PRIVACY POLICY

1. Who We Are

DrillDirect Ltd ("we", "us", "our") is a specialist diamond core drilling and concrete cutting company based in Warrington, Cheshire. We are the data controller responsible for your personal data.

2. What Data We Collect

We collect the following personal data:

• Contact enquiries: When you submit our contact form, we collect your name, email address, phone number (optional), and the message you send us.
• Communications: If you contact us by phone or email directly, we may retain records of that correspondence.
• Website analytics: We may collect anonymised usage data (pages visited, browser type, approximate location) to help us improve the website. This data cannot identify you personally.

3. How We Use Your Data

We use the data we collect to:

• Respond to your enquiry and provide you with a quote or information about our services
• Arrange site visits and schedule agreed work
• Comply with legal and contractual obligations
• Improve our website and the services we offer

Our lawful basis for processing your data is legitimate interests (responding to business enquiries) and, where a contract is agreed, contract performance.

4. How Long We Keep Your Data

We retain enquiry data for up to 3 years from the date of your last contact with us, or for as long as is necessary to fulfil any ongoing business relationship. Data relating to completed contracts may be retained for up to 7 years for tax and legal compliance purposes. You may request deletion at any time (see Section 7).

5. Who We Share Your Data With

We do not sell, trade, or rent your personal data to third parties. We may share it with:

• Our internal team members who need it to respond to your enquiry or deliver our services
• Trusted IT service providers who host or operate our systems (bound by data processing agreements)
• Legal or regulatory authorities if required by law

6. Cookies

Our website may use essential cookies to ensure the site functions correctly. We do not currently use tracking or advertising cookies. If this changes, we will update this policy and obtain your consent where required.

7. Your Rights

Under UK GDPR, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate or incomplete data
• Erasure: ask us to delete your data ("right to be forgotten")
• Restriction: ask us to limit how we use your data
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interests

To exercise any of these rights, contact us at info@drilldirect.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data correctly.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data in transit.

9. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.