Legal

Privacy Policy

Last updated: 28 May 2026

1. Overview

ConvertDriveways Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you use our website, platform, and related services (collectively, the "Services").

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

ConvertDriveways Ltd is the data controller responsible for your personal data. Our registered office is in the United Kingdom.

If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection Officer at dpo@convertdriveways.co.uk.

3. What Data We Collect

We may collect the following categories of personal data:

  • Identity Data: Name, company name, job title, and contact details (email address, phone number, postal address).
  • Account Data: Login credentials, account preferences, and subscription details.
  • Financial Data: Payment card details and billing information, processed securely by our payment provider. We do not store complete card numbers on our servers.
  • Usage Data: Information about how you use our Services, including pages visited, features used, and interaction patterns.
  • Technical Data: IP address, browser type and version, device information, operating system, and cookie data.
  • Uploaded Content: Images, branding materials, and other files you upload to the platform for the purpose of generating AI visualisations.
  • Communication Data: Records of correspondence with us, including support requests and feedback.

4. How We Collect Your Data

We collect data through the following methods:

  • Direct interactions: When you register for an account, subscribe to our Services, upload content, or contact us.
  • Automated technologies: As you interact with our website, we automatically collect Technical Data using cookies, server logs, and similar technologies. See our Cookie Policy for more details.
  • Third parties: We may receive data from analytics providers, advertising networks, and search information providers.

5. How We Use Your Data

We use your personal data for the following lawful purposes:

  • To provide, operate, and maintain our Services;
  • To process payments and manage your subscription;
  • To generate AI visualisations using your uploaded images;
  • To communicate with you about your account, updates, and support requests;
  • To improve our Services, develop new features, and conduct analytics;
  • To send marketing communications, where you have consented or where we have a legitimate interest;
  • To comply with legal obligations and protect our rights;
  • To detect, prevent, and address fraud, security breaches, or technical issues.

Our lawful basis for processing includes: performance of a contract, legitimate interests, consent (where required), and compliance with legal obligations.

6. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients:

  • Service Providers: Cloud hosting, payment processing, analytics, email delivery, and customer support platforms that process data on our behalf under strict contractual safeguards.
  • AI Processing Partners: We use third-party AI models to generate visualisations. Images are processed securely and are not used to train external models without your explicit consent.
  • Professional Advisers: Lawyers, accountants, insurers, and auditors where necessary.
  • Regulators and Authorities: Where required by law, court order, or to protect our legal rights.

All third-party processors are required to respect the security of your personal data and to treat it in accordance with the law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit and at rest, access controls, regular security assessments, and staff training.

While we take every reasonable precaution, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Uploaded images and generated visualisations are retained for the duration of your active subscription plus 90 days, after which they are securely deleted unless you request earlier deletion or choose to export them.

Account and billing data are retained for six years after account closure to comply with UK tax and company law requirements.

9. Your Rights

Under UK data protection law, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data in certain circumstances (the "right to be forgotten").
  • Restriction: Request restriction of processing in certain situations.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Data Portability: Request transfer of your data to another service in a structured, machine-readable format.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at dpo@convertdriveways.co.uk. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.

10. International Transfers

We primarily store and process data within the United Kingdom and the European Economic Area (EEA). Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions, to protect your data in accordance with UK GDPR requirements.

11. Children's Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services. Your continued use of the Services after such changes constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer
ConvertDriveways Ltd
Email: dpo@convertdriveways.co.uk