Privacy Policy

1. Who we are

Northbrook Roofing & Solar Ltd (“Northbrook”, “we”, “us”) is the data controller for the personal data described in this policy. Our registered trading address is Unit 7, Northbrook Business Park, Reigate, Surrey RH2 9AB. You can reach us about anything in this policy at hello@northbrookroofingsolar.co.uk or on 01737 555 0142.

This policy explains what personal data we collect when you use northbrookroofingsolar.co.uk or enquire about our services, why we collect it, how long we keep it, who we share it with, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The data we collect

We only collect data you choose to give us. When you submit the enquiry form on this website, we collect your name, email address, telephone number, the service you are interested in, your property address, any message you write, and whether you have consented to be contacted by SMS. We do not ask for, and you should not send us, special category data (such as health information) through the form.

If you telephone or email us directly, we collect whatever you choose to tell us in order to answer your enquiry and, if you go ahead, to carry out the work.

3. Lawful basis for processing

We rely on two lawful bases. Where you submit an enquiry, we process your data on the basis of your consent and in order to take steps at your request before entering into a contract. Where you become a customer, we process your data on the basis of performance of a contract and our legitimate interests in running the business — for example, keeping records of completed work and registering guarantees. You may withdraw consent at any time by contacting us.

4. How we use your data

We use the personal data you provide to:

• respond to your enquiry and arrange a free site survey;
• prepare and send you a written quote;
• carry out, schedule and invoice agreed work;
• register MCS, manufacturer and workmanship guarantees in your name;
• meet our legal, insurance and accounting obligations.

We do not use your data for automated decision-making or profiling, and we will never sell it.

5. Marketing

If you enquire but do not proceed, we will make a single follow-up contact and then leave it to you — we do not run mailing lists or send marketing campaigns. If you tick the SMS consent box on the form, we will use SMS as one of the ways we reply to your enquiry; you can ask us to stop at any time.

6. Who we share your data with

We keep data sharing to the minimum needed to run the website and the business. Our processors are:

• Formspree — handles delivery of the website enquiry form to our inbox. Form submissions pass through Formspree’s servers.
• Cloudflare — hosts and serves this website and provides security and content-delivery infrastructure.

This website does not use Google Analytics, advertising pixels or any third-party tracking. We may also share data where we are legally required to, or with our insurers and professional advisers where strictly necessary.

7. Cookies

This website does not set any analytics, advertising or tracking cookies. No cookie banner is shown because there are no non-essential cookies to consent to. Your browser may store standard technical data required to serve the page; this is not used to track you.

8. How long we keep your data

If you enquire but do not become a customer, we delete your enquiry data within twelve months. If you become a customer, we keep records of the work, quotes and invoices for six years after completion to meet accounting, insurance and guarantee obligations, after which they are securely deleted.

9. How we protect your data

Enquiry data is transmitted over an encrypted (HTTPS) connection and held in access-controlled email and business systems. We restrict access to the small number of people who need it to do their job.

10. Your rights

Under UK GDPR you have the right to:

• be informed about how your data is used (this policy);
• request a copy of the data we hold about you;
• have inaccurate data corrected;
• have your data erased where there is no overriding reason to keep it;
• restrict or object to processing;
• data portability;
• withdraw consent at any time.

To exercise any of these rights, email hello@northbrookroofingsolar.co.uk. We will respond within one calendar month.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be reflected here before they take effect.