Last updated: 28 October 2026
Rock & Co. Granite Limited (company number 06584527), trading as Rock & Co, is the controller responsible for the personal information described in this notice. Our registered office is Belfry House, Bell Lane, Hertford, Hertfordshire SG14 1BP. Our showroom and operating address is Pin Green Yard, Unit 5 Senate Place, Stevenage, Hertfordshire SG1 4QS.
For privacy enquiries, requests to exercise your rights and marketing opt-outs, email info@rockandco.co.uk or contact us through our website contact page.
Depending on the service you use, we may collect your name, email address, telephone number, installation address or project postcode, property access details, project requirements, measurements, material choices, quotations, sketches, drawings, uploaded photographs, appointment records, order and delivery details, payment administration records and correspondence. We also process your stated email-marketing preferences and withdrawal requests.
When you visit our website, technical data may be processed, including IP address, device or browser information, referral information and use of our website or forms, subject to our Cookie Policy and applicable legal rules.
We normally receive details directly when you ask for a quote, submit a form, contact us, book a visit, order worktops or request aftercare. We may also receive project details from a kitchen designer, builder, architect or other person who is legitimately involved in your worktop project.
Marketing sign-up on our website forms is optional, unticked by default and separate from requesting a quote, appointment or service. We will still respond to your enquiry if you do not subscribe. If you opt in, we may contact you by email with relevant Rock & Co news and offers.
In limited circumstances, we may rely on the PECR soft opt-in to market similar products to individuals whose contact details we collected directly during a sale or genuine negotiation. This is only where we provided an easy opportunity to refuse marketing at the time of collection and offer an opt-out in every subsequent message. We do not assume that a previous quotation or purchase alone gives us this right.
You can withdraw consent or object to direct marketing at any time by using an unsubscribe link in a promotional message or emailing info@rockandco.co.uk. We keep limited records of opt-outs so that we respect them. Withdrawing marketing consent does not prevent necessary messages concerning your existing enquiry, booking or order.
We share information only where needed for our legitimate business activities, contracts or legal obligations. Recipients may include our staff; website hosting, WordPress, Elementor, WPForms and email-delivery providers; communications providers; CookieYes and Google services where relevant to website analytics, advertising or security; relevant stone suppliers, templaters and installation contractors; payment and accounting providers; professional advisers; and public authorities where required by law. Access is limited to what is necessary for the relevant purpose.
We do not sell personal information to third-party marketing lists. If we introduce a new email-marketing platform, we will assess its processing arrangements and update this notice where necessary before transferring subscriber data to it.
Some technology and service providers may process information outside the UK. When restricted international transfers apply, we assess the destination and use a legally recognised mechanism, such as applicable UK adequacy regulations or appropriate contractual safeguards, together with any additional steps required. If you would like information about relevant transfers for your information, please contact us.
We retain information only for as long as reasonably necessary for the purpose for which it was collected, with regard to legal duties, tax and accounting records, contractual obligations, product warranties, security and potential disputes. Enquiry records that do not lead to a sale are assessed against the need to respond or follow up and any legitimate recordkeeping requirements. Different categories may therefore have different retention periods. We review our retention arrangements and delete or anonymise information when no longer needed. We may retain limited marketing suppression records to prevent unwanted contact.
We use proportionate administrative and technical safeguards and restrict access to appropriate personnel and service providers. If a personal-data breach occurs, we investigate and notify affected people or regulators where required by law.
Subject to applicable conditions and exceptions, you may request access to your personal information, correction, erasure, restriction or portability. You may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time without affecting previous lawful processing. You have the absolute right to object to direct marketing.
To exercise these rights, email info@rockandco.co.uk. We may request information needed to verify your identity. You can also complain to the Information Commissioner’s Office (ICO).
For details of our cookies and similar technologies, and how to manage your choices, visit our Cookie Policy. Simply continuing to browse is not treated as consent to non-exempt tracking technologies.
We may amend this notice when our activities or legal duties change. The latest version and its date will be published on this page.
Leave your details and our team will help you with your quote. Free, with no obligation.
4.8/5 from 570 Google reviews · Stevenage ↗
