Privacy Policy

1. Data Controller Information

The designated Data Controller responsible for your personal data under the Data Protection Act 2018 and UK GDPR is:

2. Information We Collect

We only collect information that is strictly necessary to assess your roofing requirements, provide quotations, communicate project progress, and fulfill our contractual obligations. We may collect:

• Identity & Contact Data: Full name, telephone number (mobile/landline), email address, and property postcode/address.
• Roofing Project Details: Property type (house, bungalow, commercial), age and height of building, description of damage or leaks, preferred service, and uploaded inspection photographs.
• Communication Records: Notes of telephone conversations, written email correspondence, enquiry submissions, and surveyor site notes.
• Technical & Usage Data: Anonymised IP addresses, browser type, operating system, and interaction data collected through necessary functional cookies.

3. Lawful Bases for Processing Under UK GDPR

Under Article 6 of the UK GDPR, we rely on the following lawful bases to process your personal data:

4. Photograph Uploads & Drone Surveys

When you submit photographs of your roof or when our technicians take drone inspection images:

• Images are strictly utilized for structural defect assessment, materials quantification, and before/after project records.
• We do not record recognizable faces of residents or neighbouring private spaces.
• Should we request to feature a completed re-roofing project in our gallery, we always seek explicit permission and remove house numbers and identifiable vehicle registrations.

5. Sharing Your Information

We will never sell, lease, or distribute your personal data to third parties for marketing purposes. We only share information with vetted service partners where strictly necessary to execute your contract:

• Scaffolding & Skip Contractors: Property address and site access instructions strictly for delivery and erection.
• Local Building Authorities: For Building Regulations Part L notification and certification where applicable.
• Secure IT Infrastructure: Cloud hosting providers and transactional email delivery networks operating within the UK or European Economic Area (EEA) with compliant Data Processing Addendums.

6. Data Retention Periods

We do not retain personal data longer than is necessary:

• Enquiries that do not proceed: Deleted within 12 months of last communication.
• Completed roofing projects: Project files, invoices, and photo documentation are retained for up to 10 years (or up to 25 years where an extended structural warranty is in effect) to substantiate guarantee claims.
• Financial & Accounting Records: Retained for 6 years following the end of the relevant tax year in compliance with HMRC rules.

7. Your Statutory Rights

Under the UK General Data Protection Regulation, you enjoy comprehensive legal rights regarding your personal information:

To exercise any of these rights, please email our Data Controller at hello@apexshieldroofing.co.uk. We respond to all valid requests within one calendar month at no charge.

8. Right to Lodge a Complaint

If you are dissatisfied with how we have handled your personal information, you have the statutory right to lodge a complaint with the UK supervisory authority:

9. Cookies & Tracking Technologies

Our website uses minimal, privacy-centric cookies to ensure site security, remember your form progress, and analyze aggregate visitor volume. For full technical details and instructions on how to manage preferences, please read our dedicated Cookie Policy.