This security policy explains the measures used to protect Concrete Forms website accounts, enquiries and online orders for road forms, road plates and site equipment.
Last updated: 19 July 2026
Our approach to website security
Concrete Forms is operated by Height Barriers Ltd. We use proportionate technical and organisational controls intended to protect the confidentiality, integrity and availability of personal information and ecommerce systems. No website or transmission method is completely risk-free, so we do not make an absolute or “100% secure” guarantee.
Secure connections and platform controls
- The website uses HTTPS/TLS to encrypt information sent between supported browsers and our server.
- Administrative access is restricted and protected by authentication and access controls.
- Website, ecommerce and server components are maintained and updated to address known security issues.
- Backups, logging and service monitoring support recovery and investigation.
- Access to customer and order information is limited to people and providers who need it for their work.
Payments
When an online payment option is displayed at checkout, sensitive payment details are handled by the payment provider identified there. Concrete Forms does not intend to store complete payment-card numbers or card security codes on its website systems. Payment providers maintain their own security and compliance arrangements; review the provider information shown during payment.
HTTPS and a padlock indicate an encrypted connection to the domain shown in your browser. They do not by themselves guarantee that a website, seller or transaction is genuine, so always check the address carefully.
Protecting your account
- Use a strong password that is not reused on another website.
- Keep account credentials private and sign out on shared devices.
- Contact us promptly if you notice an unfamiliar order, account change or password-reset message.
- Keep your browser, operating system and security software up to date.
Fraud and suspicious messages
Be cautious of messages requesting an unexpected bank-account change, urgent transfer, password or complete card details. Confirm any change to payment instructions using the published telephone number 01686 213370, not contact details contained only in the suspicious message. We will not ask you to send a password or full card security details by ordinary email.
Reporting a security concern
If you believe you have found a security weakness or that your information or account may have been affected, email info@concreteforms.co.uk with “Security report” in the subject line. Include the affected page, what you observed, when it occurred and a safe way to contact you. Do not include passwords, payment-card details or unnecessary personal information.
Please do not access other people’s data, disrupt the service, use destructive testing, run automated high-volume scans or publicly disclose a suspected issue before we have had a reasonable opportunity to investigate. This policy does not authorise activity that would otherwise be unlawful, and we do not currently operate a paid bug-bounty programme.
Incident response
We assess reported incidents, take proportionate containment and recovery steps, preserve relevant records and notify affected people or regulators where required by law. Security measures and this policy are reviewed as the website and its services change.
Related information
How we collect and use personal information is explained in our Privacy Policy. Purchase, delivery and returns provisions appear in our Terms & Conditions.