Privacy Policy

Who we are

Amaris Granite & Marble Limited ("we", "us", "our") is a family-run stone fabrication business supplying and fitting granite, quartz and marble worktops, and providing tile cutting and profiling services, across South Wales and the surrounding areas.

We are registered in England and Wales, company number 05599836.

We are the "data controller" for the personal information described in this policy. That means we decide what information is collected and what happens to it.

This policy explains what we do with your personal information, why we do it, and what rights you have. It applies to our website and to our dealings with customers, enquirers and suppliers.

The information we collect

When you contact us or request a quote

• Your name
• Your email address
• Your telephone number
• Your address, and the address of the property where the work will be carried out
• Details of the work you are enquiring about, including room measurements, kitchen plans, drawings and photographs you send us
• Anything else you choose to tell us in your message

When you book an appointment

We use Calendly to let you book a consultation or template appointment. When you book, Calendly collects your name, email address, telephone number and your chosen appointment time, and passes this to us.

When you become a customer

• The information above
• Details of the products and services you have ordered
• Delivery, template and fitting dates
• Payment records and invoices (we do not store your card details — see "Payments" below)
• Any correspondence between us, including notes of telephone calls
• Any warranty or aftercare records

When you visit our website

• Your IP address
• The type of browser and device you are using
• The pages you visit, how long you spend on them and how you arrived at our site
• Information collected through cookies and similar technologies (see "Cookies" below)

When you interact with us on social media

If you message us or comment on our Facebook or Instagram pages, we will see your profile name and whatever you have chosen to share publicly. Those platforms have their own privacy policies, which we do not control.

Why we use your information, and our legal basis

Data protection law requires us to have a valid reason — a "lawful basis" — for using your personal information. Ours are set out below.

Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms, and we are satisfied that they are not. You can ask us for more detail about that assessment at any time.

Marketing

We may send you information about our products, offers and services by email, post or telephone.

If you are not already a customer, we will only do this where you have given us permission.

If you are an existing customer, or have asked us for a quote, we may contact you about similar products and services unless you have told us not to.

You can opt out at any time. Every marketing email includes an unsubscribe link, or you can simply email sales@amarisgranite.co.uk or call 01656 724422 and ask us to stop. We will act on your request promptly.

Opting out of marketing will not stop us contacting you about work we are actually carrying out for you.

Cookies

Cookies are small text files placed on your device when you visit a website. We use them to make the site work, to keep it secure, and to understand how visitors use it.

We use the following broad categories:

• Strictly necessary cookies. These are required for the website to function and to keep it secure. They include cookies set by Cloudflare, which helps protect our site and deliver it quickly. These cannot be switched off.
• Analytics cookies. These help us understand which pages are popular and how visitors move around the site, so we can improve it. We use Google Analytics for this.
• Marketing cookies. These may be used to measure the effectiveness of our advertising and to show you relevant adverts on other websites.

You can manage your preferences through the cookie banner shown when you first visit our site, and you can change your mind at any time. You can also block or delete cookies through your browser settings, though parts of our site may not work properly if you do.

Who we share your information with

We do not sell your personal information to anyone.

We share it only where we need to, and only with organisations that are required to keep it secure and use it solely for the purposes we specify. These include:

• Our web and marketing agency, Invincible Media, who build and maintain our website and handle our digital marketing on our behalf
• Our email and hosting provider, Valley Web Designs, who host our email service
• Cloudflare, who provide security and performance services for our website
• Google, in connection with website analytics and advertising
• Calendly, where you book an appointment through our website
• Our fitters, templaters and delivery partners, who need your address and contact details to carry out the work
• Our suppliers of stone and materials, where an order needs to be placed against your job
• Our accountants, bookkeepers and payment providers, for invoicing and financial records
• Our professional advisers and insurers, where we need advice or need to make or defend a claim
• Law enforcement, regulators or other authorities, where we are legally required to do so

If our business is sold or transferred, your information may be passed to the new owner, who would remain bound by this policy.

Payments

We do not store your card details. Card payments are handled directly by our payment provider, who is responsible for the security of that transaction. We keep a record that a payment was made, the amount and the date, for our accounts.

Sending information outside the UK

Some of the providers we use, including Google, Cloudflare and Calendly, may store or process information outside the United Kingdom.

Where that happens, we make sure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or Addendum, or the country having been formally recognised by the UK government as providing an adequate level of protection.

You can ask us for details of the safeguards that apply.

How long we keep your information

We keep your information only for as long as we need it.

• Enquiries that do not become orders: up to 2 years, in case you come back to us
• Customer records, contracts and job files: 7 years from completion of the work
• Financial and tax records: 7 years, as required by HMRC
• Warranty and aftercare records: for the length of the warranty, plus 6 years afterwards
• Marketing contacts: until you opt out, or after 3 years of no contact from you
• Website analytics data: in line with the retention settings of the tools we use, typically no longer than 26 months

Once we no longer need your information, we securely delete or destroy it.

Keeping your information safe

We take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. These include secured premises, access controls on our systems, encrypted connections to our website and email, and limiting access to those who need it.

No system can be completely secure, but if a data breach occurs that is likely to put your rights at risk, we will tell you and report it to the regulator as the law requires.

Your rights

Under UK data protection law you have the following rights:

• The right to be informed — to know what we do with your information, which is what this policy sets out
• The right of access — to ask for a copy of the personal information we hold about you
• The right to rectification — to have inaccurate information corrected
• The right to erasure — to ask us to delete your information, in certain circumstances
• The right to restrict processing — to ask us to pause our use of your information, in certain circumstances
• The right to data portability — to receive certain information in a portable format
• The right to object — to object to our use of your information where we rely on legitimate interests, and to object to direct marketing at any time
• Rights relating to automated decision-making — we do not make decisions about you by automated means alone
• The right to withdraw consent — where we rely on your consent, you can withdraw it at any time

To exercise any of these, contact us using the details below. We will respond within one month. If your request is complicated, or you have made several, we may need longer, but we will tell you if that is the case.

There is normally no charge.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first. We take complaints seriously and would rather have the chance to put things right.

We will acknowledge your complaint within 30 days and keep you updated on what we are doing about it.

If you are still not satisfied, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office:

• Website: www.ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Complaining to the regulator does not affect any other legal rights you may have.

Children

Our website and services are aimed at adults and are not directed at children. We do not knowingly collect information about anyone under 18. If you believe we have done so, please contact us and we will delete it.

Links to other websites

Our website may link to other sites. We are not responsible for their content or their privacy practices, and we would encourage you to read their own privacy policies.

Changes to this policy

We may update this policy from time to time to reflect changes in what we do or in the law. The date at the top shows when it was last revised. If we make significant changes, we will make that clear on our website.

Contact us

If you have any questions about this policy or about how we use your personal information: