How Concrete Calculate UK Collects, Uses & Protects Your Data
Compliant with UK GDPR, Data Protection Act 2018 & Data (Use and Access) Act 2025
This Privacy Policy explains how Concrete Calculate UK ("we", "us", "our"), operated at concretecalculate.co.uk, collects, uses, stores, and protects your personal data when you visit our website or use our construction calculators.
We are committed to protecting your privacy and handling your data in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (provisions in force from February 2026).
Here is a quick summary of how we handle your data. Full details are provided in the sections below.
Usage data, cookies, and any information you voluntarily submit via contact forms or calculator inputs. We do not collect sensitive personal data.
To operate and improve our calculators, analyse website performance, respond to enquiries, and ensure a good user experience for UK construction professionals.
We do not sell your data. We share limited data only with trusted third-party services (analytics, hosting) under strict data processing agreements.
SSL encryption, secure hosting infrastructure, limited staff access, and regular security reviews protect all data processed through our website.
For the purposes of UK data protection law, the data controller is Concrete Calculate UK, the operator of the website concretecalculate.co.uk. As the data controller, we are responsible for determining how and why your personal data is processed.
📧 Data Controller Contact Details:
We only collect data that is necessary and proportionate for the purposes described in this policy. The types of data we may collect are set out below.
⚠️ We Do Not Collect:
We process your personal data only where we have a valid lawful basis under UK GDPR Article 6. The table below outlines each processing purpose, the data involved, and the legal basis applied.
| Purpose | Data Used | Lawful Basis (UK GDPR) | Retention Period |
|---|---|---|---|
| Operate and deliver website & calculators | Usage data, technical data | Legitimate Interests (Art. 6(1)(f)) | Session / 26 months (analytics) |
| Respond to contact form enquiries | Name, email, message content | Legitimate Interests (Art. 6(1)(f)) | 3 years from last contact |
| Website analytics & performance | Anonymised usage & technical data | Legitimate Interests / Consent | 26 months (Google Analytics) |
| Improve calculator accuracy & UX | Aggregated, anonymised usage data | Legitimate Interests (Art. 6(1)(f)) | Up to 3 years (aggregated) |
| Comply with legal obligations | Any relevant data | Legal Obligation (Art. 6(1)(c)) | As required by law |
| Prevent fraud and ensure security | IP address, technical data | Recognised Legitimate Interest (DUAA 2025) | Up to 12 months |
We use cookies and similar tracking technologies to operate our website and understand how visitors use our calculators. Under the Privacy and Electronic Communications Regulations (PECR) and the updated provisions of the Data (Use and Access) Act 2025, we are required to obtain your consent for non-essential cookies.
Consent required: No
These cookies are essential for the website to function. They enable core features like page navigation and calculator functionality. They cannot be switched off.
Consent required: Yes
We use Google Analytics 4 to collect anonymised data about how visitors use our site. IP addresses are anonymised. You can opt out via our cookie banner.
Consent required: Yes
These cookies remember your preferences (e.g. unit settings in calculators) to improve your experience on return visits.
Consent required: Yes
We currently do not use advertising or marketing cookies. Should this change, we will update this policy and seek fresh consent.
🍪 Managing Your Cookie Preferences:
We do not sell, rent, or trade your personal data to any third party for marketing purposes. We share data only where strictly necessary with the following trusted service providers, who act as data processors on our behalf under written data processing agreements.
⚠️ We Will Also Disclose Data If:
Some of our third-party processors (such as Google) may transfer data outside of the UK. Where this occurs, we ensure such transfers are protected by appropriate safeguards recognised under UK data protection law, including the UK International Data Transfer Agreement (IDTA) or adequacy regulations. The UK–US Data Bridge arrangement provides a valid transfer mechanism for transfers to participating US organisations.
Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data. We will respond to all valid requests within one calendar month of receipt.
Request a copy of the personal data we hold about you (Subject Access Request / SAR).
Ask us to correct any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where there is no compelling reason for us to continue processing it ("right to be forgotten").
Ask us to suspend processing of your data in certain circumstances, for example while accuracy is being verified.
Receive your data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
✅ How to Exercise Your Rights:
We take data security seriously and implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security measures include:
All data transmitted between your browser and our website is encrypted using SSL/TLS (HTTPS). Look for the padlock icon in your browser address bar.
Our website is hosted on secure, UK-based or compliant servers with regular security patching, access controls, and data backup procedures.
Access to any personal data is strictly limited to authorised personnel only, on a need-to-know basis, with strong password policies enforced.
We conduct regular security reviews and promptly address any identified vulnerabilities. Our privacy practices are reviewed at least annually.
⚠️ Data Breach Notification: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours as required by UK GDPR, and will notify affected individuals without undue delay where required.
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. We do not keep data longer than needed. Once the retention period expires, data is securely deleted or anonymised.
📅 Retention Summary:
Our website contains links to external sites including UK Government resources, British Standards Institution, NHBC, and professional bodies. These links are provided for your convenience and reference. Once you leave our website, we are not responsible for the privacy practices of those external sites. We encourage you to read the privacy policy of any website you visit.
We may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements (such as the Data (Use and Access) Act 2025 updates), or improvements to our services. When we make significant changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
📋 Version History:
If you are unhappy with how we have handled your personal data, we ask that you contact us first at privacy@concretecalculate.co.uk so we can try to resolve the matter. However, you also have the right to lodge a complaint directly with the UK's supervisory authority:
🏛️ Information Commissioner's Office (ICO):