Privacy Policy

Last updated: 30 May 2026

Data controller:

Cement Industries Ltd.

14 Henley Place, London Road, Teynham,

Sittingbourne, England, ME9 9QB

Company number: 15657644

This Privacy Policy explains how we collect, use, and protect personal data when you use Concrete Direct Merchant (the merchant mobile application and website at concretedirectmerchant.uk), together the "Merchant Platform".

Personal data we collect

We may collect and process the following categories of personal data:

Account data: email address, password (stored in hashed form), user role, and email verification status.
Social login (optional): if you sign in with Google, we receive identifiers and email address from Google as permitted by your Google account settings.
Business profile data: company name, registration number, VAT number, contact persons, phone numbers, registered business address, concrete plant or depot address, and Delivery Area subscription settings.
Operational data: jobs assigned to your account, quotes, order and delivery statuses, production and dispatch information, invoices, proformas, subscription plan information, and uploaded documents (such as invoice PDFs) where you use upload features.
Customer data received through the platform: names, phones, delivery addresses, and site details needed to quote and fulfil orders (which you must use only for order administration).
Communications: messages sent through in-app chat and support channels.
Device and technical data: push notification tokens, device and platform type, app version, IP address, and server logs for security and troubleshooting.
Local app storage: the mobile app may store preferences and UI state on your device.

Service notifications (email and push)

We send transactional service notifications by email and, where you enable notifications on your device and we hold a valid push token, by push notification. These messages keep you informed about your merchant account and activity on the Merchant Platform.

Depending on your jobs, quotes, and account, notifications may relate to: new customer job requests and quote activity; order and delivery status at each stage of the workflow you manage on the platform; payment status, proformas, and invoices (including documents you upload or receive); subscription and Delivery Area changes; in-app chat and support messages; and other account events (such as verification, security, or changes to your business profile or account status).

These are service messages about your use of the platform, not third-party advertising. Optional marketing, if we offer it in future, would be subject to separate consent where required by law.

You can turn off push notifications in your device settings. Some emails (for example security, legal, or tax-related notices) may still be sent where necessary to operate the service or meet legal obligations.

How we use your data

We process personal data to create and manage your merchant account, provide access to customer job requests within your Delivery Area, support quoting and order workflow, issue platform subscription documents, provide maps and address services, send service notifications as described above (email and push), maintain security, prevent abuse, keep audit logs, and comply with legal obligations.

Our legal bases under UK GDPR include performance of a contract, legitimate interests, and legal obligation. Where required, we will ask for your consent (for example for optional marketing, if offered).

We do not intentionally collect special category data (such as health data).

Closing your account

You can close your account in the mobile app or website under Account → Close account.

After closure you will not be able to log in. We will stop using your personal data for active account management and optional marketing where applicable.

Closing your account does not delete order, invoice, job, or tax records we are required or permitted to keep under UK law.

Retention

We retain personal data for as long as your account is active and as needed for jobs, invoicing, legal and tax retention, and dispute resolution.

After account closure, we may retain order, invoice, job, and related records containing personal data for up to six years from the end of the relevant financial year or from the date of the document (as applicable under UK Corporation Tax and VAT rules), or longer if required by law, an HMRC enquiry, late filings, or legal claims.

Backup and log retention periods depend on operational and security requirements.

You may request erasure of personal data not subject to these obligations by contacting contact@cementindustries.co.uk. We will respond within one month where UK GDPR applies.

Security

We use technical and organisational measures including encryption in transit (HTTPS), access controls, and hashed passwords. No method of transmission or storage is completely secure.

Your rights (UK GDPR)

You may have the right to access, rectify, erase, restrict, object to processing, and data portability, and to withdraw consent where processing is based on consent.

You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise your rights, contact us at contact@cementindustries.co.uk.

Children

The Merchant Platform is a B2B service intended for business users aged 18 or over and is not directed at children.

App-specific notes

The Concrete Direct Merchant mobile app may request notification permission so we can send push alerts described in Service notifications (email and push). Account closure is available under Account → Close account.

Map features use business and plant address data you provide and Google mapping services. We do not continuously track your GPS in the background unless a future feature explicitly requests that permission and this policy is updated accordingly.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at https://concretedirectmerchant.uk/privacy with a revised date. Material changes may be communicated in-app or by email where appropriate.

Contact