Privacy Policy

1. Who We Are

Nicholas Roofing Company is the controller responsible for the personal data described in this policy. We are a roofing contractor based in Padstow, Cornwall, serving customers across Cornwall, Devon and the wider South West.

For privacy enquiries, email nicholasroofingco@gmail.com or call 01841 551441.

2. Personal Data We Collect

The information we collect depends on how you interact with us. It may include:

• Your name, business name, address, email address and telephone number.
• Property, site and project details, including photographs, plans, surveys and access information that you provide.
• Enquiry, quotation, appointment, contract, invoice and payment records.
• Correspondence and records of telephone, email or in-person discussions.
• Technical information generated when you use the website, such as IP address, browser, device, pages viewed and cookie choices.
• Information required to work safely at a site or comply with legal and contractual duties.

We generally obtain information directly from you. We may also receive it from an organisation you represent, a property owner, main contractor, consultant, insurer or another person involved in a project.

Please avoid sending sensitive personal information unless it is genuinely necessary. If health or accessibility information is needed to arrange a visit or carry out work safely, we will use it only for that purpose and with an appropriate legal basis.

3. How and Why We Use It

Where we rely on legitimate interests, we consider whether our use is necessary and balanced against your privacy rights. Where processing is based on consent, you may withdraw that consent at any time.

4. Cookies and Website Data

Our website may use essential cookies needed for security, navigation and core site functions. Optional analytics or similar technologies will only be used where permitted and, when required, after you have made a cookie choice.

You can manage optional cookies through the website’s cookie controls and your browser settings. Blocking some essential technology may affect how the site works.

5. When We Share Information

We do not sell personal data. We may share limited information where necessary with:

• Website hosting, email, IT, storage and administration providers acting on our behalf.
• Professional advisers, accountants, insurers and legal representatives.
• Manufacturers, suppliers, subcontractors, consultants or main contractors involved in a project.
• Regulators, public authorities, emergency services or law-enforcement bodies where required by law or needed to protect people and property.
• A successor to the business if ownership or structure changes, subject to appropriate safeguards.

Recipients are given only the information reasonably needed for their role.

6. How Long We Keep Data

We retain personal data only for as long as it is reasonably needed for the purpose for which it was collected, including contractual, insurance, tax, warranty and legal requirements.

• Unsuccessful or preliminary enquiries are normally reviewed for deletion after 24 months.
• Customer, quotation, project, warranty, invoice and payment records may normally be kept for up to seven years after the relevant relationship or transaction, and longer where a warranty, dispute or legal duty requires it.
• Website logs, cookies and analytics information are retained in line with the relevant service settings and cookie choices.

We may securely delete or anonymise information earlier where it is no longer required.

7. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you the right to:

• Ask for access to your personal data and receive a copy.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete information or restrict how it is used.
• Object to processing based on legitimate interests or to direct marketing.
• Receive certain information in a portable format.
• Withdraw consent where consent is the lawful basis.
• Complain to the Information Commissioner’s Office.

These rights are not absolute and legal exceptions may apply. We may need to verify your identity before responding. We will normally respond within one month.

8. Security and International Transfers

We use reasonable organisational and technical measures intended to protect personal data from accidental loss, unauthorised access, alteration or disclosure. No internet or email system can, however, be guaranteed completely secure.

Some technology providers may process information outside the United Kingdom. Where this occurs, we expect an appropriate lawful safeguard to be used, such as an adequacy regulation or approved contractual protections.