Privacy policy

The controller of your personal information is JJ Roofing Bognor Regis, the trading name of [operator to confirm: legal entity, either the sole trader's full name or the limited company's registered name and company number]. Our data protection fee registration with the Information Commissioner's Office is number [operator to confirm: Information Commissioner's Office data protection fee registration number].

We are a service-area business. We travel to properties in Bognor Regis and the surrounding towns, so this website lists no premises address and there is no office for visitors. You can reach us about anything in this notice by:

• email: info@jjroofingbognorregis.co.uk
• phone: 01243 252373
• post: [operator to confirm: postal address for data protection correspondence, or remove this line]

We handle personal information under the UK General Data Protection Regulation and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. Together these set out the rules we follow, the reasons we may rely on to use your information, and the rights you have.

Personal information means anything that identifies you, directly or indirectly: your name, address, phone number, email address, photographs of your property linked to your address, and the messages you send us.

When you get in touch

Through the enquiry form, by phone, by email or by WhatsApp, you give us details such as your name, phone number, email address, the address or postcode of the property and a description of the roof problem. If you send photographs, we keep those too.

When we survey the roof and do the work

We record the property address, notes about the roof, and photographs of the roof and the parts of the building around it. We keep copies of the written quote, any agreement and changes to it, your cancellation information, invoices and payment records.

When you use this website

Like any website, the server that hosts this site receives technical details from your browser, such as your IP address, browser type and the pages requested, and may keep them in short-term logs for security. The site is hosted by [operator to confirm: hosting provider name]. [operator to confirm: whether any analytics tool, such as Google Analytics, is installed on the live site; if one is, describe it here and in the cookie policy.]

The enquiry form on our pages is provided by a customer relationship management system that we use to receive and manage enquiries. When you fill it in, what you type goes directly to that system, which holds it for us so we can reply and keep track of the job.

The system is run for us by [operator to confirm: legal name of the enquiry form and customer management provider] as our processor. A processor may only use your information on our instructions and under a written contract, and must keep it secure. The form is loaded from the provider's own web address, so your browser connects to their servers when a page with the form opens. [operator to confirm: where the provider stores the data, and the safeguard used if it is outside the UK.]

We use what you send through the form to reply to you, arrange a survey and prepare a quote. [operator to confirm: whether any follow-up or marketing messages are sent, and on what basis.]

Our pages carry a WhatsApp button. It opens a short form in your own browser where you can type your name, contact details and what you need. When you press send, your browser opens WhatsApp with that text ready as a message to our business number, +44 7880 284133. Nothing you type in that form reaches us until you choose to send the message from WhatsApp itself.

Once you send it, the message, your WhatsApp name and your phone number are handled by WhatsApp, a Meta company, under its own terms and privacy policy, as well as by us. We use WhatsApp messages in the same way as any other enquiry: to reply, arrange a visit and talk about the job. [operator to confirm: who in the business has access to the WhatsApp account, and how long messages are kept on the phone and in any backup.]

The service-area map

Some pages show a map of the area we cover. It is drawn in your browser using map images from OpenStreetMap's tile servers, run by the OpenStreetMap Foundation. To show the map, your browser requests those images directly, so the tile servers receive your IP address and basic browser details, as with any web request. We set no cookies for this map.

The Google map on the contact page

The contact page can show our Google Business Profile on a Google map. That map sets Google cookies, so it does not load when the page opens. You see a placeholder instead, and the map only loads if you click to show it. Once loaded, Google receives your IP address and browser details and may set cookies, under Google's own privacy policy. If you never click it, no information goes to Google from that page.

Our cookie policy lists the cookies used on this site.

The law requires us to have a lawful basis for each use of your information. These are the ones we rely on:

• Taking steps you ask for before a contract: replying to your enquiry, visiting to survey the roof and preparing a written quote.
• Performing a contract: carrying out the work you have agreed, keeping you informed and taking payment.
• Legal obligation: keeping financial records for tax, handling Building Regulations notifications where work is notifiable, and completing waste paperwork such as a consignment note where the law requires it.
• Legitimate interests: keeping a record of the work and photographs of the roof so we can answer later questions about it, dealing with complaints or legal claims, and keeping this website secure. We use this basis only where it does not override your own interests and rights.
• Consent: anything optional, such as a later reminder about roof maintenance, only if you agree. You can withdraw consent at any time.

We never sell your personal information. We share it only where needed to deal with your enquiry or carry out the work:

• Our service providers (processors): the enquiry form and customer management provider, our email provider [operator to confirm: email provider name], our website host [operator to confirm: hosting provider name] and our accountant or bookkeeper [operator to confirm: accountant or bookkeeper, if any]. Each works on our instructions under a written contract.
• Scaffold firms: your name and the property address where a scaffold is needed, including for any scaffold licence from the highway authority.
• Building control: the council's building control team or a registered building control approver, where the work is notifiable under the Building Regulations.
• Waste carriers: the property address on any waste paperwork the law requires.
• Your insurer or agent: only if you ask us to send them our photographs or quote.
• Authorities: where the law requires it, or to protect our legal rights.

Some of the service providers listed above may store or process information outside the United Kingdom, for example on cloud servers. Where that happens, we make sure a lawful safeguard is in place, such as UK adequacy regulations for the destination country or the International Data Transfer Agreement approved for use in the UK.

[operator to confirm: which processors store or access data outside the UK, the countries involved, and the safeguard relied on for each.]

We keep personal information only for as long as we need it for the purpose we collected it for, or for as long as the law requires.

• Enquiries that do not lead to work: [operator to confirm: retention period, for example a set number of months after the last contact].
• Customer job records, quotes and roof photographs: [operator to confirm: retention period after the work is finished].
• Invoices and payment records: [operator to confirm: retention period for accounting records, in line with HMRC rules].
• WhatsApp messages and call records: [operator to confirm: retention period].
• Website server logs: [operator to confirm: retention period set by the hosting provider].

When a period ends, we delete the information or make it anonymous.

You have the right to:

• ask for a copy of the personal information we hold about you (a subject access request);
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, where we no longer have a reason to keep it;
• ask us to restrict how we use it, for example while a correction is checked;
• object to our use of it where we rely on legitimate interests;
• ask for information you gave us to be passed to you, or to another organisation, in a common electronic format, where we use it under a contract or with your consent;
• withdraw consent at any time, where consent is our basis.

There is normally no charge. We reply within one month of receiving your request. For a complex request, or several at once, we may extend that by up to two further months, and if we do we tell you why within the first month. We may ask for proof of identity before releasing information, so that it goes only to you.

If you are unhappy with how we have handled your personal information, please tell us first, by email or phone using the details at the top of this notice. You can also use the enquiry form and say that your message is a data protection complaint.

Under section 164A of the Data Protection Act 2018, added by the Data (Use and Access) Act 2025 and in force from 19 June 2026, we will:

• acknowledge your complaint within 30 days of receiving it;
• look into it and take appropriate steps to respond, without undue delay;
• keep you informed as we look into it, and tell you the outcome.

You can read the section itself on legislation.gov.uk.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, through its website at ico.org.uk.

Keeping it secure

We limit access to your information to the people who need it to deal with your enquiry or job, keep devices and accounts protected by passwords, and choose service providers who keep data secure. No system is completely secure, so if a breach affecting your information is likely to put your rights at risk, we will tell you and, where the law requires, report it to the Information Commissioner's Office.

Children

Our services are for adults responsible for a property. We do not knowingly collect information from children.

Changes

We may update this notice when the way we work or the law changes. The effective date at the top shows when it was last revised, and the current version is always on this page.