This privacy policy explains how Concrete Forms collects and uses personal information when you request a quote, buy or hire concrete formwork and site equipment, create an account or use this website.
Last updated: 19 July 2026
Who is responsible for your information?
Height Barriers Ltd, trading as Concrete Forms, is the data controller. Height Barriers Ltd is registered in England and Wales under company number 14309958. Our address is Unit 5 Vastre Industrial Estate, Heol Vastre, Newtown, Powys, SY16 1DZ.
For privacy questions or requests, email info@concreteforms.co.uk, write to the address above or call 01686 213370.
Personal information we collect
- Identity and contact details: name, company, job role, billing and delivery addresses, email address and telephone number.
- Order and project details: products, dimensions, quantities, drawings, required dates, delivery information, hire details and communications.
- Account information: login details, account preferences and order history.
- Transaction records: amounts, payment status, invoices and refunds. We do not intend to store complete payment-card details; payment providers process those details when a card option is offered.
- Enquiry information: information submitted through forms, emails, telephone calls and other correspondence.
- Technical and usage information: IP address, browser and device information, security logs, pages viewed, referring pages and cookie choices.
- Marketing preferences: whether and how you want to receive relevant product or service updates.
How we collect information
We collect information directly when you contact us, request pricing, create an account, place an order, arrange delivery or hire, visit or collect from our premises, or respond to us. We also collect limited technical information through the website, server logs and cookies. We may receive information from payment providers, delivery carriers, professional advisers and publicly available business sources.
Why we use personal information
- Enquiries and quotations: to respond, specify products and take steps toward a contract. Our lawful bases are contract steps and legitimate interests in operating our manufacturing business.
- Orders, manufacture, hire and delivery: to fulfil contracts, produce goods, manage accounts, arrange transport, provide support and handle returns.
- Accounting and compliance: to maintain tax, transaction, safety and legal records and respond to lawful requests. Our bases are legal obligation and legitimate interests.
- Website operation and security: to maintain accounts, prevent misuse, diagnose faults and protect customers and systems. Our basis is legitimate interests.
- Service improvement: to understand common enquiries, improve product information and plan stock and manufacturing. We use aggregated information where practical and rely on legitimate interests.
- Marketing: to send relevant updates where you have consented or where applicable electronic-marketing rules allow us to contact an existing business customer. Every marketing message will provide an opt-out.
- Optional cookies or analytics: where used, the basis is consent. You may withdraw that consent through the available cookie controls.
Who we share information with
We do not sell personal information. We share only what is reasonably necessary with service providers such as website hosting and IT support, ecommerce and account systems, payment providers offered at checkout, delivery and collection companies, email and communications providers, professional advisers and insurers. We may also disclose information to courts, regulators, law-enforcement bodies or other authorities where required or permitted by law.
Providers must use information only for the relevant service and protect it appropriately. If a provider processes information outside the UK, we use an appropriate safeguard where required, such as UK adequacy regulations or approved contractual protections.
How long we keep information
- Order, invoice, payment and core contract records are generally retained for six years after the relevant transaction or relationship, and longer where a legal claim or obligation requires it.
- Unsuccessful quotations and general enquiries are generally retained for up to 24 months after the last meaningful contact.
- Account data is retained while the account is active and then reviewed or removed, subject to transaction-record obligations.
- Marketing records are retained until you opt out or the information is no longer useful, with a minimal suppression record kept to respect an opt-out.
- Routine security and server logs are generally kept for up to 12 months unless an incident requires longer investigation.
Cookies and similar technologies
Essential cookies support features such as the basket, checkout, account login, security and your cookie choices. These are used because they are necessary to provide the service you request. Non-essential analytics or marketing cookies, if introduced, should be set only after the required consent. The contact page also includes a Google Maps service, which may receive technical information when it loads.
You can control cookies through the website controls where provided and through your browser. Blocking essential cookies may stop the basket, checkout or account from working correctly.
How we protect information
We use proportionate technical and organisational measures including encrypted website connections, access controls, software maintenance, backups and restricted administrative access. No internet service can promise absolute security. More detail and reporting information is in our Security Policy.
Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights to:
- ask for a copy of your personal information;
- correct inaccurate or incomplete information;
- request erasure or restriction;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format; and
- withdraw consent at any time where consent is the basis for processing.
These rights are not absolute and legal record-keeping duties may still apply. We may need to confirm your identity before acting on a request. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address your concern first.
Children
This trade and construction website is not directed at children, and we do not knowingly seek personal information from children.
Changes to this policy
We review this policy when our services, providers or legal obligations change. The latest version will appear on this page with its updated date. We will draw attention to a material change where appropriate.