Privacy Policy

Last updated: 4 March 2026

Your privacy matters to us. This policy explains what personal data Highways Plus collects, why we collect it, how we use it, and what your rights are. We’ve written it plainly, because privacy policies shouldn’t need a law degree to understand.

If you have questions at any point, you can reach us at:

Highways Plus  |  Paulton House, Old Mills, Paulton, Bristol, BS39 7SX

Email:  info@highwaysplus.co.uk

Phone:  01761 202 012

 

1. Who we are

Highways Plus is the trading name of Highways Plus Ltd, a commercial surfacing and civil engineering company registered in England and Wales. For the purposes of UK data protection law, we are the data controller – meaning we’re responsible for deciding how and why your personal data is processed.

 

2. What personal data we collect

We only collect information that’s necessary to do our job properly. Depending on how you interact with us, that might include:

 

Contact and identity data

• Name, job title, and company name
• Email address and phone number
• Postal address

 

Project and enquiry data

• Details of the project or service you’re enquiring about
• Site addresses and location information
• Any documents, drawings, or files you choose to share with us

 

Financial data

• Billing address and invoice details
• Bank account details (for direct debit or BACS payment arrangements)

 

Technical data

• IP address and browser type
• Pages visited on our website and time spent on them
• Referring website or search term, where available

 

Communications data

• Records of emails, calls, and enquiry form submissions
• Notes from meetings or site visits

 

We don’t collect any special category data (such as health information, ethnic origin, or political opinions) in the normal course of our business. If a project ever requires us to hold such data, we’ll explain why and ask for your explicit consent first.

 

 

3. How we collect your data

Most of the data we hold comes directly from you, through:

• Enquiry forms on our website
• Phone calls, emails, or direct messages
• In-person meetings, site visits, or tender processes
• Business cards or contact details shared at events

 

We may also receive data about you from third parties – for example, if a main contractor or developer passes on your details as a relevant contact for a project we’re working on together.

Our website also collects limited technical data automatically through cookies. See Section 9 for more on that.

 

4. Why we collect it and our lawful basis

Under UK GDPR, we need a lawful basis for processing your personal data. Here’s how that maps to what we do:

 

Purpose	Lawful basis
Responding to your enquiry or quote request	Legitimate interests
Entering into and performing a contract with you	Contract performance
Sending invoices and managing payments	Contract performance / legal obligation
Complying with health and safety obligations on site	Legal obligation
Sending project updates or relevant communications	Legitimate interests
Improving our website and understanding how visitors use it	Legitimate interests
Sending marketing communications about our services	Consent (where required) or legitimate interests
Retaining records for accounting, tax, and legal purposes	Legal obligation

 

Where we rely on legitimate interests, we’ve assessed that our interests don’t outweigh your rights. You can request a copy of that assessment at any time.

Where we rely on consent, you can withdraw it at any time – just email info@highwaysplus.co.uk and we’ll update our records promptly.

 

5. How we use your data

We use your personal data to:

• Prepare and submit quotes, tenders, and proposals
• Manage and deliver projects and contracts
• Communicate with you about ongoing works
• Process invoices and payments
• Meet our health and safety, legal, and regulatory obligations
• Improve our services based on how clients use them
• Send you information about services we think may be relevant to your work (you can opt out at any time)

 

We don’t use your data for automated decision-making or profiling.

 

6. Who we share your data with

We only share your data where necessary. That might include:

 

Subcontractors and supply chain partners

Where they need your details to deliver part of a project. They’re required to handle your data securely and only for the purpose it’s been shared.

Professional advisers

Including our accountants, solicitors, and insurers, where needed.

IT and software providers

Including our CRM, email, and project management systems. These providers act as data processors and are contractually bound to protect your data.

Regulatory and legal authorities

Including HMRC, the Health and Safety Executive (HSE), or the Information Commissioner’s Office (ICO), where we’re legally required to disclose information.

 

We don’t sell your personal data. Ever.

 

 

7. International transfers

We aim to keep your data within the UK and the European Economic Area (EEA). If any of our software providers or sub-processors process data outside these regions, we’ll ensure appropriate safeguards are in place – such as the UK’s International Data Transfer Agreement (IDTA) or standard contractual clauses.

 

8. How long we keep your data

We don’t keep your data longer than necessary. Our general retention periods are:

 

Data type	Retention period
Enquiries and quotes (no contract awarded)	2 years
Contract and project records	7 years from project completion
Financial and invoicing records	7 years (HMRC requirement)
Health and safety records	10 years
Marketing preferences and consent records	Until you withdraw consent, plus 2 years
Website analytics data	26 months

 

After these periods, data is securely deleted or anonymised.

 

9. Cookies

Our website uses cookies – small text files stored on your device – to help it function and to understand how visitors use it.

 

Essential cookies

Keep the site working and can’t be switched off.

Analytics cookies

Such as Google Analytics, these help us understand which pages are most useful and how people find us. These are set only with your consent, and you can withdraw it at any time through the cookie settings on our site.

Marketing cookies

May be used to track activity across websites if you’ve consented. We don’t use aggressive tracking.

 

You can manage or delete cookies through your browser settings at any time. Disabling analytics or marketing cookies won’t affect your ability to use the site.

 

10. Your rights

Under UK GDPR, you have the right to:

 

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Erase your data (in certain circumstances)
• Restrict how we process your data (in certain circumstances)
• Object to processing based on legitimate interests
• Data portability – receive your data in a structured, machine-readable format
• Withdraw consent at any time, where consent is the lawful basis

 

To exercise any of these rights, email us at info@highwaysplus.co.uk. We’ll respond within one calendar month. In most cases, there’s no charge – and we’ll never make it difficult.

 

11. Keeping your data secure

We take data security seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. That includes encrypted communications, access controls, and regular security reviews.

If we ever experience a data breach that’s likely to affect your rights, we’ll notify you and the ICO as required by law.

 

12. Third-party links

Our website may contain links to other websites – for example, industry bodies, our accreditation partners, or our sister company Driveways Plus. We’re not responsible for the privacy practices of those sites, and we’d encourage you to review their policies directly.

 

13. Changes to this policy

We review and update this policy periodically. When we make material changes, we’ll update the “Last updated” date at the top of this page. We may also notify you directly if we make significant changes to how we process your data.

 

14. How to complain

If you’re unhappy with how we’ve handled your data, please contact us first at info@highwaysplus.co.uk – we’d genuinely like the chance to put things right.

If you’re not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

 

Information Commissioner’s Office 

Address:  Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone:  0303 123 1113

Website:  www.ico.org.uk

 

This privacy policy applies to Highways Plus Ltd and the website at www.highwaysplus.co.uk.