Legal
Privacy Policy
What we do with the details you give us. In short: we use them to price and carry out your work, and we do not sell them to anyone. If you ask for an estimate, we email it to you, follow it up and, unless you say no, send you occasional news and offers about our own work — and you can tell us to stop whenever you like. We count visits on our own server, without cookies, and keep only daily totals; you can turn this off in Choose what to allow, or at any time in Cookie settings. Anything beyond that — including a recording of your visit — happens only if you agree to it, and you can change your mind at any time.
1. Introduction; Identity of the Controller
1.1 This Privacy Policy is issued by DNC Block Paving Ltd, a company incorporated and registered in England and Wales under company number 16690325, whose registered office is at 57 Pontefract Road, Cudworth, Barnsley, South Yorkshire, S72 8AY (the "Company", "we", "us", "our").
1.2 For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018 (together, the "Data Protection Legislation"), the Company is the controller of the personal data described in this Policy.
1.3 This Policy sets out the categories of personal data processed by the Company through the website at dncblockpaving.co.uk (the "Website") and in the course of its business, the purposes of and lawful bases for such processing, the recipients of such data, the applicable retention periods, and the rights of data subjects.
1.4 Enquiries concerning this Policy or the Company's processing of personal data should be addressed to the Company at contact@dncblockpaving.co.uk or by telephone on 07555 518030.
2. Categories of Personal Data Processed
2.1 Quotation enquiries submitted through the Website. Where a person submits an enquiry through the Website, the Company processes the data entered in the enquiry form, namely: name; telephone number; email address; postcode; the type of works of interest; and, where the person chooses to provide them, a free-text description of the works and photographs of the site. An email address is required in order that a written quotation may be sent.
2.2 Estimates requested through the Website. Where a person asks for an estimate through the Website, the Company processes the selections made in the estimate form (including the type of surface, the approximate area, the existing surface, access for machinery and any edging, drainage or steps), together with the person's name, telephone number, email address and postcode, each of which is required in order that the estimate may be sent. The estimate is calculated on the Company's server and sent to the email address provided; it is not displayed on the Website. The Company also records any choice the person makes on the form as to follow-up communications and news and offers under clauses 3.3 and 3.4.
2.3 Site visits requested from an estimate. Where a person who has been sent an estimate requests a site visit through the link in the estimate email, the Company processes the day and time chosen and, where the person chooses to give it on the booking page, the address of the property to be visited, together with the name, telephone number, email address and postcode given with the estimate. The address is needed in order that the visit can be carried out, and may instead be given when the visit is confirmed by telephone. The Company also records the status of the request, including any change or cancellation and whether the visit took place.
2.4 Direct communications. Where a person contacts the Company by telephone, email, WhatsApp or social media, the Company processes the contact details used and the content of the communication.
2.5 Customers. Where a person enters into a contract with the Company, the Company additionally processes such personal data as is necessary for the performance of that contract, including: the address of the works; the specification, quotation and contract documentation; invoices and records of payment; correspondence; and photographic records of the site as described in clause 8.
2.6 Technical data. The infrastructure on which the Website is hosted maintains standard server logs, which record the Internet Protocol (IP) address of visiting devices, processed solely for the purposes of security and the proper administration of the Website.
2.7 Several requests from the same email address. Where the Company receives an enquiry or an estimate request from an email address that it already holds, it keeps the new request together with the earlier ones on a single record, so that it can deal with the person consistently and give effect to any request not to be contacted. Details given with the new request, such as a different telephone number, are added to that record, and those given before are kept alongside them.
