This policy explains what personal data we hold about you, why we hold it and what you can ask us to do with it. It applies to this website, to enquiries made by phone, email or WhatsApp, and to the surveys and roofing work we carry out. We handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025.
Who we are
Empire Roofing Bath is the data controller for the personal information described here. We are a roofing business working across Bath and the surrounding area. We have no public premises, so the simplest ways to reach us about your data are by email at info@empireroofingbath.co.uk or by phone on 01225 285181.
The information we collect
We collect only what we need to answer your enquiry and do the work. Depending on how you contact us, that may include:
- Contact details: your name, phone number, email address and the address of the property.
- Details about the job: what you have noticed, the type of roof, access arrangements and any photographs you send us.
- Survey records: notes and photographs of your roof taken during our visit, which we share with you.
- Quotes, invoices and payments: the work agreed, the price and the payment record. We keep payment references, not full card details.
- Messages: emails, texts and WhatsApp messages you send us, and notes of phone calls.
- Website data: technical information such as your IP address and browser type, which our hosting provider records in server logs to keep the site running and secure.
We do not ask for special category data, such as health information. If you choose to tell us something like that, for example that someone in the house is vulnerable and needs a leak made safe quickly, we use it only for that purpose.
How we use it and our lawful basis
UK GDPR requires a lawful basis for each use of personal data. Ours are:
- Taking steps at your request before a contract, and performing the contract: replying to your enquiry, arranging and carrying out the survey, preparing your quote, doing the work and honouring our written guarantee.
- Legal obligation: keeping financial records for tax and accounting, and dealing with building control where the work is notifiable.
- Legitimate interests: keeping records of past jobs so we can deal with a guarantee claim or a query about the work, protecting our business against disputes, and keeping this website secure.
- Consent: where we ask for it, for example before using a photograph of your roof anywhere other than in our dealings with you. You can withdraw consent at any time.
We will not use your details to send marketing unless you have agreed to it, and we never sell personal data.
Who we share it with
We share personal data only where it is needed to do the job or run the business. That can include:
- the provider of our online enquiry form and customer records system, which stores the details you submit on our behalf;
- our website hosting provider;
- WhatsApp, if you choose to message us that way, under WhatsApp's own terms;
- scaffolding firms or other trades working on your job, who receive only the address and access details they need;
- building control bodies, where work has to be notified;
- our accountant, bank and payment providers;
- professional advisers, insurers or the courts, if a dispute needs it.
Where a supplier processes data for us, we expect it to keep the data secure and use it only on our instructions. Some providers, such as messaging services, may process data outside the UK. Where that happens, we rely on the safeguards UK law requires for international transfers.
How long we keep it
We keep enquiry details for as long as we need them to deal with the enquiry. If no work follows, we delete them after a reasonable period, usually within two years. Where we carry out work, we keep the job file, survey photographs and guarantee details for the length of the guarantee, so that we can honour it, and financial records for as long as tax and accounting law requires. After that we delete or anonymise the information.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct anything that is wrong or incomplete;
- ask us to delete your data, where we have no lawful reason to keep it;
- ask us to restrict how we use it, or object to a use based on legitimate interests;
- ask for data you gave us to be passed to you or another organisation in a usable format;
- withdraw consent where we rely on it.
To use any of these rights, email us. We will reply within one month, and there is normally no charge. The law allows up to two further months for a complex request, and if we need it we will tell you why within the first month. We may need to confirm your identity first.
Keeping your data secure
We keep records on password-protected devices and accounts, limit access to the people who need it, and take care with paper notes on site. No system is perfect. If a breach is likely to put people's rights at risk, we report it to the regulator within 72 hours where feasible, and if it is likely to pose a high risk to you, we tell you without undue delay.
Cookies and this website
How this site uses cookies and similar technology, including the map and the enquiry form, is set out in our cookie policy. Links from this site to social media pages take you to services with their own privacy policies.
Complaints about how we handle your data
If you are unhappy with how we have used your information, please tell us first. As the Data Protection Act 2018 now requires, we will acknowledge a data protection complaint within 30 days, look into it and tell you the outcome without undue delay. You also have the right to complain to the Information Commission, the UK regulator for data protection, which replaced the Information Commissioner on 30 September 2026 and still uses the ICO name, through the ICO website. For other concerns about our work, see our complaints page.
Changes to this policy
We review this policy from time to time and will post any changes on this page with a new review date.
This policy is a starting point prepared for a service-area roofing business. The operator should have it reviewed by a qualified legal adviser before relying on it.
Last reviewed October 2026. Questions about this page: info@empireroofingbath.co.uk.