Safety & Privacy

Privacy notice 

The Organisation is aware of its obligations under the General Data Protection Regulation (GDPR) and domestic data protection legislation, and is committed to processing your data securely and transparently. This privacy notice sets out, in line with current data protection obligations, what personal data we collect, how we use it, your rights, and how to contact us with any questions.

Data controller details

The Organisation is a data controller, meaning that it determines the processes to be used when using your personal data. We can be contacted via email at  info@streetsolutionsuk.com or write to us at Street Solutions UK, Unit A6, Cuba Industrial Estate, Bolton Road North, Ramsbottom, Bury BL0 0NE.

Data protection principles

In relation to your personal data, we will:

• process it fairly, lawfully and in a clear, transparent way

• collect your data only for reasons that we outline in this notice

• only use it in the way that we have told you about

• ensure it is correct and up to date

• keep your data for only as long as we need it 

• process it in a way that ensures it will not be used for anything that you are not aware of or have consented to (as appropriate), lost or destroyed. 

Types of data we process

We collect or use the following information to provide our services:

• Names and contact details

• Addresses

• Purchase or account history

• Payment details (including card or bank information for transfers and direct debits)

• Health and safety information

• Account information

• Information relating to loyalty programmes

• Website user information (including user journeys and cookie tracking)

• Photographs or video recordings of work or services, or in relation to customer reviews

• Information relating to compliments or complaints
  

How we collect your data

We collect data about you in a variety of ways when you use our services or contact us. This may include:

• Directly from you, for example when you call us, email us, complete a web form, or contact us via social media

• From insurance companies, where they are arranging work on your behalf

• From details about previous jobs or quotes we have provided to you

• From information you provide to us when making an enquiry about our services
  

Personal Information We Collect from our website

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

Why we process your data

The law on data protection allows us to process your data for certain reasons only:

• in order to perform the contract that we are party to

• in order to carry out legally required duties

• in order for us to carry out our legitimate interests

• to protect your interests and 

• where something is done in the public interest

• where we have obtained your consent.

All of the processing carried out by us falls into one of the permitted reasons. 

We only collect and use your personal information where we have a lawful reason to do so under UK data-protection law.

The table below explains the main purposes for which we process your data and the lawful basis relied upon for each activity.

How we use your information

We use the Order Information that we collect to process and manage any orders placed through our Site. This includes:

• processing your payment and verifying payment details;

• arranging delivery or collection of your purchase;

• providing you with invoices, receipts and order confirmations; and

• contacting you about your order if we need to clarify, update or resolve any issues.

We also use Order Information to:

• Communicate with you about your purchase, your account, or customer service enquiries;

• Detect and prevent fraud or misuse of our services by screening orders and transactions for potential risk;

• Meet our legal obligations, such as record-keeping for tax, accounting or regulatory purposes; and

• Send you updates, offers or marketing information about our products and services — but only when this is consistent with the marketing preferences you have selected. You can change these preferences or opt out at any time by following the unsubscribe link in our emails or by contacting us directly.

We use the Device Information that we collect to:

• help us identify and protect against potential risk and fraud (for example, by checking your IP address and browser data);

• understand how our customers use and navigate our Site so we can improve functionality, design and user experience;

• generate anonymised analytics and statistics about website performance and usage trends; and

• assess the effectiveness of our marketing and advertising campaigns.

We will only use your personal data when we have a lawful basis to do so — typically to perform a contract with you, comply with a legal obligation, or where it is in our legitimate business interests (for example, to prevent fraud or improve our services).

Special categories of data

Special categories of data are data relating to your: 

• health

• sex life

• sexual orientation

• race

• ethnic origin

• political opinion

• religion

• trade union membership 

• genetic and biometric data.

We must process special categories of data in accordance with more stringent guidelines. Most commonly, we will process special categories of data when the following applies:

• you have given explicit consent to the processing 

• we must process the data in order to carry out our legal obligations 

• we must process data for reasons of substantial public interest

• you have already made the data public. 

We do not intentionally collect special category data (e.g., health data), unless it is relevant for specific safety-related services (e.g., access issues, vulnerable customer information). If we ever require such data, we will seek explicit consent.

Sharing your data

We will only share your personal data within our business where it is necessary to deliver the services you have requested or to fulfil our contract with you.

We may share your information with carefully selected third parties who help us operate our business and provide our services to you. We only share the minimum data necessary, and we require all third parties to respect the security of your personal data and to treat it in accordance with the law.

