Who we are

Concrete & Stone Solutions is the data controller for the personal information described in this policy. This means we decide how and why that information is used.

Our address: 5 Eastmead Close, Studley, Warwickshire, B80 7FT, United Kingdom.

You can contact us at info@concretestonesolutions.co.uk, on 01527 304035, or on 07564 299605.

Information we collect

We may collect personal information when you request a survey or quotation, submit a website form, call or email us, become a customer, or otherwise communicate with us.

This information may include:

• your name, email address, telephone number and postal or project address;
• details about your property, flooring, project requirements and preferred appointment times;
• messages, photographs, plans or other information you choose to send us;
• quotation, appointment, contract, invoice and payment records;
• feedback, reviews and records of our communications with you; and
• technical information such as your IP address, browser type, device information, pages visited and cookie preferences.

We usually receive this information directly from you. We may also receive it from someone acting on your behalf, a contractor or professional involved in your project, a referral partner, or publicly available sources where appropriate.

How and why we use your information

We only use personal information when we have a lawful reason to do so. Depending on the circumstances, we may use it to:

• respond to enquiries and arrange surveys, calls or site visits;
• prepare quotations and take steps towards entering into a contract with you;
• deliver, manage and support the services you have asked us to provide;
• process payments, maintain accounts and meet tax or other legal obligations;
• manage our business, improve our website and understand how visitors use it;
• protect our website, business, customers and legal rights; and
• send marketing where you have consented or where the law otherwise allows it.

Our lawful bases

Our lawful bases under UK data protection law may include contract, where processing is needed to provide a quotation or service; legitimate interests, where it is reasonably necessary to operate and improve our business; legal obligation, where we must keep or disclose information by law; and consent, where you have made a clear choice, such as accepting non-essential cookies.

Where we rely on legitimate interests, those interests include responding to customers, managing projects, keeping appropriate business records, maintaining website security and improving our services. We consider the impact on your rights before relying on this basis.

Cookies and website data

Our website may use cookies and similar technologies. Essential cookies help the website function and remain secure. With your permission, non-essential cookies may help us understand website performance, measure visits or display content provided by third parties.

You can accept, reject or adjust non-essential cookies through the cookie controls shown on the website. You can also manage cookies in your browser settings, although blocking essential cookies may affect how parts of the website work.

Some pages may include embedded content, such as maps, videos or social media features. Those providers may receive technical information and set cookies when you interact with their content, subject to your cookie choices and their own privacy policies.

Who we share information with

We do not sell personal information. Where necessary, we may share it with trusted service providers and professional advisers, including:

• website hosting, maintenance, form, email, analytics and IT providers;
• payment, accounting and bookkeeping providers;
• subcontractors, suppliers or other professionals involved in delivering your project;
• insurers, legal advisers and debt recovery providers; and
• courts, regulators, law enforcement or other authorities where required by law.

We only share information that is reasonably needed for the relevant purpose. Where a provider processes personal information on our behalf, we require it to protect that information and use it only under our instructions.

International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, we use an appropriate safeguard recognised by UK data protection law, such as an adequacy regulation or approved contractual protections.

How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including to meet legal, accounting, tax, insurance and dispute-resolution requirements.

As a general guide, enquiry and quotation records may be kept for up to 24 months after our last contact. Customer, project, contract and invoice records may normally be kept for up to seven years after the relevant transaction or project ends. Cookie and analytics information is retained according to the relevant cookie or provider settings.

We may keep information for a longer or shorter period where the law requires it, a dispute is ongoing, or the information is no longer needed.

How we protect information

We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, alteration or disclosure. However, no website or electronic transmission can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete information or restrict how it is used;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format or have it transferred; and
• withdraw consent at any time where we rely on consent.

These rights are not absolute and may not apply in every situation. We may need to verify your identity before responding to a request. You will not normally have to pay a fee.

You also have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint or call 0303 123 1113. We would appreciate the opportunity to address your concern first.

Other websites and policy updates

Our website may link to websites operated by other organisations. We are not responsible for their privacy practices, so please review their policies before providing personal information.

We may update this policy when our services, website or legal obligations change. The latest version will be published on this page with a revised “last updated” date.

Contact us about your information

If you have a privacy question or want to exercise a data protection right, please contact us using the details below.