Privacy Policy

1. Introduction

Company Details:

• Name: JD Roofs
• Address: Manchester, Greater Manchester, UK
• Email: jdandsons43@gmail.com
• Phone: 0800 007 6319

JD Roofs is committed to maintaining the trust you place in us. We are transparent about what personal data we collect and why, and we follow strict data protection practices to keep your information safe and secure.

This privacy policy applies to all personal data collected through our website (www.jdroofingandbuilding.com) and our contact form.

2. What Data We Collect

We collect personal data only when you voluntarily provide it through our website contact form. This includes:

• Full Name – to identify you and address your enquiry
• Email Address – to contact you and provide quotations
• Phone Number – to reach you regarding your roof survey or quotation
• Service Details – information about the roofing work you need
• Message – any additional details you provide about your property or requirements

We do not use cookies or tracking technologies to collect data about your browsing behaviour. We do not purchase data from third parties or use automated decision-making.

Data Retention: We retain your personal data for 12 months after your last contact with us, unless you have an active project with us (in which case we retain it for the duration of the project plus 7 years for insurance and liability purposes). After this period, your data will be securely deleted.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• Responding to your roofing enquiry
• Arranging and conducting a free on-site survey (with your permission)
• Providing you with a written quotation
• Communicating about your project if we proceed
• Providing customer support and answering your questions
• Fulfilling our legal and contractual obligations

We will never use your data for marketing or promotional purposes without your explicit consent. We will not pass your details to third-party marketers or add you to any mailing lists.

4. Legal Basis for Processing

Under UK GDPR Article 6, we process your personal data on the following legal grounds:

• Legitimate Interests (Article 6(1)(f)) – We have a legitimate business interest in responding to enquiries, providing quotations and conducting surveys. This is necessary for us to operate our roofing business and serve your needs fairly and transparently.
• Consent (Article 6(1)(a)) – If we send you any communications beyond responding to your initial enquiry, we will obtain your explicit consent first. You can withdraw consent at any time by contacting us.
• Contract (Article 6(1)(b)) – If we enter into a contract to carry out roofing work for you, we process your data as necessary to fulfil that contract.
• Legal Obligation (Article 6(1)(c)) – We may process your data to comply with legal requirements, such as health and safety regulations or insurance obligations.

5. Your Data Protection Rights

Under UK GDPR and Data Protection Act 2018, you have the following rights:

• Right of Access (Article 15): You can request a copy of all personal data we hold about you, free of charge, within 30 days.
• Right to Rectification (Article 16): You can ask us to correct any inaccurate or incomplete personal data we hold.
• Right to Erasure (Article 17): You can request that we delete your personal data ("Right to be Forgotten"), unless we have a legal reason to retain it.
• Right to Data Portability (Article 20): You can request your data in a portable format so you can transfer it to another service.
• Right to Object (Article 21): You can object to us processing your data for legitimate interests, and we will stop unless we have a compelling reason to continue.
• Right to Restrict Processing (Article 18): You can ask us to restrict how we use your data while you verify its accuracy or your request is considered.

How to Exercise Your Rights: To exercise any of these rights, please contact us by email at jdandsons43@gmail.com or by phone on 0800 007 6319. We will respond within 30 days.

6. Data Security

We take data security seriously and implement industry-standard security measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes:

• Secure storage of data on encrypted systems
• Restricted access to personal data (staff only access data when necessary)
• Regular security reviews and updates
• Secure deletion of data when no longer needed

Important: While we implement robust security measures, no system is 100% secure. We cannot guarantee absolute security of your data in transit or at rest. Any transmission of personal data is at your own risk. You are responsible for maintaining the confidentiality of any passwords or access credentials you use to interact with us.

In the event of a data breach that compromises your personal data, we will notify you without undue delay in accordance with UK GDPR requirements (within 72 hours of becoming aware of the breach).

7. Cookies

We do not use cookies on our website. Our website is built as a static HTML site with minimal functional requirements, and we do not implement cookie tracking, analytics cookies or marketing cookies.

If you visit our site, no cookies are set in your browser, and no behavioural data is collected about your browsing activity.

8. Third-Party Service Providers

We use the following third-party services to operate our website and handle your enquiries:

• Web3Forms – Handles our contact form submissions. Your form data is transmitted to Web3Forms' servers for processing and delivery to our email address. Web3Forms Privacy Policy
• Netlify – Hosts our website and serves our pages to you. Netlify may collect basic server logs for performance monitoring. Netlify Privacy Policy

We do not share your personal data with any other third parties, advertisers or marketing partners unless:

• You explicitly consent for us to do so
• We are legally required to do so (e.g., law enforcement request)
• It is necessary to complete a roofing project (e.g., material suppliers, subcontractors working on your behalf)

Any third-party processors we engage are contractually bound by the same data protection standards we follow.

9. Children's Privacy

Our website and services are not intended for children under 13 years old. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will immediately delete it and notify the parent or guardian.

For children aged 13–18, parental/guardian consent is recommended before providing any personal information to us.

10. Contact Us

If you have any questions about this privacy policy, concerns about how we handle your data, or wish to exercise any of your data protection rights, please contact us:

We aim to respond to all privacy enquiries within 30 days. If you are unhappy with how we handle your data, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

11. Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology or legal requirements. We will notify you of any material changes by updating the "Last Updated" date at the top of this page.

If the changes are significant, we will provide more prominent notice (such as an email notification). Your continued use of our website following any changes constitutes your acceptance of the updated privacy policy.

We recommend checking this page regularly to stay informed about how we protect your data.