Privacy Policy

Under this policy you will learn about how we handle your information when you visit the website. It’s vital to protect the privacy and personal data collected and important for us to manage our activities offline and online according to the data, at the same time keeping it confidential. This document is organized into particular sections which enables you to quickly navigate to your relevant topic.

When is your data collected

You may give us information about you by filling in forms on our website www.universalpaving.co.uk or by corresponding with us in person, by phone, email or otherwise. This includes information you provide when you:

Buy our products - your contact details, order details, payment information is collected,
Use our website and order online - your name, email address, order details.
Follow us on social media – ip address, social media profile
Subscribe to our newsletter – email address and ip address
Fill out any form or write to us – feedback info, usage, browser information
Review our products or any service – name, contact details, ip address, reviews
Use our trade account – financial information, job and occupation details, documents/proof of identification, age or other personal info

Identity and contact details of the controller of your data

Universal Paving UK Ltd
Manchester,
United kingdom
Telephone: 07480 959706
Email: info@universalpaving.co.uk

Purpose and legal basis for processing data

For following purposes we process/use your data:

Providing you with any brochure, estimate or quotation you have asked us to provide.
Sending you, from time to time, emails about similar goods and services we offer. Each email will include a link to enable you to stop the sending of such emails
Providing you, at your request, information concerning the goods and/or services you are interested in ordering from us
Supplying the goods and/or services ordered by you
Contacting you concerning your order
For payment of our charges
To send you communications required by law or which are necessary to inform you about our changes to the services we provide you. Example, updates to this privacy notice, product recall notices, and legally required information relating to your orders. These service messages will not include any promotional content and do not require prior consent when sent by email or text message.
To respond to your queries, refund requests and complaints. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you.
For accountancy purposes including but not limited to disclosing those of your personal data as appears on our invoice to our accountants and/or auditors if requested by them to enable our annual accounts to be prepared.
For helping us to update, expand and analyse our records, identify new customers, and create more tailored advertising to provide products and services that may be of interest to you. Universal paving uses web site navigational information to operate and improve the company’s websites.
Universal Paving partners with third parties to display advertising on our websites and services or to manage our advertising on other sites. Our third-party partners may use cookies or similar technologies provide you advertising based on your browsing activities and interests.
The use by us of analytical software concerning our web site
For payment processing services enable us to process payments by credit card, bank transfer or other means. If we don’t collect your personal data during checkout, we won’t be able to process your order and comply with our legal obligations.

We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes. The support and maintenance of our web site and other software used by us or those who will process your personal data on our behalf.

To ensure greater security, universal paving shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

Some of these services may also enable the sending of timed messages to the user, such as emails containing invoices or notifications concerning the payment.

The lawful basis for the processing of your personal data for the second purpose listed above (where you have not purchased goods and services from us) is the consent you have given to us. Where you have given your consent it may be withdrawn by you at any time by sending an email to us at info@universalpaving.co.uk

Where you have purchased goods and/or services from us the lawful basis for the processing of your personal data for the second purpose is our legitimate interest under article 6.1(f) of the general data protection regulation.

The lawful basis for the processing of your personal data for purposes listed above is provided by article 6.1(b) of the general data protection regulation.

We have a "legitimate interest" under article 6.1(f) of those regulations for all the other purposes listed above and for more information on this please see section 4 below.

Legitimate interests

We have a "legitimate interest" under article 6.1(f) of the general data protection regulation to process your personal data for some of the purposes mentioned in section 3 above. As required by that regulation we give the following further information for each of those purposes:

Processing your personal data for accountancy purposes including but not limited to disclosing those of your personal data as appears on our invoice to our accountants and/or auditors if requested by them to enable our annual accounts to be prepared
The use by us of analytical software concerning our web site. This will enable us to improve users’ experiences of our web site
Processing your personal data for the support and maintenance of our web site and other software used by us or those who will process your personal data on our behalf. This will ensure the proper support and maintenance of our business systems.
Sending you, from time to time, emails about similar goods and services we offer. This will enable you to be aware of developments in the goods and services we offer our customers. Each email will include a link to enable you to stop the sending of such emails.

Recipients of your personal data

Personal data of yours will only pass to the following:

