1. Who We Are

This website is operated by CP Roofing Solutions (“we”, “our”, “us”).

We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: [email protected]
Phone: 01505 671020
Address:
Unit 5a,
Victoria works,
Mary street,
Johnstone
PA5 8BT


2. What Personal Data We Collect and Why

We may collect and process the following types of personal data:

Information You Provide to Us

Contact Forms
When you contact us via our website, we collect:

  • Your name

  • Email address

  • Phone number (if provided)

  • Any information included in your message

We collect this information to:

  • Respond to enquiries

  • Provide quotations

  • Deliver our roofing services

  • Maintain customer communication

The lawful basis for processing this data is legitimate interests and/or contractual necessity where applicable.


Media Uploads

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website may download and extract location data from images published on the site.


3. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience on our website.

We use:

  • Essential website cookies

  • Google Analytics

  • Meta (Facebook) Pixel

Full details about the cookies we use are outlined in our separate Cookies Policy.

You can manage your cookie preferences via our cookie banner when visiting the site.


4. Analytics

We use Google Analytics to help us understand how visitors use our website.

Google Analytics collects information such as:

  • Pages visited

  • Time spent on pages

  • Device type

  • General geographic location (not precise location)

  • IP address (anonymised where applicable)

This helps us:

  • Improve website performance

  • Improve user experience

  • Analyse marketing effectiveness

The lawful basis for this processing is consent, which you provide via our cookie banner.


5. Meta (Facebook) Pixel

We use the Meta Pixel to:

  • Measure the effectiveness of our advertising

  • Deliver relevant advertising on Facebook and Instagram

  • Understand website visitor behaviour

Meta may collect:

  • IP address

  • Browser information

  • Website interactions

  • Device information

This processing is based on consent, which you provide through our cookie banner.

For more information, please see Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/.


6. Who We Share Your Data With

We do not sell your personal data.

We may share data with:

  • Website hosting providers

  • IT and website maintenance providers

  • Analytics providers (Google)

  • Advertising partners (Meta Platforms)

  • Spam detection services

All third-party providers process data in accordance with UK GDPR requirements.


7. How Long We Retain Your Data

We retain personal data only as long as necessary for the purposes it was collected, including:

  • Contact enquiries: up to 12 months after last correspondence

  • Customer records: up to 6 years for accounting and legal purposes

  • Analytics data: as defined by Google Analytics retention settings

  • Comments: retained indefinitely unless removal is requested


8. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request erasure of your personal data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent (where processing is based on consent)

To exercise any of these rights, please contact us using the details above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Phone: 0303 123 1113


9. Where Your Data Is Sent

Some of our third-party providers (such as Google and Meta) may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

  • UK adequacy regulations

  • Standard Contractual Clauses

  • Equivalent lawful transfer mechanisms


10. How We Protect Your Data

We implement appropriate security measures including:

  • Secure hosting

  • SSL encryption

  • Firewall and malware protection

  • Restricted administrative access

  • Regular software updates

These measures are designed to prevent unauthorised access, alteration, disclosure or destruction of your personal data.


11. Data Breach Procedures

In the event of a data breach, we will:

  • Investigate and assess the risk

  • Take immediate steps to contain the breach

  • Notify the ICO within 72 hours where legally required

  • Inform affected individuals if there is a high risk to their rights and freedoms


12. Automated Decision Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.


13. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.


14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised effective date.