Privacy Policy
Last updated: 18/03/26
Outdoor Aggregates (“we”, “us”, “our”) operates the website https://outdooraggregates.com (the “Site”) and the online store accessible through it (together the “Service”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit our Site, place an order, create an account, sign up to our newsletter, contact us or otherwise interact with our Service. We are the data controller for the personal data we process, except where clearly stated otherwise (e.g. payment processors or delivery companies acting as separate controllers). Our company details:
Outdoor Aggregates, Unit 43 Newhaven Enterprise Centre, BN9 9BA, United Kingdom
Email: info@outdooraggregates.com
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. Information We Collect
We may collect the following types of personal data:
Data you give us directly
- Name, delivery address, billing address
- Email address
- Telephone number
- Company name / trading name (trade / business customers)
- Order notes or special delivery instructions
- Payment information (handled securely by our payment processor – we do not store full card details)
- Any information you provide when contacting us (enquiries, complaints, returns, reviews)
Automatically collected data
- IP address
- Browser type and version
- Operating system
- Device information
- Pages visited, time and date of visit, time spent on pages
- Referring / exit pages
- Approximate geographic location (derived from IP)
- Cookies and similar technologies (see our Cookie Policy below)
Data from third parties
- Delivery status updates from carriers (e.g. DPD, UPS, Palletways)
- Payment confirmation from Stripe / PayPal
- Fraud prevention / screening information from our payment provider or fraud tools
2. How We Use Your Personal Data & Lawful Basis
We process personal data only when we have a lawful basis. The main bases we rely on are:
| Purpose | Personal data used | Lawful basis (UK GDPR Art. 6) | Legitimate interests (where applicable) |
| Process and fulfil your order | Name, address, email, phone, payment info | Contract (Art. 6(1)(b)) | — |
| Send order confirmation & updates | Email, phone, order details | Contract | — |
| Handle returns, refunds, complaints | Name, order info, contact details | Contract + Legal obligation | — |
| Prevent fraud & protect our business | IP, device, order patterns | Legitimate interests | Fraud prevention, business protection |
| Register & manage customer accounts | Email, name, password, order history | Contract (if account created) | — |
| Marketing emails (promotions, offers) | Email, name, purchase history (limited) | Consent (opt-in) | — |
| Analyse website usage & improve site | IP, browsing behaviour, cookies | Legitimate interests | Understand user behaviour, improve UX |
| Comply with legal obligations | All relevant data | Legal obligation (Art. 6(1)(c)) | — |
| Exercise / defend legal claims | All relevant data | Legitimate interests | Protect our legal rights |
3. Marketing Communications
We will only send you marketing emails (news, product offers, seasonal tips for aggregates / landscaping) if you have expressly consented (e.g. ticked the box at checkout or subscribed via footer form).
You can unsubscribe at any time by clicking the link in any marketing email or contacting us. We honour unsubscribe requests promptly.
We do not sell your data to third-party marketing companies.
4. Sharing Your Personal Data
We share personal data only when necessary:
- Payment processors (e.g. Stripe, PayPal) – for secure payment handling
- Delivery / courier companies (e.g. DPD, UPS, pallet network) – to deliver your goods
- IT / hosting providers (e.g. SiteGround / WooCommerce infrastructure)
- Fraud prevention / analytics services (e.g. Google Analytics, Hotjar – pseudonymised where possible)
- Professional advisers (accountants, lawyers) when required
- Authorities if legally required (HMRC, police, courts)
We do not sell your personal data.
5. International Transfers
Some recipients (e.g. certain cloud / analytics providers) may be located outside the UK. Where this occurs we ensure appropriate safeguards are in place, typically:
- UK International Data Transfer Agreement (IDTA) or Addendum
- Adequacy decision
- Standard Contractual Clauses (old EU SCCs + UK Addendum)
6. Data Retention
We keep personal data only as long as necessary:
- Order / tax / accounting records → 6 years after order (legal obligation – VAT / HMRC)
- Account data → until account deletion request (subject to above)
- Marketing consent lists → until you unsubscribe / withdraw consent
- Website logs / analytics → typically 14–26 months (configurable in tools)
- Enquiry / support tickets → 12–24 months after closure
After these periods we securely delete or anonymise data.
7. Your Rights Under UK GDPR
You have the following rights (subject to some exceptions):
- Right to be informed
- Right of access (SAR – Subject Access Request)
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object (including to direct marketing & profiling)
- Rights related to automated decision-making
To exercise any right, email us at info@outdooraggregates.com. We usually respond within one month (free of charge in most cases). You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint
8. Security
We implement appropriate technical and organisational measures to protect your data (e.g. SSL/TLS encryption on the Site, secure hosting, access controls, regular site updates. However, no method of transmission over the internet is 100% secure.
9. Cookies & Similar Technologies
Our Site uses cookies and similar technologies. Please see our separate Cookie Policy for details, including how to manage preferences. We use:
- Essential cookies (for cart, checkout, login)
- Analytics cookies (Google Analytics – anonymised IP)
- Marketing / advertising cookies (if you enable them)
10. Children’s Data
Our Service is not directed at children under 16. We do not knowingly collect data from children under 16.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last updated” date. Significant changes will be communicated via email or prominent notice on the Site.
12. Contact Us
For any privacy questions, requests or complaints:
Email: info@outdooraggregates.com
Thank you for trusting us with your data.