Privacy Policy

1. Introduction

Churchill Roofing Coventry Ltd ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our roofing services or visit our website.

By engaging our services or using our website, you agree to the collection and use of information in accordance with this policy. We are committed to transparency and will only use your information as described below.

2. Who We Are

We are a professional roofing contractor based in Coventry, providing roofing services across Coventry, Nuneaton, Rugby, Leamington Spa, and surrounding areas. For the purposes of data protection law, Churchill Roofing Coventry Ltd is the data controller.

3. Information We Collect

4. How We Use Your Information

We use your personal information for the following legitimate business purposes:

• To provide roofing services and fulfill our contractual obligations
• To communicate with you about your project, quotes, and appointments
• To process payments and manage invoicing
• To maintain records for warranty and guarantee purposes
• To send service updates and safety notices (where required)
• To improve our services and customer experience
• To comply with legal and regulatory requirements
• To protect against fraud and ensure business security

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: To fulfill our roofing service agreements
• Legitimate Interest: To operate our business, improve services, and maintain customer relationships
• Legal Obligation: To comply with health and safety regulations, tax requirements, and building standards
• Consent: For marketing communications (where you have opted in)

6. Information Sharing

We do not sell or rent your personal information. We may share information only in these circumstances:

• Service Providers: Trusted suppliers, subcontractors, and business partners who assist in delivering our services
• Payment Processors: Secure payment processing for invoices and transactions
• Insurance Companies: For claims processing and liability coverage
• Legal Requirements: When required by law, court order, or regulatory authorities
• Building Control: Local authorities for Building Regulations compliance
• Emergency Services: In case of health and safety emergencies

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information:

• Secure storage of physical documents in locked filing systems
• Password-protected digital systems and encrypted data transmission
• Limited access to personal information on a need-to-know basis
• Regular security training for our team members
• Secure disposal of confidential information when no longer needed
• Regular backup and recovery procedures

While we implement strong security measures, no system is completely secure. We continuously review and update our security practices.

8. Data Retention

We retain your personal information for different periods depending on the purpose:

• Customer Records: For the duration of our business relationship plus 7 years for tax and legal requirements
• Project Documentation: For the warranty period plus additional time as required by building regulations
• Health and Safety Records: As required by HSE regulations (typically 3-40 years depending on the record type)
• Marketing Preferences: Until you withdraw consent or become inactive
• Website Analytics: Typically 26 months or until you withdraw consent

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal obligations)
• Right to Restrict Processing: Request limitation on how we use your information
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, please contact us using the details provided below. We will respond within one month.

10. Cookies and Website Analytics

Our website uses cookies and similar technologies to:

• Ensure the website functions properly
• Remember your preferences and settings
• Analyze website performance and user behavior
• Improve user experience and website functionality

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

11. Third-Party Services

We may use reputable third-party services that have access to some of your information:

• Payment processors for secure transaction processing
• Cloud storage providers for secure data backup
• Email services for business communications
• Website hosting and analytics services
• Specialist roofing software and project management tools

All third-party processors are carefully selected and contractually bound to protect your information according to UK data protection standards.

12. Children's Privacy

Our services are intended for adults (18+) and property owners. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately so we can remove it.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify existing customers of significant changes and update the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints and Contact

If you have any concerns about how we handle your personal information, please contact us first so we can resolve your concerns. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.