Privacy & Cookie Policy
Last updated: June 2026
1. Introduction
Gravel Direct Ltd (“we,” “us,” “our,” or “Company”) operates graveldirectltd.co.uk (the “Website”). This Privacy & Cookie Policy explains how we collect, use, disclose, and protect your information when you visit our website and use our services.
We are committed to protecting your privacy and ensuring you have a positive experience on our site. Please read this policy carefully. If you do not agree with our policies, please do not use this Website.
2. Data Controller
Data Controller: Gravel Direct Ltd
If you have any questions about this Privacy Policy or our privacy practices, you can contact us at:
- Email: info@graveldirectltd.co.uk
- Phone: 01977 552440
- Address: Middle Oxford St, Castleford WF10 5DF
3. What Personal Data We Collect
We collect personal data only when you voluntarily provide it to us. This includes:
- Contact Information: Name, email address, phone number, postal address
- Order Information: Products purchased, delivery address, payment information
- Account Information: Username, password, account preferences
- Communication Data: Messages you send us via contact forms or email
- Usage Data: Pages visited, time spent on site, links clicked, referral sources (collected via cookies)
- Device Information: IP address, browser type, operating system, device type
4. Why We Collect Your Data
We use your personal data for the following purposes:
- Processing Orders: To fulfill your orders, arrange delivery, and process payments
- Customer Service: To respond to your enquiries and provide support
- Marketing: To send you information about our products, offers, and services (only with your consent)
- Website Improvement: To analyze usage patterns and improve our website functionality
- Legal Compliance: To comply with legal obligations and resolve disputes
- Fraud Prevention: To detect and prevent fraudulent transactions
5. Legal Basis for Processing
Under UK GDPR, we process your personal data on the following legal bases:
- Contract: When processing is necessary to fulfill a contract with you (e.g., processing orders)
- Consent: When you have given us explicit consent (e.g., marketing communications)
- Legal Obligation: When required by law
- Legitimate Interests: When processing is in our legitimate interests (e.g., fraud prevention, website analytics)
6. Sharing with Third Parties
We do not sell or rent your personal data to third parties. However, we may share your information with:
- Delivery Partners: To arrange and track delivery of your orders
- Payment Processors: To securely process payments (PCI-DSS compliant)
- Hosting Providers: To maintain our website infrastructure
- Analytics Services: Google Analytics (anonymized data only)
- Legal Authorities: When required by law or court order
All third parties are bound by strict confidentiality agreements and data protection obligations.
7. How Long We Keep Your Data
- Order Information: Kept for 7 years (legal requirement for tax/accounting records)
- Account Information: Kept until account deletion; can be deleted upon request
- Marketing Communications: Kept until you unsubscribe
- Website Analytics: Anonymized data retained for 26 months
- Support Enquiries: Kept for 2 years after resolution
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right of Rectification: Correct inaccurate personal data
- Right of Erasure: Request deletion of your data (subject to legal obligations)
- Right of Restriction: Restrict processing of your data
- Right of Data Portability: Receive your data in a portable format
- Right to Object: Object to processing for marketing or other purposes
- Right to Withdraw Consent: Withdraw consent for data processing at any time
To exercise any of these rights, please contact us using the details in Section 2. We will respond within 30 days of receipt of your request.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:
- SSL/TLS encryption for data transmitted over the internet
- Secure payment gateways (PCI-DSS Level 1 compliant)
- Regular security audits and updates
- Access controls to limit employee access to sensitive data
- Firewalls and intrusion detection systems
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
10. Cookie Policy
10.1 What Are Cookies?
Cookies are small text files stored on your device that help us recognize you and remember your preferences. We use cookies to:
- Keep you logged into your account
- Remember your shopping cart contents
- Analyze website usage and performance
- Personalize your experience
- Detect fraud and ensure security
10.2 Types of Cookies We Use
| Cookie Type |
Purpose |
Duration |
Consent Required |
| Strictly Necessary |
Site functionality, security, checkout process |
Session or 1 year |
No |
| Performance/Analytics |
Google Analytics, page performance tracking |
2 years |
Yes |
| Functional |
User preferences, language settings |
1 year |
Yes |
| Marketing |
Retargeting, promotional content |
1-2 years |
Yes |
10.3 Managing Cookies
You can control cookies through your browser settings:
- Block all cookies: Most browsers allow you to refuse cookies
- Delete cookies: Clear cookies from your browser history
- Third-party cookies: Most browsers allow you to block third-party cookies
Note: Disabling cookies may affect website functionality and your user experience. Strictly necessary cookies cannot be disabled as they are required for the website to function.
If you have any questions about this Privacy & Cookie Policy or our privacy practices, please contact us:
- Email: info@graveldirectltd.co.uk
- Address: Middle Oxford St, Castleford WF10 5DF
- Phone: 01977 552440
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Phone: 0303 123 1113