The contractors whom we used for delivering goods and/or services to you. We may from time to time change those contractors or use one or more contractors for delivery.
The electronic payments providers (paypal) used by us to collect our charges from you.
Our accountants and auditors who are A&M ASSOCIATES
Third parties will process your personal data on our behalf :
Google - like many commercial organisations we make use of services provided by google inc. Those services include:
- Passing the first line and post code of a customer’s address to google for the purposes of rendering that address into map co-ordinates which calculates from those co-ordinates locates us;
- By using google analytics to analyse the use of our web site which includes passing some personal data of web site users (e.g. a user’s ip address) to google. The analysis of how people use our web site is extremely important to us as it enables us to maintain our web site to the highest standard and ensure that your visit is pleasant and as efficient as possible
Data about Universal Paving UK visitors, customers and attendees with the company’s service providers to ensure the quality of information provided, and with third-party social networking and media websites, such as facebook, for marketing and advertising on those websites. Unless described in this privacy statement, Universal Paving UK does not share, sell, rent, or trade any information with third parties for their promotional purposes.
Billing
- Universal Paving UK uses a third-party service provider to manage credit card processing. This service provider is not permitted to store, retain, or use billing information except for the sole purpose of credit card processing on the company’s behalf. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.
Compelled disclosure
- Universal Paving UK reserves the right to use or disclose information provided if required by law or if the company reasonably believes that use or disclosure is necessary to protect the company’s rights and/or to comply with a judicial proceeding, court order, or legal process.

Transfers of your data to a foreign country

Your personal data will not be transferred by us to any country outside of the united kingdom or the European Union other than as we mention below:

We use google analytics to collect information about visitors in order to improve the content and user experience of our site. Google analytics uses "cookies", to help the website analyse how users use the websites, applications or services. The information generated by the cookie about your use of the websites, applications or services (including your ip address) will be transmitted to and stored by google on servers in the united states. Google will use this information for the purpose of evaluating your use of the websites, applications or services compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on google's behalf. Google will not associate your ip address with any other data held by google. You may refuse the use of cookies by selecting the appropriate settings on your browser or within the application, however please note that if you do this you may not be able to use the full functionality of our websites. By using our websites, applications or services you consent to the processing of data about you by google in the manner and for the purposes set out above. To find out more, see "how google uses data when you use our partners' sites or apps", (located at google.com/policies/privacy/partners, or any other URL google may provide from time to time). Google is certified by the US department of commerce as being privacy shield fully compliant. If you do not wish to have your visits on our sites tracked by google analytics, you may opt-out by going to the following web site https://tools.google.com/dlpage/gaoptout
Universal Paving UK uses external companies for data storage, maintaining the technical operation of the website and general ict systems. These companies are the data processor with regards to the personal data for which Universal Paving UK is the data controller. By accepting this personal data policy, you accept that Universal Paving UK also allows the data for which you are the data controller be processed by the same data processor.
The data processor shall solely act according to instructions from Universal Paving UK. By accepting these terms and conditions, you authorise Universal Paving UK to give such instructions to the data processor which are necessary for the processing of data in accordance with this personal data policy and for the purpose of use of the website.
The data processor has made necessary technical and organisational safety measures against the information being accidentally or illegally destroyed, lost or deteriorated, and against the information coming to the knowledge of unauthorised persons, is misused or in other ways is processed in violation with the act on processing of personal data. On your request - and against remuneration of the data processor's current hourly rates at any time for such work - the data processor shall supply you with sufficient information to demonstrate that the above-mentioned technical and organisational safety measures have been made.
Some of these data processors and third party services are located outside of the European Union, such as in the us. You consent to us using data processors in unsecure third countries provided that there is a legal framework governing the transfer of your personal data, for example if the company is part of the EU-US privacy shield framework.
The hosting facilities for our website are situated in UK and India. The European commission has made an "adequacy decision" with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European commission, a copy of which you can obtain from https://ec.europa.eu/info/law/law-topic/data-protection_en.
Website developers are situated in UK and India. The European commission has made an "adequacy decision" with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the European commission, a copy of which can be obtained from https://ec.europa.eu/info/law/law-topic/data-protection_en .

How long we keep your data

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.

Once the retention period expires, personal data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

Yours's general data protection regulation rights (GDPR)

The general data protection regulation grants you, as a data subject the following rights with respect to your personal data:

Under article 15 of the regulation the right to have confirmation of the processing of any personal data of yours, together with the right to a copy (free of charge) of your personal data if it is being processed. This article also gives you the right to have information concerning the processing of your data as earlier set out in this policy.
Under article 16 of the regulation the right to have any erroneous personal data rectified without delay.
Under article 17 of the regulation the right to have your personal data erased (also known as "the right to be forgotten"). You should note that this right may only be exercised by you in the circumstances set out in article 17.
Under article 18 of the regulation the right to have the processing of your personal data restricted:
- If the accuracy of the personal data is contested by you for a period which is long enough for us to verify the accuracy of your personal data
- If our processing of your personal data is unlawful and you prefer to have the processing restricted rather than having your personal data erased
- We no longer need to process your personal data, but you wish to have it preserved to establish or exercise or defend a legal claim
- You have exercise your right to object to our processing of your personal data pursuant to article 21 of the regulation

The restriction the exercise of the above right imposes is that save for the storage of your personal data, your personal data will not be processed by us.