We may share your personal information with:

• Service providers and suppliers who support our website, fulfil orders, process payments, arrange shipping, or provide IT and system administration services;

• Insurance companies, external auditors, or professional advisers (such as accountants, solicitors and consultants) who help us meet our legal and business obligations;

• Regulatory bodies, law-enforcement authorities, or other organisations where we are legally required to share information (for example, to comply with tax, employment or consumer-protection laws);

• Previous employers or referees, where this is necessary for employment-related checks; and

• Other parties where you have given your explicit consent or where it is otherwise lawful to do so.

We use third-party platforms and analytics tools to help us run our online services and understand how visitors use our Site:

• We use Shopify to power our online store – you can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy.

• We use Google Analytics to help us understand how customers browse and interact with our Site – you can read more about how Google uses your information here: https://www.google.com/intl/en/policies/privacy/. You can opt out of Google Analytics by visiting: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your personal information if required to do so by law – for example, to comply with a subpoena, search warrant, or other lawful request – or where necessary to protect our rights, property or safety, or that of others.

We do not sell or rent your personal data to any third party, and we do not share it with others for their own marketing purposes.

International Data Transfers

Some of the third parties we work with (for example, Shopify and Google) are based outside the United Kingdom or may process your personal data using servers located outside the UK. This means that your information may be transferred to and stored in countries that do not always provide the same level of data protection as the UK.

Whenever we transfer your personal data outside the UK, we ensure that a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

• We will only transfer your personal data to countries that have been deemed by the UK government to provide an adequate level of protection for personal data (known as an “adequacy decision”); or

• Where we use certain service providers, we may use specific contracts or other safeguards approved by the UK Information Commissioner’s Office (ICO) that give your personal data the same level of protection as it has in the UK (for example, the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses).

You can contact us if you would like more information about the safeguards we use when transferring your personal data outside the UK.

Protecting your data

We take the security of your personal information very seriously. In line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we have implemented a range of technical and organisational measures designed to protect your data from accidental loss, unauthorised access, misuse, alteration, or disclosure.

We review these measures regularly to ensure they remain appropriate to the level of risk and to the sensitivity of the data we process.

How and Where Your Data Is Stored

Your personal data may be stored in secure digital formats, including:

• Company email accounts – protected by strong passwords, secure authentication, and encryption in transit;

• Company-owned mobile devices – secured with access controls and device management systems;

• Cloud-based invoicing and scheduling systems – hosted by reputable third-party providers using encrypted data storage and transmission where available.

• Customer data submitted via our website – transmitted using encryption and stored securely on servers managed by trusted hosting providers that comply with recognised data security standards.

We do not store personal data in paper files or allow unauthorised physical access to any premises or equipment containing personal data.

Security Measures in Place

To maintain the confidentiality, integrity, and availability of your data, we use a combination of preventative and monitoring measures, including:

• Multi-factor authentication (MFA) and strong password protection for all accounts and systems;

• Access controls restricting data access to authorised personnel only (typically the business owner or designated system administrator);

• Antivirus, anti-malware and firewall protection on all devices;

• Regular system updates and software patching to protect against security vulnerabilities;

• Secure data backups stored in encrypted form to prevent data loss; and

• Periodic security reviews and audits of our systems and practices.

Data Sharing and Third Parties

Where we share your personal data with trusted third parties (for example, cloud storage providers, IT service partners, or professional advisers), we only do so under written agreements that require them to:

• process data strictly in accordance with our documented instructions;

• maintain appropriate technical and organisational security measures; and

• comply with all applicable data protection laws.

We only work with third parties who can demonstrate adequate data protection standards and we regularly review their compliance.

How long we keep your data for

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements.

In determining how long we retain your personal data, we consider the nature of the data, the purpose for processing it, our legal obligations, and the potential risk of harm from unauthorised use or disclosure.

Below is a summary of our standard data retention periods for customer data:

After these periods, your personal data will be securely deleted or anonymised unless we are legally required to retain it for longer.

Your rights in relation to your data

The law on data protection gives you certain rights in relation to the data we hold on you. These are:

• Your right of access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. Read more about the right of access.

• Your right to rectification - You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. Read more about the right to rectification.

• Your right to erasure - You have the right to ask us to delete your personal information. Read more about the right to erasure.

• Your right to restriction of processing - You have the right to ask us to limit how we can use your personal information. Read more about the right to restriction of processing.

• Your right to object to processing - You have the right to object to the processing of your personal data. Read more about the right to object to processing.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. Read more about the right to data portability.

• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. Read more about the right to withdraw consent.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

If you make a request, we must respond to you without undue delay and in any event within one month.

Making a complaint

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint