Free Delivery Available

WhatsAppWhatsApp Paving Direct 

 

Trustpilot
  • /
  • Pavestone UK Limited Privacy Policy

Privacy Policy

This policy is the Privacy Policy of Pavestone UK Limited, which also trades under the names of Pavestone, Bekstone, Paving Direct, Gloucester Paving Centre and Basingstoke Building Supplies.

In line with current advice we have layered our privacy notice into readable and understandable chapters to enable you to quickly go to the topic of most importance to you. We have also set out our privacy policy as one whole document for those who wish to read everything.  Click on the relevant link below.

1. Whole policy
2. Identity and contact details of the Controller of your Personal Data
3. The purposes and legal basis for processing your Personal Data
4. Legitimate Interests
5. Recipients (people to whom we will pass your Personal Data) of your Personal Data
6. Transfers of your Personal Data to a foreign country
7. How long we will keep your Personal Data
8. Your GDPR Rights
9. Your right to object to the processing of your Personal Data
10. Your right to lodge a complaint with the Information Commissioner
11. Whether it is necessary for you to provide your Personal Data
12. Do we use automated decision making

1. WHOLE POLICY

Please see the following pages.

2. Identity and contact details of the Controller of your Personal Data

The Controller of your Personal data is:
Pavestone UK Limited
Burford Quarry
Burford Road
Brize Norton
Oxon
OX18 3WN

Email: [email protected]

Telephone: 01386 848654

3. The purposes and legal basis for processing your Personal Data

We will process (use) your Personal Data for the following purposes:

  • Providing you with any brochure, estimate or quotation you have asked us to provide
  • Sending emails to you marketing our goods and services. Each email will include a link to enable you to stop the sending of such emails
  • Providing you, at your request, information concerning the goods and/or services you are interested in ordering from us
  • Supplying the goods and/or services ordered by you
  • Contacting you concerning your order
  • For payment of our charges
  • For accountancy purposes including but not limited to disclosing those of your Personal Data as appears on our invoice to our accountants and/or auditors if requested by them to enable our annual accounts to be prepared
  • The use by us of analytical software concerning our web site
  • The support and maintenance of our web site and other software used by us or those who will process your Personal Data on our behalf
  • Sending you, from time to time, emails about similar goods and services we offer. Each email will include a link to enable you to stop the sending of such emails
  • Creating custom and lookalike/similar audience profiles for marketing purposes where your data is shared (in a hashed and pseudonymised format) with marketing platforms such as Google, Facebook and Microsoft to find audiences similar to yourself. If you do not wish your data to be used for this purpose you can opt out by contacting us at [email protected]

The lawful basis for the processing of your Personal Data for the second purpose listed above (where you have not purchased goods and services from us) is the consent you have given to us. Where you have given your consent it may be withdrawn by you at any time by sending an email to us at [email protected]

Where you have purchased goods and/or services from us the lawful basis for the processing of your Personal Data for the second purpose is our legitimate interest under Article 6.1(f) of the General Data Protection Regulation.

The lawful basis for the processing of your Personal Data for the third to sixth purposes listed above is provided by Article 6.1(b) of the General Data Protection Regulation.

We have a "legitimate interest" under Article 6.1(f) of those regulations for all the other purposes listed above and for more information on this please see section 4 below.

4. Legitimate Interests

We have a "legitimate interest" under Article 6.1(f) of the General Data Protection Regulation to process your Personal Data for some of the purposes mentioned in section 3 above. As required by that regulation we give the following further information for each of those purposes:

  • Processing your Personal Data for accountancy purposes including but not limited to disclosing those of your Personal Data as appears on our invoice to our accountants and/or auditors if requested by them to enable our annual accounts to be prepared
  • The use by us of analytical software concerning our web site. This will enable us to improve users’ experiences of our web site
  • Processing your Personal Data for the support and maintenance of our web site and other software used by us or those who will process your Personal Data on our behalf. This will ensure the proper support and maintenance of our business systems.
  • Sending you, from time to time, emails about similar goods and services we offer. This will enable you to be aware of developments in the goods and services we offer our customers. Each email will include a link to enable you to stop the sending of such emails.

