Get a Free Quote →
Home / Privacy Policy

Privacy Policy & Cookies

How Summit Heights Roofing LTD collects, uses and protects your personal information.

Last updated: 11 October 2026

This privacy policy explains how Summit Heights Roofing LTD collects, uses and protects personal information when you visit our website, contact us, ask for a quote or use our roofing services. We are committed to handling your information fairly, lawfully and securely, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Summit Heights Roofing LTD (“we”, “us”, “our”) is the data controller for the personal information described in this policy. This means we decide how and why your information is used.

If you have any questions about this policy or how we use your information, please contact us using the details above.

2. The information we collect

Depending on how you deal with us, we may collect:

  • Contact details: your name, company name, job title, phone number, email address and postal address.
  • Property and project details: the address and postcode of the site, details about the building and roof, access arrangements and any information you give us about the work you need.
  • Photos and videos: images of your roof, building and site taken during surveys, while work is carried out and on completion.
  • Correspondence: records of emails, calls and messages between us.
  • Quote, contract and payment details: quotes, orders, invoices, payment records and, where relevant, company and VAT details. We do not store full card details.
  • Website information: basic technical information sent automatically by your browser when you visit our website, such as your IP address, browser type and the pages you view.

We do not ask for, and do not want to receive, special category information (such as health information) unless it is genuinely needed, for example to make safe access arrangements at your property.

3. How we collect your information

  • Directly from you: when you call us, email us, use the quote form on our website, meet us on site or become a customer. Our website quote form opens your own email app with your details filled in, so your enquiry is sent to us by email.
  • By WhatsApp: if you message us on WhatsApp, your messages, phone number and any photos you send are handled by WhatsApp (part of Meta) as well as by us. WhatsApp’s own privacy policy applies to how it uses that information.
  • From other people: for example a main contractor, managing agent, landlord, colleague or property owner who passes your details to us so we can quote for or carry out work.
  • Automatically: when you use our website, as described in section 10.

4. How we use your information and our lawful basis

We only use your information where the law allows us to. We rely on the following lawful bases:

What we use it forLawful basis
Responding to your enquiry, arranging a site survey and preparing a quoteTaking steps at your request before entering into a contract; our legitimate interests in responding to enquiries
Carrying out the work you have asked for, including planning, scheduling and keeping you updatedPerformance of a contract
Invoicing, taking payment, keeping accounts and meeting tax requirementsPerformance of a contract; legal obligation
Keeping health and safety, waste and other records the law requires, including for work involving asbestosLegal obligation
Providing guarantees, aftercare and dealing with any issues after the work is finishedPerformance of a contract; our legitimate interests
Taking photos and videos of our work for our records and quality checksOur legitimate interests in recording and checking our work
Using photos, videos and project details in case studies on our website or social mediaOur legitimate interests in showing examples of our work. We will not name you or show anything that identifies you or your property without your permission.
Publishing your review or testimonialYour consent
Sending you marketing messagesYour consent. We only do this if you have agreed, and you can opt out at any time.
Running, securing and improving our websiteOur legitimate interests
Establishing, exercising or defending legal claimsOur legitimate interests; legal obligation

If you do not give us the information we need to prepare a quote or carry out work, we may not be able to provide our services to you.

5. Who we share your information with

We never sell your personal information. We only share it where we need to, with:

  • subcontractors and suppliers who help us carry out your work, such as scaffolding providers and specialist installers;
  • licensed waste carriers and disposal sites, where waste (including asbestos) must be removed and recorded;
  • our accountants, insurers, banks and professional advisers;
  • companies that provide our website hosting, email, messaging (such as WhatsApp) and IT services;
  • HMRC, the Health and Safety Executive, local authorities, the police or other bodies where the law requires us to.

Anyone we share your information with is only allowed to use it for the purpose we have shared it for, and must keep it secure.

6. Transfers outside the UK

We aim to keep your information within the UK. Some service providers we use, such as the provider of the fonts on our website, may process limited information outside the UK. Where this happens, we make sure appropriate safeguards are in place as required by UK data protection law.

7. How we keep your information safe

We use appropriate technical and organisational measures to protect your information from being lost, misused or accessed without permission. These include password-protected devices and accounts, limiting access to people who need it, and using reputable service providers.

8. How long we keep your information

  • Enquiries and quotes that do not go ahead: up to 2 years from our last contact, in case you come back to us.
  • Customer, job and financial records: 6 years after the end of the financial year in which the work was completed, to meet tax and legal requirements.
  • Guarantee records: for the length of the guarantee, plus 6 years.
  • Health and safety and waste records: for as long as the law requires, which for some asbestos-related records can be many years.
  • Photos and videos used in case studies: for as long as they are used on our website or social media.

When information is no longer needed, we securely delete or destroy it.

9. Your rights

Under UK data protection law, you have the right to:

  • access the personal information we hold about you and get a copy of it;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information in certain circumstances;
  • ask us to restrict how we use your information in certain circumstances;
  • object to us using your information where we rely on our legitimate interests, and to marketing at any time;
  • ask us to transfer information you have given us to you or another organisation in certain circumstances;
  • withdraw your consent at any time, where we rely on your consent. This will not affect anything we did before you withdrew it.

To use any of these rights, contact us by email or phone. There is normally no charge, and we will respond within one month. We may need to ask you to confirm your identity before we can help.

10. Cookies and our website

Cookies are small files that websites store on your device. Our website does not use cookies for advertising, tracking or analytics, so we do not ask for your consent to cookies.

Our website loads its fonts from Google Fonts, a service run by Google. To show the fonts, your browser connects to Google’s servers, which receive your IP address. Our hosting provider also keeps standard server logs, including IP addresses, to keep the website running and secure.

You can control or delete cookies at any time through your browser settings. If we ever add analytics or other cookies that are not strictly necessary, we will update this policy and ask for your consent first.

11. Links to other websites

Our website may link to other websites. We are not responsible for how those websites handle your information, so please read their privacy policies.

12. How to complain

If you are unhappy with how we have used your information, please contact us first and we will do our best to put things right.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.

WhatsApp us