Privacy Policy

This privacy notice describes how Pennine Roof Co collects and uses personal data. We comply with the UK GDPR and the Data Protection Act 2018. The Information Commissioner's Office (ICO) is our supervisory authority.

1. Information we collect

When you contact us through this site or request a quote, we collect: name, email, phone number, address, postcode, and any project details you provide. We may also collect anonymous analytics (page views, referrer, device type).

2. Lawful basis for processing

We process your personal data on the following lawful bases:

• Legitimate interests: to respond to your enquiry, prepare quotes, and schedule site visits.
• Contract: when you become a customer, to deliver the agreed roofing work.
• Legal obligation: to retain business records for tax, accounting, and regulatory purposes.
• Consent: for non-essential cookies and any marketing communications (you can withdraw consent at any time).

3. How we use your information

We use your contact information solely to respond to your enquiry, schedule estimates, and provide services. We do not sell your information. We do not share it with third parties for their marketing purposes.

4. Cookies

This site uses essential cookies for functionality and (with your consent) analytics cookies to understand site usage. See our cookie policy for details, including your rights under the Privacy and Electronic Communications Regulations (PECR).

5. Data retention

Customer enquiry data is retained for 24 months unless you become an active customer, in which case business records retention applies (typically 6 years from end of project, in line with statutory limitation periods and HMRC requirements).

6. Your rights under UK GDPR

You have the right to:

• Be informed about how we use your data (this notice).
• Access a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") in certain circumstances.
• Restrict processing in certain circumstances.
• Data portability: receive your data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hello@pennine-roof.example. We will respond within one calendar month.

7. Complaints

If you believe we have mishandled your personal data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.

8. Contact

Questions about this notice? Email hello@pennine-roof.example or call 0114 555 0123.

9. Data processors

We use the following third-party processors to operate this website. Each processor acts only on our documented instructions and may not use your data for their own purposes.

• Web3Forms (Statichunt). Processes quote form submissions and routes them to our email address. Data is transferred to servers outside the UK. Web3Forms is certified under applicable data-transfer frameworks. See their privacy policy.
• Cloudflare Turnstile (Cloudflare, Inc.). Provides invisible bot detection on our quote form. Processes request metadata (IP address, browser fingerprint, behavioural signals) to evaluate whether a submission is human. Data is processed on Cloudflare's EU edge network and not retained beyond the verification window. See the Cloudflare privacy policy.
• Cloudflare (Cloudflare, Inc.). Hosts this website and provides cookieless web analytics. Page-view data (URL, referrer, country, device type) is processed on Cloudflare's EU edge network. No cookies are set; no personal identifiers are stored. See the Cloudflare privacy policy.

International transfers: Web3Forms processes data in the United States. These transfers are made on the basis of standard contractual clauses or equivalent safeguards under UK GDPR Article 46. If you have concerns about international transfers, you may complain to the ICO at ico.org.uk.