This policy explains what personal information we collect when you visit our website, ask for a quote or become a customer, what we do with it and the choices you have. We’ve kept it as short and plain as we can.
Who we are
DNC Paving builds driveways and patios across Yorkshire. We’re the controller of the information described here, which means we decide how it’s used and we’re responsible for protecting it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our company details are shown at the foot of every page. For anything to do with your information, email info@dnc-paving.co.uk or call 07957 236658.
What we collect
We only collect what we need to reply to you, quote for your job and do the work.
- From the quote form: your name, phone number, email address and postcode; how and when you’d like us to contact you; and what you tell us about the job, such as the service, options, rough size, current surface, timescale and any message. We also receive the guide price the form showed you and the page you sent it from.
- From calls, WhatsApp and email: the details you give us and any photos of your property you send.
- If you become a customer: your address, survey notes, measurements and photos, your quote and contract, payment records and anything to do with your guarantee.
- Technical information: when you send the form, our website briefly uses your IP address to block spam and repeated abuse. Like most websites, our hosting may also keep standard server logs, such as IP addresses and the pages requested, for security.
How we use it, and why
Data protection law requires a lawful basis for each use of your information. Here’s what we do and why:
- Replying to your enquiry, surveying and quoting, because you’ve asked us to. These are steps you’ve requested before entering into a contract.
- Doing the work, taking payment and honouring your guarantee, to carry out our contract with you.
- Keeping accounting and tax records, because the law requires us to.
- Keeping the website secure and free of spam, keeping business records and dealing with any complaint or claim, because it’s in our legitimate interests to run a safe, accountable business. We rely on this only where it doesn’t override your rights.
We won’t send you marketing unless you’ve asked us to, and we never sell your information or pass it to anyone for their own marketing. We don’t make automated decisions about you: the online price guide is only an estimate, and a person always prepares your quote.
Who we share it with
We share information only with the service providers we need to run the business, and they must keep it secure:
- our website hosting provider, which runs this site and its quote form;
- our email provider, which delivers enquiries to our inbox and stores our emails;
- Cloudflare, if spam protection is switched on: its Turnstile check reads technical details from your browser to confirm that a person, not a bot, is sending the form, and Cloudflare’s own privacy policy explains how it handles them;
- a cookie-free analytics tool, if we use one, which counts visits without identifying you (see our cookie policy).
If you become a customer, we also share payment records with our accountant and, where the law requires, with HM Revenue & Customs. We may also disclose information when we’re legally required to, for example to the police or a court.
Transfers outside the UK
Some providers, such as our email provider or Cloudflare, may process information outside the UK. When that happens, it’s protected by safeguards UK law recognises, such as adequacy regulations or approved data transfer agreements.
How long we keep it
- Enquiries that don’t go ahead: 24 months from our last contact, so we can pick up where we left off if you come back to us. Then we delete them.
- Customer records: until six years after your guarantee ends, so we can deal with any claim. This also covers the period tax law requires us to keep accounting records.
- Spam-protection data: IP addresses are held only briefly, in memory. Server logs are kept only as long as we need them for security and troubleshooting.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of the information we hold about you (access);
- correct anything that’s wrong or incomplete (rectification);
- delete your information (erasure);
- limit how we use it (restriction);
- stop using it where we rely on legitimate interests (objection);
- give you information you provided in a format you can reuse elsewhere (portability).
Some rights only apply in certain situations; for example, we can’t delete records the law says we must keep. To use any of them, email info@dnc-paving.co.uk. It’s free, and we’ll normally respond within one month. We may need to confirm your identity first.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first at info@dnc-paving.co.uk. We’ll acknowledge your complaint within 30 days, look into it without undue delay and let you know the outcome. You also have the right to complain to the UK regulator, the Information Commission (still known as the ICO), at ico.org.uk.
Changes to this policy
If the way we handle personal information changes, we’ll update this page and the date at the top. The version published here is always the one that applies.