Privacy

We are the data controller for this site and the member portal.

• Your account: name, email address, mobile number and login details. Passwords are held by our sign-in provider in scrambled form.
• Your business: business name, business type, Companies House number, trading address, website, services, areas covered and a short description.
• Your checks:
  • Insurance: your insurance certificate, insurer, cover and expiry date.
  • Experience: proof of your years in roofing.
  • Reviews: your review profile links.
  • Photo ID: deleted as soon as the check is decided. We keep only the name on the ID, the document type, who checked it and the date.
• Your profile: logo and job photos with town and caption. We strip location and camera data from every photo when you upload it.
• Payments: your plan, payment choice, credit agreement, payments and VAT invoices. Card payments are handled by Stripe, and we never see or store your full card number.
• Records of your agreement: when you tick the terms box we record the date, the wording you saw, your IP address and your device, as evidence of what you agreed to.
• Messages and activity: emails we send you, notes on your membership, and a log of changes to your account.

We don't sell your data and we don't send you marketing from other companies.

• The public: your profile on expertroofer.co.uk shows the details you give us for your profile. Your documents, ID and payment details are never published.
• Stripe: processes your payments.
• Our hosting, database and email providers: they run the portal and send our emails, acting on our instructions under contract.
• Our accountant: sees payment and invoice records.
• Authorities: only where the law requires it.

Some providers process data outside the UK, and where they do, it's protected by safeguards recognised under UK data protection law.

• Photo ID: deleted as soon as the check is decided, or 30 days after we ask for changes if nothing new arrives.
• Applications that never complete: deleted after 12 months.
• Membership and business records: kept while you're a member and for 2 years after, to deal with complaints and badge misuse.
• Payment records, credit agreements and VAT invoices: kept for 6 years, as tax law requires.

You can ask to:

• see the personal data we hold about you
• correct it
• delete it, where we don't have to keep it by law
• restrict or object to how we use it
• take a copy to another provider

and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

• Cookies: this site uses only the cookies it needs to work and stay secure, plus the browser storage that keeps you signed in. There are no advertising or tracking cookies.
• Where you came from: when you first arrive, your browser stores the link details that brought you here, such as the campaign name and the referring site, for up to 90 days. If you apply, we save it with your application so we know which adverts and pages work. It is our own storage, not an advertising network.
• Fonts: fonts load from Google Fonts, which sees your IP address when they load.

• Connections: everything is sent over an encrypted connection.
• Documents: kept in private storage and opened only through short-lived links by the people who check them.
• ID photos: only admin and checking staff can see them, and they're deleted as soon as the check is decided.

If we change how we use your data, we update this page and the date at the top, and email members about important changes.