Legal
Privacy Policy
How we collect, use and look after the personal information you give us.
Last updated
The short version: we use your details to price your job and reply to you, and for nothing else. We don’t sell them, we don’t market to you, and this website sets no cookies. The rest of this page is the detail behind that, written to be read rather than to be impressive.
Who we are
Victory Surfacing Ltd is a tarmac and surfacing contractor working across Surrey and the surrounding counties. When you send us an enquiry or become a customer, we are the data controller for the personal information you give us. That means we decide what happens to it, and we are the ones responsible for looking after it.
You can contact us about anything on this page by email at info@victorysurfacingltd.co.uk or by phone on 07476 660 797.
This policy covers this website and the enquiries that come through it. It does not cover other websites we link to, which have their own policies.
What we collect
We collect what we need to price a job and get back to you, and not much else.
When you fill in the quote form
- Your name and email address — required, because we cannot reply without them.
- A description of the job — required, because it is the thing you are asking us about.
- Your phone number, postcode, and the type of work — all optional. The postcode tells us whether the job is in our area and how far the travel is; you are welcome to leave it out.
When you call or email us
Whatever you choose to tell us. We do not record calls. Please don’t send financial details, or anything else sensitive, by email — ordinary email is not a secure channel, and we would rather take it over the phone.
Automatically, when you visit
- Our hosting provider records the usual technical details of a web request — IP address, browser type and the page asked for — to keep the site running and to spot abuse.
- When you submit the quote form, we hold your IP address in memory for fifteen minutes so that automated scripts cannot flood the form. It is never written to a database or a file, and it is not connected to your enquiry.
- If you have agreed to analytics, we receive anonymous, aggregated counts of page views. These do not identify you and set no cookies. See our Cookie Policy.
We do not ask for special category data — health, ethnicity, political opinions and the like — and you should not send it to us.
Why we use it, and our lawful basis
UK GDPR requires us to have a specific lawful reason for each thing we do with your information. Ours are:
| What we do | What we use | Lawful basis |
|---|---|---|
| Replying to your enquiry and preparing a quote | Name, email, phone, postcode, job details | Article 6(1)(b) — steps taken at your request before entering a contract |
| Carrying out work you have booked, and invoicing for it | The above, plus the site address | Article 6(1)(b) — performing our contract with you |
| Keeping accounting and tax records | Invoices and customer details | Article 6(1)(c) — our legal obligations to HMRC |
| Keeping a record of work done, in case of a warranty claim or a dispute | Job records and correspondence | Article 6(1)(f) — our legitimate interest in being able to stand behind our work |
| Protecting the site and the form from abuse | IP address | Article 6(1)(f) — our legitimate interest in a working website |
| Anonymous website analytics | Page views, with no identifier | Article 6(1)(a) — your consent, which you can withdraw at any time |
We never use your details for marketing. We do not sell them, we do not add you to a mailing list, and we do not pass them to other trades looking for work.
Nothing we do involves automated decision-making or profiling. A person reads every enquiry.
How long we keep it
| What | How long | Why |
|---|---|---|
| Enquiries that did not lead to work | 12 months from your last contact with us | So we can pick the thread back up if you come back to us |
| Customer records where we carried out work | 6 years after the end of the tax year the work was invoiced in | HMRC record-keeping rules, and the six-year window for contract claims under the Limitation Act 1980 |
| IP address used to rate-limit the form | 15 minutes, in memory only | Never written to disk |
| Web server logs | A short period set by our hosting provider | Security and diagnosing faults |
| Your analytics choice | 12 months, stored on your own device | So we are not asking you on every visit |
When a period runs out we delete the records. Where something cannot be deleted immediately — a backup, say — we put it beyond use until it can be.
Who else sees it
We keep the circle deliberately small.
- 20i Ltd — hosts our email. Enquiries arrive in a mailbox on their UK servers.
- Resend — takes what you type into the quote form and delivers it to that mailbox.
- Vercel — hosts this website and serves its pages.
- Our accountant — sees invoices and customer names, but only where work was actually carried out.
Each of these is a data processor acting on our instructions under a contract. None of them is permitted to use your details for their own purposes.
We may also disclose information where the law requires it — a court order, or a legal obligation we cannot avoid. That has not happened, and we would not do it lightly.
Where it is held
Our mailbox is hosted in the United Kingdom. Some of our other providers are based in the United States, so information may be processed there.
Where personal data leaves the UK, the transfer is covered by the safeguards UK law recognises — usually the International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework. In plain terms: your information keeps essentially the same protection abroad as it has here.
Cookies and analytics
This website sets no cookies. The only thing we store on your device is your answer to the cookie question, so that we don’t keep asking it.
Analytics are optional, off until you say otherwise, and anonymous when switched on. The full detail — including a control to change your mind — is on our Cookie Policy page.
Your rights
Under UK GDPR you have the right to ask us to:
- Give you a copy of the personal data we hold about you (a “subject access request”)
- Correct anything that is wrong or out of date
- Delete it, where we have no continuing reason to keep it
- Restrict what we do with it while a query is sorted out
- Stop using it where we rely on legitimate interests
- Send it to you or another provider in a portable format
- Withdraw your consent to analytics — at any time, with no consequence, on the Cookie Policy page
Email info@victorysurfacingltd.co.uk and tell us what you want. It costs nothing, and we will respond within one month. We may ask you to confirm who you are first — that is to stop us handing your details to somebody else.
Complaints
If you are unhappy with how we have handled your information, please tell us first — most things are quicker to fix that way.
If we cannot put it right, you can complain to the Information Commissioner’s Office, the UK regulator for data protection:
- ico.org.uk/make-a-complaint
- 0303 123 1113
Coming to us first is not a condition of complaining to the ICO — you can go straight to them if you would rather.
Changes to this policy
If this policy changes, the date at the top of the page changes with it. Where a change materially affects how we use your information, we will say so on this page rather than leave you to spot it.
Questions about this policy?
Email info@victorysurfacingltd.co.uk or call 07476 660 797. We aim to answer within five working days.

