Privacy Policy

Who is responsible for your data

K & M Roofing Solutions LTD is the data controller for any personal data you send through this website. We are a company registered in England and Wales, company number 12489947, at 47 Northcote Road, Croydon, CR0 2HY.

For anything to do with your data, including any of the requests described below, email us at office@kmroofingsolutions.uk or write to us at the address above.

What we collect and why

We collect what you type into the contact form: your name, your email address and your postcode, and optionally your phone number and the type of enquiry, along with whatever you write in the message box. We ask for a postcode because it lets us tell you immediately whether your property is within the area we cover. If, and only if, you agree to analytics or advertising in the cookie banner, we also collect information about how you use this website through Google's tools, as described under Cookies and tracking.

We use it to reply to your enquiry, arrange a survey and quote for the work. We do not send you marketing emails, calls or messages, we do not add you to a mailing list, and we do not sell or rent your details to anyone. If, and only if, you have agreed to analytics or advertising in the cookie banner, Google may be told that an enquiry was sent, together with the type of enquiry and the first half of your postcode, so that we can see which of our adverts lead to enquiries. Google may also use it for its own purposes, as described under Who we share it with.

Our server also records the IP address a submission came from. That is used to limit automated spam and nothing else.

Our lawful basis

Under UK GDPR we rely on two bases for handling your enquiry, and on your consent for analytics and advertising, which is described under Cookies and tracking. Replying to your enquiry is processing necessary to take steps at your request before entering into a contract, under Article 6(1)(b). Keeping the record of the enquiry and blocking spam is our legitimate interest in running the business and protecting the website, under Article 6(1)(f). We ask you to tick a consent box on the form so it is clear what you are sending and what it will be used for.

We do not ask for or want any special category data. Please do not include health, financial or other sensitive information in the message box.

How long we keep it

If your enquiry does not lead to work, we delete it within 12 months. If it does lead to work, we keep the record for 6 years after the job is completed, because that is the period during which a claim could be brought and during which our 10-year workmanship guarantee may need to be evidenced. The IP address used to protect the form from spam is kept for no more than 24 hours. Submissions our spam filter blocked, including their content and IP address, are kept for 30 days so that we can check the filter has not stopped a genuine enquiry. A backup copy of each enquiry is kept on our server for 90 days in case the email to our office fails to arrive.

Who we share it with

We do not sell your data. Your enquiry is handled by one provider on our behalf, and Google receives information about your visit, including that an enquiry was sent, only if you agree to it:

• OVH, our web hosting and email provider. Form submissions are processed and stored on their servers within the EU and delivered to our mailbox there.
• Google, which provides Google Tag Manager, Google Analytics and Google Ads, and only if you agree to analytics or advertising in the cookie banner. What it receives depends on what you agree to, as described under Cookies and tracking. This site's own code never passes Google your name, email address, phone number, full postcode or message. For Google Analytics, Google acts on our behalf, as our processor under its data processing terms, except for the data shared under the data sharing settings in our Google Analytics account, which we have turned on: Google may use the data shared that way for its own purposes, and for that data, Google is an independent controller. For Google Ads, including measuring which adverts lead to enquiries and, only if you agree to advertising, showing our adverts to people who have visited this site, Google is an independent controller of the data it receives, which means it decides for itself how that data is used.

Google may process the information it receives outside the UK, including in the United States. For transfers from the UK to the United States, Google relies in certain cases on the UK Extension to the EU-US Data Privacy Framework.

We would also disclose data where we are legally required to, for example in response to a valid request from law enforcement.

Cookies and tracking

This website uses Google Tag Manager, Google Analytics and Google Ads, but only if you agree to it. On your first visit a banner asks you. Until you choose, and if you choose Reject all, nothing is loaded from Google and your browser makes no request to Google at all: no script, no cookie and no data.

You can agree to two things separately, and both are off until you turn them on:

• Analytics. Google Analytics measures how the site is used, such as which pages are visited and how people found them, so that we can see what is useful and improve what is not. Because we have turned on its data sharing settings, Google may also use some of this data for its own purposes, as described under Who we share it with.
• Advertising. Google Ads measures whether our adverts lead to enquiries, and may also measure whether they lead to phone calls. We also use it for remarketing: Google may show our adverts to you later because you have visited this site. Agreeing to this lets Google store advertising cookies, receive information about your visit for advertising, and use it for personalised advertising; we ask for these together.

If you agree to either, we load Google Tag Manager, and it tells Google's code which categories you agreed to and which you refused. For a category you refused, Google's code does not set or read cookies, although it may still send Google limited information about your visit without them. For a category you agreed to, it may set cookies on this site's domain, for example ones whose names begin with _ga for analytics and _gcl for advertising. Either way, Google receives your IP address when your browser connects to it, as any website you connect to does.

If you have agreed to analytics or advertising, Google may also be told when an enquiry is sent, together with the type of enquiry you chose and the first half of your postcode, such as SW11; and when a phone number or email address on the site is clicked, with which part of the page it was on. This site's own code never adds your name, contact details or message to any of this.

We rely on your consent for all of this, and you can change or withdraw it at any time with Cookie settings at the foot of every page. Withdrawing consent for analytics or advertising deletes Google's cookies for that category from this site's domain and reloads the page, and once both are off, Google's code is no longer loaded. Withdrawing does not take back what Google has already received. Your choice itself is kept in your browser's local storage, not in a cookie, together with the date you made it, and we ask again after 12 months, or sooner if we change what we ask for.

The typeface is served from our own server rather than from Google Fonts, so reading this site without agreeing to anything discloses your IP address to nobody except our host.

This site also keeps a copy of the contact form in your browser: when you press Send, your name, email, phone number, postcode, enquiry type and message are held in this tab's own storage, solely so that if the form sends you back to correct something you do not have to type it all again. That copy never leaves your device, is deleted as soon as we have received your enquiry and is gone when you close the tab; it is not a cookie and it is not used to track you.

Your rights

Under UK GDPR you have the right to ask us for a copy of the data we hold about you, to have it corrected if it is wrong, to have it erased, to restrict or object to how we use it, and to have it provided in a portable format. Where we rely on consent you can withdraw it at any time, which does not affect anything done before you withdrew it.

Email office@kmroofingsolutions.uk and we will respond within one month. There is no charge.

Complaints

If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office, the UK supervisory authority for data protection. They can be reached at ico.org.uk/make-a-complaint or on 0303 123 1113. We would rather you came to us first so we can put it right.

Changes to this policy

If we change how we handle data we will update this page and the date at the top. This policy was last updated on 22 October 2026.