5. Recipients (people to whom we will pass your Personal Data) of your Personal Data

We will only pass your Personal Data to the following:

  • The contractors we used for delivering goods and/or services to you. From time to time we may change those contractors or use one or more contractors for delivery.
  • The electronic payments providers (Sage Pay and PayPal) used by us to collect our charges from you
  • Our Accountants and Auditors who are Chapman Worth
  • Third parties who will process your Personal Data on our behalf being:
    • Amazon Web Services who host our Paving Direct web site (pavingdirect.com)
    • Quiet Storm Solutions Limited who host our pavestone.co.uk, bekstone.co.uk, basingstokebuildingsupplies.co.uk and gloucesterpaving.co.uk web sites
  • Third parties who maintain our web sites pavestone.co.uk, bekstone.co.uk, basingstokebuildingsupplies.co.uk and gloucesterpaving.co.uk being Limited
    • Quiet Storm Solutions Limited
  • Third parties who support and maintain our business software being:
    • D&D Network Services Limited
    • The Access Group
  • Alphabet (Google/YouTube) - Like many commercial organisations we make use of services provided by Google Inc. Those services include:
    • passing the first line and post code of a customer’s address to Google for the purposes of rendering that address into map co-ordinates which calculates from those co-ordinates locates our nearest distributor and
    • by using Google Analytics to analyse the use of our web site which includes passing some Personal Data of web site users (e.g. a user’s IP address) to Google. The analysis of how people use our web site is extremely important to us as it enables us to maintain our web site to the highest standard and ensure that your visit is pleasant and as efficient as possible
    • your data may be used to help us create lookalike/similar audience profiles.
  • Matomo - analytics of website usage and behaviour which includes passing some Personal Data of web site users (e.g. a user’s IP address)
  • Meta (Facebook/Instagram/Whatsapp) - your data may be used to help us create lookalike/similar audience profiles.
  • Microsoft - your data may be used to help us create lookalike/similar audience profiles.
  • Pinterest - your data may be used to help us create lookalike/similar audience profiles.
  • TikTok - your data may be used to help us create lookalike/similar audience profiles.
  • LiveAgent, which provides our support tool
  • SendGrid/Twilio, which provides our transactional email service
  • Infinity, which provide our calls tracking service

6. Transfers of your Personal Data to a foreign country

Your Personal Data will not be transferred by us to any country outside of the United Kingdom or the European Union other than as we mention below:

  • We use Google Analytics to collect information about visitors in order to improve the content and user experience of our site. Google Analytics uses "cookies", to help the website analyse how users use the websites, applications or services. The information generated by the cookie about your use of the websites, applications or services (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the websites, applications or services compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser or within the application, however please note that if you do this you may not be able to use the full functionality of our websites. By using our websites, applications or services you consent to the processing of data about you by Google in the manner and for the purposes set out above. To find out more, see "How Google uses data when you use our partners' sites or apps", (located at www.google.com/policies/privacy/partners/, or any other URL Google may provide from time to time). Google is certified by the U.S. Department of Commerce as being Privacy Shield fully compliant. If you do not wish to have your visits on our sites tracked by Google Analytics, you may opt-out by going to the following web site https://tools.google.com/dlpage/gaoptout 
  • We use Braintree which may involve the transfer of Personal Data by Braintree outside of the European Union. Braintree has its own Privacy Policy which explains things further at www.braintreepayments.com/gb/legal/braintree-privacy-policy
  • We use PayPal which may involve the transfer of Personal Data by PayPal outside of the European Union. Sage Pay has its own Privacy Policy which explains things further at www.paypal.com/en/webapps/mpp/ua/privacy-full
  • We use SendGrid/Twilio as our e-mail platform for all transactional e-mail contact with our customers. Accordingly Personal Data relating to our customers is sent to SendGrid/Twilio both as contact details and content of e-mails sent to customers. SendGrid/Twilio provides a hosted service to us which is hosted in the United States of America. SendGrid/Twilio certifies that it complies with the Privacy Shield framework.
  • We use LiveAgent to provide our support tool. Personal Data entered on this tool will be stored inside of the European Economic Area but may be otherwise processed by LiveAgent in other countries. For a further explanation go to the customer and partners button at https://www.liveagent.com/privacy-policy/