2.8 The Company does not collect through the Website any personal data other than as described in this clause 2.
3. Purposes and Lawful Bases of Processing
3.1 The Company processes personal data for the purposes, and in reliance on the lawful bases under Article 6(1) UK GDPR, set out below:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and arranging consultations or quotations | Article 6(1)(b) — steps taken at the data subject's request prior to entering into a contract |
| Calculating an estimate at the data subject's request and sending it by email | Article 6(1)(b) — steps taken at the data subject's request prior to entering into a contract |
| Following up an estimate by telephone, email, text message or WhatsApp, as described in clause 3.3 | Article 6(1)(f) — legitimate interests (responding to a person who has asked the Company for a price for its services) |
| Sending occasional news and offers about the Company's own services by email, as described in clause 3.4 | Article 6(1)(f) — legitimate interests (telling people who have asked the Company for a price about its own services) |
| Keeping several requests from the same email address together on one record | Article 6(1)(f) — legitimate interests (dealing with a person consistently, and giving effect to any request not to be contacted) |
| Arranging a site visit requested through the Website, confirming it by telephone, changing or cancelling it, and sending the related messages | Article 6(1)(b) — steps taken at the data subject's request prior to entering into a contract |
| Preparing quotations; entering into and performing the contract; arranging access; carrying out the works | Article 6(1)(b) — performance of a contract |
| Invoicing, receiving payment, accounting, taxation and statutory record-keeping | Article 6(1)(c) — compliance with a legal obligation |
| Communications concerning the works, aftercare and guarantee claims | Article 6(1)(b) and 6(1)(f) — performance of a contract; legitimate interests |
| Site records and photographs for quality control, guarantee, insurance and evidential purposes | Article 6(1)(f) — legitimate interests (the proper conduct and protection of the Company's business) |
| Establishing, exercising or defending legal claims | Article 6(1)(f) — legitimate interests |
| Use of photographs of completed works in marketing | Article 6(1)(a) — consent, which may be withdrawn at any time |
| Security and administration of the Website | Article 6(1)(f) — legitimate interests |
3.2 The Company sends direct marketing by email, text message or WhatsApp only (a) to a person who has consented to receive it, or (b) as permitted by regulation 22(3) of the Privacy and Electronic Communications (EC Directive) Regulations 2003, to a person who has asked the Company for an estimate or a quotation, concerning similar services only, where that person was offered a simple means of refusing when their details were collected and has not refused. Every such message identifies the Company and offers a simple means of refusing further messages, free of charge, and any refusal is acted upon promptly.
3.3 Following up an estimate. After sending an estimate, the Company may contact the person to discuss the estimate and to arrange a site visit: by telephone, where the person asked to be called, for up to thirty (30) days after the estimate was sent; and by email, text message or WhatsApp, unless the person selected "No thanks" on the form or has since refused such messages. Any such follow-up ends at once if the person asks the Company to stop. The Company does not make marketing calls to any person who has asked not to be called.
3.4 News and offers. A person who asks for an estimate through the Website, and does not select "No thanks" on the form, may also receive occasional news and offers about the Company's own services by email, in reliance on clause 3.2(b). Such messages never concern the products or services of any other business. Each identifies the Company and explains how to stop further messages free of charge, by the unsubscribe link in each email, and the person may also refuse them at any time by contacting the Company using the details in clause 1.4. They stop as soon as the person refuses them, and in any event twenty-four (24) months after the person last asked the Company for an estimate, a site visit or a quotation. A person who has refused them receives them again only if the person later consents. The Company does not send news and offers by telephone call or text message.
4. Disclosure of Personal Data
4.1 The Company does not sell personal data, and does not disclose personal data to any third party for that third party's own marketing purposes.
4.2 Personal data may be disclosed to the following categories of recipient, in each case only to the extent necessary:
(a) processors engaged by the Company for the hosting and operation of the Website and its systems, including the Company's hosting provider and transactional email service, acting on the Company's documented instructions;
(b) subcontractors and suppliers of the Company, to the extent necessary for the performance of the works;
(c) the Company's insurers, accountants and professional advisers;
(d) payment or finance providers, where relevant to the contract concerned; and
(e) any person to whom the Company is under a legal or regulatory obligation to make disclosure.
