Privacy & cookies

Who we are

WeatherTech Roofing Mansfield Ltdis the data controller for personal data you give us on this site. We're a UK company registered in England — company number 11923704, registered office 183 Mansfield Road, Clipstone, NG21 9AB.

What we collect

• Your name, phone, email and address when you request a quote or contact us — to respond to your enquiry.
• Photos of your property or job that you send us — to plan the work.
• Standard server logs (IP address, timestamp, page) — for security and to fix problems.

We don't buy lists, and we don't send marketing emails unless you ask for them.

Our lawful basis

When you ask us for a quote or get in touch, we handle your details to take steps at your request before entering into a contract. Beyond that, we rely on our legitimate interest in running the business and keeping the site secure, and on our legal obligations (for example, keeping records for tax). Any optional marketing is sent only with your consent, which you can withdraw at any time.

Who we share it with

We don't sell your data. To run the business we rely on a few trusted suppliers — secure cloud hosting within the UK/EU, and messaging providers that deliver our texts and emails on our behalf. They only process your data on our instructions, under contract. If you accept analytics/marketing cookies, Google and Meta also process usage data as described under “Cookies” below.

How we protect your data

We apply appropriate technical and organisational measures to keep your data — and any sensitive data such as authentication credentials — safe:

• Encryption in transit. All connections to our site and internal system use HTTPS/TLS, so data is encrypted while it travels between your device, our servers and the services we rely on.
• Encryption at rest. Data is held on managed cloud infrastructure within the UK/EU that encrypts stored data at rest.
• Access controls & least privilege. Access is restricted to authorised staff who sign in with their own accounts, and each part of the system is granted only the permissions it needs. Sensitive credentials (for example the tokens for any connected Google account) are stored in a restricted area reachable only by our own back-end servers — never exposed to your browser, to customers, or to ordinary staff logins.
• Retention & secure deletion.We keep data only for as long as we need it (see “How long we keep your data” below), then delete it. Connected-account credentials are removed when the connection is disconnected or the grant is revoked.

No system can be guaranteed completely secure, but we review these measures and act promptly if we ever become aware of a problem.

Cookies

We use a small number of essential cookies that keep the site working (e.g. session tokens for staff sign-in and your cookie choice). These are always on because the site can't function without them.

With your consent, we also use analytics and marketing cookies to understand how the site is used and to measure our advertising:

• Google Analytics (GA4) — anonymous usage statistics (pages viewed, where visitors come from), set by Google.
• Meta Pixel — measures whether a visit led to an enquiry so we can gauge our Facebook/Instagram advertising, set by Meta.

None of these run until you choose “Accept” on the cookie banner — decline and no analytics or marketing cookies are set. You can change your mind any time by clearing this site's cookies in your browser, which brings the banner back. When these tools are active, some data (such as your device/usage data) is processed by Google and Meta as described in their own privacy policies.

Google account data

This section is about our own staff's Google accounts, not yours as a visitor — it's here because Google requires us to publish it.

Where a member of our staff connects a Google account to our internal system, we access data from Google's Business Profile and Google Ads APIs solely to show our own reviews and advertising performance to our own staff. We request only the minimum permissions (scopes) needed for those features and nothing wider.

We store only the credentials needed to keep that connection working. In line with “How we protect your data” above, those credentials are encrypted at rest, sent only over encrypted (TLS) connections, and held in a restricted area reachable only by our own back-end servers — never exposed to your browser or to ordinary staff logins. We do not sell this data, do not transfer it to third parties, and do not use it for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Access can be revoked at any time from the Google account's own security settings.

How long we keep your data

Quote enquiries: 12 months after our last contact, then deleted. Active customers: for the lifetime of any warranty on the work we've done for you. Server logs: 30 days.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email weathertech@live.co.uk and we'll respond within 30 days.

You can also complain to the Information Commissioner's Office.