve technical communications between the user’s browser and Google’s servers.

12.4. Google reCAPTCHA

The Website may use Google reCAPTCHA to protect forms against spam, automated abuse, fraud and malicious use.

The use of this service may involve the processing of technical data and is subject to Google’s terms and privacy policies.

12.5. Consent management platform

The Website may use a consent management platform, including CookieScript, to allow users to accept, reject or configure their preferences regarding cookies and similar technologies.

13. Data Retention

Personal data will only be retained for as long as necessary to fulfil the purposes for which it was collected or for as long as there is a lawful basis permitting or requiring its retention.

Without prejudice to specific statutory periods and the need to retain certain data to establish, exercise or defend legal rights, the following indicative retention periods may apply:

Purpose or category	Indicative retention period
Contact requests or enquiries	Up to 24 months after the last communication
Quotation requests that do not result in a contract	Up to 24 months after the request is closed or the last contact
Technical visits and preliminary assessments	For as long as necessary to assess the request and up to 24 months after the last contact, unless longer retention is required
Contracts, work orders and service records	For the duration of the contractual relationship and for the periods required to comply with legal obligations or establish, exercise and defend rights
Invoices, receipts and accounting or tax documents	For the period required by law
Photographs, videos and documentation of sites or work	For as long as necessary for assessment, performance, follow-up and the defence of potential rights
Data used for marketing communications	Until the data subject withdraws consent or objects
Technical and security logs	Generally up to 12 months, unless longer retention is required to investigate incidents, prevent fraud or comply with legal obligations
Anonymised statistical data	For as long as it remains relevant for statistical purposes and service improvement

At the end of the relevant retention periods, personal data will be securely deleted or anonymised unless a legal obligation, dispute, complaint or other legitimate reason requires it to be retained for longer.

14. International Data Transfers

Some technology service providers used by the Website may be established outside the European Economic Area or may use infrastructure located in third countries.

Where an international transfer of personal data takes place, Crazy Arbor Tree Care will endeavour to ensure that the safeguards required by the GDPR are used, including:

adequacy decisions adopted by the European Commission;
standard contractual clauses approved by the European Commission;
supplementary protection measures, where necessary;
other legally recognised safeguards.

15. Information Security

Crazy Arbor Tree Care uses appropriate and proportionate technical and organisational measures to protect personal data against:

unauthorised access;
accidental or unlawful destruction;
loss;
alteration;
unauthorised disclosure;
misuse;
any other form of unlawful processing.

These measures may include:

the use of secure HTTPS connections;
protection of servers and IT infrastructure;
authentication and access-control mechanisms;
restricting access to data according to professional requirements;
backups and recovery measures;
security monitoring;
protection against malware, intrusion attempts and automated attacks;
regular updating of the systems used;
confidentiality obligations applying to workers and service providers.

Despite these measures, no electronic transmission or storage system can guarantee absolute security.

Users should also avoid submitting unnecessary, highly confidential or unsolicited information through the Website forms.

16. Automated Decision-Making and Profiling

Crazy Arbor Tree Care does not intend to use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect data subjects.

Any statistical analysis tools used are intended to provide a general understanding of Website use and not to make automated decisions regarding the contracting or performance of services.

17. Rights of Data Subjects

Under applicable law, data subjects may exercise the following rights where relevant:

17.1. Right to information

The right to receive clear, transparent and appropriate information about how personal data is processed.

17.2. Right of access

The right to request confirmation as to whether personal data is being processed and to obtain access to that data and the information required by law.

17.3. Right to rectification

The right to request the correction or updating of inaccurate, outdated or incomplete data.

17.4. Right to erasure

The right to request the deletion of personal data where the requirements set out in Article 17 of the GDPR are met.

17.5. Right to restriction of processing

The right to request that processing be restricted in the circumstances provided for by applicable law.

17.6. Right to object

The right to object to the processing of personal data where processing is based on the legitimate interests of the controller, including, where applicable, processing for direct marketing purposes.