5. International Transfers
5.1 Personal data is stored on servers located in the United Kingdom, save as provided in this clause and in clause 9.5. Emails sent by the Company through its systems, including estimates, are delivered by its transactional email service, Resend (Plus Five Five, Inc., United States of America), which accordingly processes the recipient's name and email address and the content of the email outside the United Kingdom: the emails are sent from servers in Ireland, and Resend and its sub-processors, which are established in the United States of America, may also process that information there. Transfers to Ireland, and to a recipient in the United States of America participating in the UK Extension to the EU-US Data Privacy Framework, are treated as approved by regulations under Article 45A UK GDPR; the transfers to the United States of America are in addition subject to the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses. Where any other processor engaged by the Company processes personal data outside the United Kingdom, the Company shall ensure that the transfer is approved by regulations under Article 45A UK GDPR or is made subject to appropriate safeguards under Article 46 UK GDPR. A copy of the safeguards relied on may be obtained by contacting the Company using the details in clause 1.4.
6. Retention
6.1 Personal data shall be retained for no longer than is necessary for the purposes for which it is processed, and in accordance with the following periods:
(a) enquiries, estimate requests and site visit requests which do not result in a contract, including visits which are cancelled or not attended: for up to twelve (12) months from the date of the last communication, and where several requests are kept together under clause 2.7, from the last of them; save that, while a person may receive news and offers under clause 3.4, the name, email address and postcode given by that person and the type of works asked about are kept for that purpose until the period in clause 3.4 ends or the person refuses such messages;
(b) customer records: for the duration of the contract and thereafter for so long as retention is necessary for guarantee, insurance, taxation and legal purposes — ordinarily six (6) years from practical completion, and for any longer period during which the Company's workmanship guarantee remains in force or a longer limitation period could apply;
(c) records that a person has asked not to be contacted for marketing purposes: the email address or telephone number concerned and the date of the request, for so long as is necessary to give effect to that request.
7. Registration with the Information Commissioner
7.1 The Company is registered with the Information Commissioner's Office as a data controller under registration reference ZC242736. The entry may be inspected on the public register maintained at ico.org.uk.
8. Photographic Records
8.1 The Company creates photographic records of sites at which it works — the condition of the site prior to commencement, progress, construction detail and the completed works — for the purposes of quality control, guarantee, insurance and evidence in the event of a dispute, in reliance on its legitimate interests. Such records are not published.
8.2 Photographs of completed works are used in the Company's portfolio, website or social media only where the customer has given consent, which is entirely optional and may be withdrawn at any time. The Company does not publish any customer's name or full address.
8.3 Photographs submitted by a person through the enquiry form on the Website are stored on the Company's server and are accessible only to the Company, through its password-protected administration panel. Such photographs are processed for the purpose of preparing a quotation, are not published, and are retained in accordance with clause 6.
9. Cookies, Similar Technologies and Website Measurement
9.1 The Website does not deploy advertising cookies, and no advertising network or social media platform is permitted to place cookies or similar tracking technologies through it.
9.2 The Company measures the use of the Website by means of a first-party system operated on its own server. That system records the page visited, the website or search engine from which the visitor arrived, the general class of device used, whether the visitor used the telephone number, WhatsApp link or email address, and the steps taken on the estimate, enquiry and booking forms: starting and completing the estimate questions, choosing a day and then a time for a site visit, without recording which, starting to fill in a form, each field filled in, identified by the name of the field alone, and sending the form. What is typed into a form is never recorded, and the system itself places nothing on the visitor's device. The system is used solely to produce statistics about how the Website is used, with a view to improving it, and never to measure advertising. A visitor may object to it, free of charge, by switching off “Visit statistics” under “Choose what to allow” when the choice described in clause 9.6 is presented, or at any time by means of the “Cookie settings” link in the footer of every page, whereupon it ceases to record that visitor's use of the Website.
9.3 Under clause 9.2, visitors are counted without being identified. The visitor's IP address is not stored. It is combined with a random value which is generated afresh each day, held only in the memory of the Company's server and never recorded, and only the resulting code is retained; that code cannot be reversed, and differs for the same visitor on the following day. The Company is accordingly unable to recognise a visitor from one day to the next, or on any other website. This processing is carried out in reliance on the Company's legitimate interests in understanding the use of its own website (Article 6(1)(f) UK GDPR).
9.4 Once each day has ended, the records made under clause 9.2 for that day are combined into daily totals and then deleted; records which cannot be so combined are deleted no later than seven (7) days after the end of that day. The daily totals contain no identifier of any kind and are retained indefinitely.
