Effective Date: June 11, 2025
At S. Nash Roofing, we are committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, www.snashroofing.co.uk, interact with our contact forms, or use our services.
We are a family-run business established for over 25 years, serving clients across Mitcham, Surrey, Bury St Edmunds, Suffolk, and the surrounding regions.
1. Information We Collect
We collect various types of information to provide and improve our services to you.
1.1. Personal Information You Provide to Us When you interact with us, particularly through our contact forms, you may provide us with personal information. This includes:
- Contact Information: Your name, email address, phone number, and postal address.
- Enquiry Details: Any information you include in your message or enquiry regarding your roofing needs or other requests.
1.2. Information Collected Automatically When you visit our website, certain information is collected automatically through technologies like cookies and Google Analytics. This information helps us understand how our website is used and improve your experience. This may include:
- Usage Data: Information about how you use our website, such as the pages you visit, the time spent on those pages, and your navigation paths.
- Device Data: Information about the device you use to access our website, including your IP address (which is anonymized where possible for GDPR compliance), browser type, operating system, and unique device identifiers.
- Location Data: General geographical location derived from your IP address.
- Cookies and Tracking Technologies: Information collected through cookies and similar technologies, as detailed in Section 5.
2. How We Use Your Information
We use the information we collect for various purposes, primarily to provide our services, respond to your enquiries, and improve our website and offerings.
- To Respond to Your Enquiries: We use the personal information you provide via contact forms to understand your needs and respond to your specific requests for information, quotes, or services.
- To Provide and Deliver Services: If you become a client, we use your information to deliver our roofing services, manage your project, and communicate with you about the work being carried out.
- To Improve Our Website and Services: We use automatically collected data, particularly from Google Analytics, to understand website traffic, user behaviour, and identify areas for improvement in our website design, content, and service offerings.
- For Internal Analytics: To perform data analysis, identify usage trends, and evaluate the effectiveness of our marketing efforts.
- To Maintain Security: To detect, prevent, and address technical issues or fraudulent activities.
- To Comply with Legal Obligations: To meet any applicable legal or regulatory requirements.
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing your personal information:
- Consent: We process your information where you have given us explicit permission (consent) for a specific purpose, such as when you submit a contact form. You have the right to withdraw your consent at any time.
- Performance of a Contract: We may process your information where it is necessary for the performance of a contract with you or to take steps at your request before entering into such a contract (e.g., providing a quote).
- Legitimate Interests: We may process your information where it is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms. This includes improving our website, understanding user behaviour, and ensuring the security of our services.
- Legal Obligation: We may process your information where it is necessary to comply with a legal obligation.
4. How We Share Your Information
We do not sell your personal information to third parties. We may share your information in the following limited circumstances:
- With Google Analytics: We use Google Analytics to collect and process data about your website usage. This data is shared with Google, which acts as a data processor. Google’s terms of service require us to notify you of this processing. We configure Google Analytics to anonymize IP addresses where possible to enhance your privacy.
- With Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as website hosting providers (WordPress), email service providers, and IT support. These providers are contractually obligated to protect your information and use it only for the purposes for which we disclose it to them.[6, 7]
- For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and for the operation of Google Analytics.
- What are Cookies? Cookies are small text files placed on your device by websites that you visit. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
- How We Use Cookies: We use cookies to remember your preferences, understand how you interact with our website, and to gather analytical data via Google Analytics.
- Cookie Consent: As a WordPress website operating in the UK, we use a cookie consent banner to inform you about our data collection practices and obtain your explicit consent before setting non-essential cookies. This banner allows you to accept, decline, or manage your cookie preferences by category.
- Managing Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling cookies may affect the functionality of our website and your user experience.
6. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Contact Form Data: Information submitted via contact forms is retained for a period necessary to address your enquiry and for a reasonable period thereafter for record-keeping purposes.
- Google Analytics Data: We manage data retention settings for Google Analytics, with options typically ranging from 2 to 26 months, in line with GDPR requirements.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- SSL Certificate (HTTPS): Our website uses an SSL certificate to encrypt data transmitted between your browser and our server, ensuring secure communication.
- Secure Email Transmission: Emails sent from our contact forms are transmitted securely via SMTP or TLS.
- Internal Policies: We have internal policies and procedures to ensure that personal data is handled securely and in compliance with data protection laws.
8. Your Data Protection Rights (GDPR)
Under GDPR, you have certain rights regarding your personal data. These include:
- The Right to Access: You have the right to request copies of your personal data that we hold.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions.
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
- The Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the details provided in Section 11. We will respond to your request within one month.
9. Children’s Privacy
Our website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to remove that information from our servers.
10. Links to Other Websites
Our website may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please contact us:
S. Nash Roofing snashroofing@btinternet.com – 07956900999 – 01359235245