7. How long we will keep your Personal Data

We will keep your Personal Data:

  • until the end of the seventh financial year after your last purchase of goods and/or services from us or
  • where there is no purchase until the end of the third financial year after you provided your Personal Data to us

8. Your GDPR Rights

In addition to the rights mentioned in Sections 9 and 10, the General Data Protection Regulation grants you, as a Data Subject the following Rights:

  • Under Article 15 of the Regulation the right to have confirmation of the processing of any Personal Data of yours, together with the right to a copy (free of charge) of your Personal Data if it is being processed. This Article also gives you the right to have information concerning the processing of your data as earlier set out in this policy.
  • Under Article 16 of the Regulation the right to have any erroneous Personal Data Rectified without delay.
  • Under Article 17 of the Regulation the right to have your Personal Data erased (also known as "The Right to be Forgotten"). You should note that this Right may only be exercised by you in the circumstances set out in Article 17.
  • Under Article 18 of the Regulation the right to have the processing of your Personal Data restricted:
    • If the accuracy of the Personal Data is contested by you for a period which is long enough for us to verify the accuracy of your Personal Data
    • If our processing of your Personal Data is unlawful and you prefer to have the processing restricted rather than having your Personal Data erased
    • We no longer need to process your Personal Data, but you wish to have it preserved to establish or exercise or defend a legal claim
    • You have exercise your right to object to our processing of your Personal Data pursuant to Article 21 of the Regulation (see Section 9 below)

The restriction the exercise of the above right imposes is that save for the storage of your Personal Data, your Personal Data will not be processed by us.

  • Under Article 20 of the Regulation you have the right to receive a copy of your Personal Data that you have provided to us either in relation to any processing consent you have given to us or in respect of the negotiation of a contract for you to purchase our goods and/or services and the fulfilment of any such contracts. You also have the right under this Article to instruct us to transmit your Personal Data as described to another Controller. The Article provides that the data must be provided to you or transmitted to another Controller "in a structured, commonly used and machine-readable format" and we will use the format of XML.

In the first instance you may exercise any of the above rights by sending an email to us at [email protected] or by letter to the Controller sent by ordinary post. It will be important for us to confirm your identity if you choose to exercise any of these rights and you will be asked to provide reasonable proof of your identity by providing a copy of your driving licence or passport and a copy of a utility bill in your name if you do not do so at the time you initially seek to exercise one of the above rights. Such identity documentation will be destroyed by us once your identity is proven to our reasonable satisfaction.

9. Your right to object to the processing of your Personal Data

Under Article 21 of the General Data Protection Regulation you have the right at any time to object to our processing of your Personal Data. If you make use of this right our duty is to cease processing your data unless we can show an overriding legitimate interest to keep processing your Personal Data (such as processing some or all of your Personal Data for accountancy purposes).

In the first instance you may exercise this right by sending an email to us at [email protected] or by letter to the Controller sent by ordinary post. It will be important for us to confirm your identity if you choose to exercise this right and you will be asked to provide reasonable proof of your identity by providing a copy of your driving licence or passport and a copy of a utility bill in your name if you do not do so at the time you initially seek to exercise one of the above rights. Such identity documentation will be destroyed by us once your identity is proven to our reasonable satisfaction.

10. Your right to lodge a complaint with the Information Commissioner

Under Article 77 of the General Data Protection Regulation you have the right to complain to the Information Commissioner about any alleged breach by us of the General Data Protection Regulation. Go to ico.org.uk

11. Whether it is necessary for you to provide your Personal Data

It is necessary for you to provide us with your Personal Data:

  • To enable us to provide the brochure requested;
  • To enable us to provide you with information concerning the goods and/or services you are interested in ordering from us;
  • To ensure that we can enter a contract with you to provide goods and/or services. If you do not provide us with your Personal Data we will be unable to provide our goods and services;
  • To enable us to deal with your request for support; and
  • To enable us to supply you with good and/or services.

12. Do we use automated decision making?

We do not use automated decision making.