Under article 20 of the regulation you have the right to receive a copy of your personal data that you have provided to us either in relation to any processing consent you have given to us or in respect of the negotiation of a contract for you to purchase our goods and/or services and the fulfilment of any such contracts. You also have the right under this article to instruct us to transmit your personal data as described to another controller. The article provides that the data must be provided to you or transmitted to another controller "in a structured, commonly used and machine-readable format" and we will use the format of xml.
Under article 21 of the general data protection regulation you have the right at any time to object to our processing of your personal data. If you make use of this right our duty is to cease processing your data unless we can show an overriding legitimate interest to keep processing your personal data (such as processing some or all of your personal data for accountancy purposes).
Under article 77 of the general data protection regulation you have the right to complain to the information commissioner about any alleged breach by us of the general data protection regulation. Go to org.uk

In the first instance you may exercise any of the above rights by sending an email to us at info@universalpaving.co.uk or by letter to the controller sent by ordinary post. It will be important for us to confirm your identity if you choose to exercise any of these rights and you will be asked to provide reasonable proof of your identity by providing a copy of your driving licence or passport and a copy of a utility bill in your name if you do not do so at the time you initially seek to exercise one of the above rights. Such identity documentation will be destroyed by us once your identity is proven to our reasonable satisfaction.

Cookies and other technologies

As described above, we sometimes collect anonymous information from visits to our site to help us provide better customer service. For example, we keep track of the domains from which people visit and we also measure visitor activity on the Universal Paving UK website, but we do so in ways that keep information anonymous. We use the information that we collect to measure the number of visitors to the different areas of our site, and to help us make the site more useful to visitors. This includes analysing these logs periodically to measure the traffic through our servers, the number of pages visited and the level of demand for pages and topics of interest. The logs may be preserved indefinitely and used at any time and in any way to prevent security breaches and to ensure the integrity of the data on our servers.

We collect the anonymous information we mentioned above through the use of various technologies, one of which is called "cookies". A cookie is an element of data that a website can send to your browser, which may then be stored on your hard drive. For example, on a website with a login system (if users register for it), cookies are used to save the visitor's password so that it does not have to be entered at each new visit.

This anonymous information is used and analysed only at an aggregate level to help us understand trends and patterns. None of this information is reviewed at an individual level. If you do not want any transaction details used in this manner, you can disable your cookies.

The following list outlines what we use cookies for:

Google analytics: google analytics sets cookies to help us accurately estimate the number of visitors to the website and what content is most popular. This helps to ensure that our website is responding to your needs in the best way possible.
Shopify comments: when you leave a comment on our blog, three cookies are set to store your name, email address and website. This is so that if you wish to leave another comment, you won’t have to re-type this information.
Shopify user account cookies: these allow you to access your account details and previous orders when you log in.
Twitter cookies: these track how users engage with the twitter feed on our website.

By using and browsing our website, you consent to cookies being used in accordance with this privacy policy.

If you do not consent, you must turn off cookies or refrain from using the site. Most web browsers allow some control of most cookies through the browser settings. To do this, look at the ‘help’ menu on your browser. Switching off cookies should not noticeably restrict your use of this website.

To opt out of being tracked by google analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.

Security

We intend to protect the quality and integrity of our personal information. Universal Paving UK has implemented technologies and security policies to protect the stored personal data of our users from unauthorised access, improper use, alteration, unlawful or accidental destruction and accidental loss. Universal Paving UK Ltd employees and processors who have access to personal data are obliged to respect the privacy of our visitors and the confidentiality of their personal data.

Universal Paving UK will not sell or rent your personal information to anyone.

We will only send personally identifiable information about you to other companies or people when:

We respond to court orders, or any legitimate request by authorities with which we must comply for legal process; or
We find that your actions on our website violate these instructions.

We have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. These steps include the following:

Data minimisation
Secure web hosting and cloud-based servers
Security best practice concerning devices (pcs, laptops, mobile devices), physical access and storage
Staff training and accountability on data protection

You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk, and this risk is specifically disclaimed in our terms and conditions of website.

If you are a logged-in user, it is advisable that you log out of your account at the end of every session and not leave a logged-in account unattended for any period of time, particularly if you use a shared computer or device.

We secure access to all transactional areas of our websites and apps using ‘https’ technology.

Access to your personal data is password-protected, and sensitive data such as payment card information) is secured and tokenised to ensure it is protected.

We regularly monitor our system for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.

Changes to our privacy policy

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy. Universal Paving UK may at any time and without notice make changes to its privacy policy with future effect. We will make an effort to provide reasonable advance notice of any such changes.

How to make a complaint

If you wish to make a complaint about how we have handled your personal information, please contact our data protection lead at info@universalpaving.co.uk, and we will investigate the matter.

If this does not resolve your complaint to your satisfaction, you have the right to lodge a complaint with the information commissioners office on 03031231113 or via email or at the information commissioner’s office, wycliffe house, water lane, wilmslow, cheshire, sk9 5af, england.

Do we use automated decision making

We do not use automated decision making.

Contacting us

Questions regarding this privacy statement or the information practices of the company’s websites and services should be directed to universal paving uk privacy by filling out the contact form.