Controller and contact
The intended controller is SAMI SWAIN WEB SPINNER UK LTD. Privacy enquiries and rights requests should go to info@jmacroofing.co.uk.
Information collected
Depending on how you use the service, this can include account and business details, contact details, property postcode, roofing request descriptions and images, communication preferences, company evidence, quote/job/review records, consent timestamps, security/audit records and sanitised campaign attribution. Passwords are stored only as secure hashes. Identity and insurance documents are kept in private storage.
Why information is used
Information is used to provide and secure accounts; receive, match and manage roofing requests; reveal contact details after a roofer accepts a lead; support quotes, jobs and job-linked reviews; review company evidence; prevent abuse; resolve complaints; maintain financial/audit records; and measure the operational funnel. The final notice must map each purpose to its lawful basis and document any legitimate-interest assessment.
Who receives information
Request and contact information is shared with the limited number of roofing companies matched under your consent. Data may also be processed by contracted hosting, storage, email, security, payment and support providers, and disclosed where required by law. We do not sell personal information as a marketing list.
International processing
The final notice must identify hosting and service-provider locations, any international transfer, and the safeguard relied upon before those services are enabled.
Retention
Data is kept only as long as needed for the stated purposes, security, disputes and legal/accounting obligations. A record-level retention schedule for unsuccessful enquiries, accounts, evidence, media, audit events, financial records and reviews must be approved before launch and implemented through tested deletion/anonymisation jobs.
Security
Implemented controls include encrypted transport in production, hardened authentication and two-factor checks, role and company isolation, private files, signed customer links, restrictive validation, security headers, audit trails, session revocation and encrypted backups planned for production. No online service can promise absolute security.
Essential sessions and attribution
The application uses an essential session for security, form validation and sign-in. If a visitor arrives with UTM campaign parameters, sanitised first-touch values are held in that session and persisted only after a roofer registers or a homeowner submits a request. No GA4, advertising pixel or session-replay tool is installed in this release.
Your rights and complaints
Depending on the circumstances, UK data protection law can provide rights of access, correction, erasure, restriction, objection and portability. Contact the controller first. You may also complain to the UK Information Commissioner’s Office. Identity may need to be confirmed before a rights request is fulfilled.
This notice must be updated whenever processors, purposes, retention or tracking change.