9.5 Where, and only where, the User has given consent, the Company additionally uses PostHog to understand how the Website is used. PostHog records the pages visited, the actions taken upon them, how quickly those pages load, and a replay of the visit, and it places cookies in the browser of the User for that purpose. Anything PostHog stores in the browser of the User expires no later than six (6) months after the User's last visit to the Website, and is removed sooner if the User withdraws consent, or on the User's first visit after that consent has expired under clause 9.6. Text entered by the User into any field of any form is masked and does not appear in the replay. The information is processed by PostHog, Inc. as processor on behalf of the Company, and is held on servers located within the European Union. It reaches PostHog through an address on the Company's own domain, d.dncblockpaving.co.uk, which is operated for PostHog by Cloudflare, Inc. as its sub-processor. Cloudflare's network may handle it in transit outside the United Kingdom and the European Union, including in the United States of America, where Cloudflare, Inc. participates in the UK Extension to the EU-US Data Privacy Framework; such transfers are treated as approved by regulations under Article 45A UK GDPR. It is not used for advertising and is not disclosed to any advertising network.
9.6 The technologies described in clause 9.5 do not operate unless and until the User has given consent, which is requested upon the User's first visit. Consent may be refused as readily as it may be given, and may be given for some purposes and not others. It may be withdrawn at any time by means of the “Cookie settings” link in the footer of every page, whereupon the relevant technologies cease to operate and the identifiers they have placed are cleared. Consent is sought afresh after six (6) months.
9.7 The Website loads its typeface from Google Fonts. In making that request the visitor's browser discloses its IP address to Google LLC. No cookie is set by that request, and no other information concerning the visitor is provided to Google by the Company.
9.8 Any storage effected by the Website in the browser of the User otherwise than under clause 9.5 is strictly functional in character — for example, the retention of a selected service while an enquiry form is completed, and the record of the User's own choices under clauses 9.2 and 9.6 — does not identify the User, and is not used to track the User across other websites. The measurement described in clauses 9.2 to 9.4 is carried out for statistical purposes only, without consent, and ceases for any User who objects to it under clause 9.2.
9.9 Should the Company introduce further technologies which require consent — for example in connection with advertising — they shall be added to the choice described in clause 9.6 and shall not operate unless and until the User has given consent to them.
10. Rights of Data Subjects
10.1 Under the Data Protection Legislation, and in each case where the law so provides, a data subject has the right:
(a) to obtain confirmation as to whether the Company processes personal data concerning them, and to obtain access to, and a copy of, such data (Article 15 UK GDPR);
(b) to rectification of inaccurate personal data (Article 16);
(c) to erasure of personal data (Article 17);
(d) to restriction of processing (Article 18);
(e) to data portability (Article 20);
(f) to object to processing carried out in reliance on legitimate interests, and to object at any time to processing for direct marketing purposes (Article 21); and
(g) to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal (Article 7(3)).
10.2 A data subject may exercise any of the rights in clause 10.1 by contacting the Company using the details in clause 1.4. The Company shall respond without undue delay and in any event within one (1) month of receipt of the request, subject to any extension permitted by the Data Protection Legislation.
11. Complaints
11.1 A data subject who considers that, in connection with personal data relating to them, there is an infringement of the Data Protection Legislation may make a complaint to the Company under section 164A of the Data Protection Act 2018, by email to contact@dncblockpaving.co.uk, by telephone on 07555 518030 or by post to the Company's registered office. The Company shall acknowledge receipt of the complaint within thirty (30) days of receiving it and shall, without undue delay, take appropriate steps to respond to it, keep the complainant informed of its progress and inform the complainant of the outcome.
11.2 A data subject also has the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk; telephone 0303 123 1113), without prejudice to any other administrative or judicial remedy.
12. Children
12.1 The Website and the Company's services are directed at adult householders. The Company does not knowingly process personal data relating to children.
13. Amendments
13.1 The Company may amend this Policy from time to time. The version published on the Website, bearing the date of last revision stated at its head, is the version in force.