1. Who is responsible for your data?
CARO DRIVEWAYS LTD is the data controller. We are registered in England and Wales under company number 17167556. Our registered office is 16 Audley Drive
Beeston
Nottingham
England
NG9 2SF.
For privacy questions or requests, email carodriveway@gmail.com. Our trading/contact address is 16 Audley Drive
Beeston
Nottingham
NG9 2SF.
In this notice, data protection law includes the UK GDPR and Data Protection Act 2018 as amended, including by the Data (Use and Access) Act 2025.
2. Information we collect and why
| Information | Purpose | Lawful basis |
|---|---|---|
| Name, email address, phone number, project details and any postcode or address you provide | To answer your enquiry, arrange a visit and prepare a quotation | Taking steps at your request before entering a contract; and our legitimate interest in responding to prospective customers |
| Customer, job, payment and correspondence records | To deliver agreed work, manage accounts, warranties, complaints and legal claims | Contract, legal obligation and legitimate interests |
| Basic server and security logs, such as IP address, browser and request time | To keep the website secure, diagnose faults and prevent abuse | Our legitimate interests in operating a secure service |
| Your external-media preference | To remember whether Google Maps may load | Necessary to respect your choice; optional external media relies on consent |
Please do not send special category information, payment-card details or unnecessary personal information through the enquiry form.
3. Where information comes from
Most information comes directly from you through the form, email, phone or during a site visit. Technical data may be generated by our hosting and security systems. If another person refers you, we may receive your contact details from them.
4. Who we share it with
We share information only where necessary with service providers supporting website hosting, email, IT and business administration; professional advisers; subcontractors where needed to provide a requested service; and authorities where the law requires it. Providers must protect the information and use it only for the agreed purpose.
Google Maps does not load until you accept external media. If loaded, Google receives information such as your IP address and device details under its own privacy terms. Some providers may process information outside the UK; where they do, we require an approved transfer safeguard or another lawful transfer mechanism.
5. How long we keep information
- Unsuccessful or general enquiries: normally up to 24 months after the last contact.
- Customer, contract, invoice and job records: normally six years after the relationship ends, where needed for tax, contract or legal claims.
- Routine server/security logs: normally up to 90 days unless an incident requires longer investigation.
- Cookie preference: six months.
We may keep information longer where the law requires it or a complaint, claim or investigation is ongoing. We securely delete or anonymise it when no longer needed.
6. Your rights
Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, portability, or to object to processing. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. You also have rights relating to automated decisions; we do not use solely automated decision-making about website enquiries.
Email carodriveway@gmail.com to exercise a right. We may need to confirm your identity and will normally respond within the legal time limit.
7. Complaints
Please contact us first so we can try to resolve the issue. You may also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
8. Changes to this notice
We review this notice when our services, providers or the law changes. The date at the top shows the latest revision.