17.7. Right to data portability

The right to receive personal data provided by the data subject in a structured, commonly used and machine-readable format and to request its transmission to another controller where technically feasible and legally applicable.

17.8. Right to withdraw consent

Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

17.9. Right to lodge a complaint

The right to lodge a complaint with the competent supervisory authority, without prejudice to any other administrative or judicial remedy.

The exercise of these rights may be subject to restrictions provided for by applicable law, particularly where the retention or processing of data is necessary to comply with a legal obligation or to establish, exercise or defend legal rights.

18. Exercising Data Subject Rights

The rights identified above may be exercised by submitting a written request to:

Email: info@crazyarbor.com

The request should clearly identify the right that the data subject wishes to exercise.

Crazy Arbor Tree Care may request additional information that is strictly necessary to confirm the identity of the applicant and prevent personal data from being disclosed to unauthorised persons.

Requests will be assessed and answered within the periods required by law.

Exercising these rights is generally free of charge. However, where requests are manifestly unfounded or excessive, particularly because of their repetitive nature, the measures permitted by law may be applied.

19. Complaints

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados — CNPD

Address: Av. D. Carlos I, 134, 1.º
1200-651 Lisbon
Portugal

Telephone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

Requests for information and complaints may be submitted using the forms available on the CNPD website.

20. Links to Third-Party Websites

The Website may contain links to third-party websites, maps, social media platforms, messaging services or other platforms.

Those organisations are independent of Crazy Arbor Tree Care and have their own privacy policies, cookie policies and terms of use.

Crazy Arbor Tree Care does not control and accepts no responsibility for the privacy practices, content, security or services provided by third parties.

Users are advised to review the applicable privacy documentation before using those websites or services.

21. Third-Party Data Provided by the User

Where a user provides the personal data of another person, such as an owner, family member, representative, neighbour, condominium manager or person responsible for access to the site, the user confirms that they are entitled to disclose that data.

Where applicable, the user should inform that person that their data has been disclosed to Crazy Arbor Tree Care.

Third-party data will only be used for purposes relating to the request, technical visit, site access, preparation of the quotation or performance of the services.

22. Children

The Website is intended for the general public and is not specifically directed at children.

Crazy Arbor Tree Care does not intend knowingly to collect personal data relating to children without the permission or involvement of their legal representatives where this is required by law.

If personal data relating to children is found to have been processed inadvertently in breach of applicable law, appropriate measures will be taken to delete or regularise that data as soon as reasonably possible.

23. Cookies

The use of cookies and similar technologies is governed by the Website’s Cookie Policy.

That policy should explain:

the cookies and technologies used;
their purposes;
the organisations providing them;
their retention periods;
how users can accept, reject, configure or withdraw consent.

Users may change their preferences through the consent management platform made available on the Website.

24. Amendments to This Privacy Policy

Crazy Arbor Tree Care reserves the right to update or amend this Privacy Policy whenever necessary, including as a result of:

legislative or regulatory changes;
technological developments;
changes to the Website’s functionality;
the introduction of new services;
changes to the tools used;
changes to the personal data processing activities carried out.

Whenever changes are made, the date of the most recent revision shown at the beginning of this document will be updated.

Where changes are relevant to the rights and interests of data subjects, additional means may be used to inform users.

25. Governing Law

This Privacy Policy is governed by Portuguese law, Regulation (EU) 2016/679 and all other applicable Portuguese and European rules relating to privacy and personal data protection.

26. Contact Details

For any question relating to personal data protection, this Privacy Policy or the exercise of data subject rights, the following contact details may be used:

27. Final Provision

Crazy Arbor Tree Care is committed to processing personal data responsibly, transparently and in accordance with applicable law and to adopting appropriate measures to ensure the confidentiality, integrity and availability of the information processed.

Protecting the privacy of users and clients is an ongoing commitment, supported by the continuous improvement of personal data protection and security practices.