Privacy Policy

QuickRoofQuote (“we”, “us”, “our”) provides an embeddable instant roof quote platform for UK roofing contractors. This policy explains how we collect, use, and protect personal data when you use our platform or interact with a quote widget embedded on a contractor's website.

For the purposes of UK GDPR, the relevant roofing contractor acts as the data controller for leads generated through their widget. QuickRoofQuote acts as the data processor.

From homeowners using the quote widget:

• Full name, email address, and phone number
• Property address and postcode
• Estimated roof area (derived from satellite imagery)
• Selected product tier and estimated quote range
• Preferred installation timeline
• GDPR consent timestamp

From contractors registering an account:

• Company name, email address, and password (hashed)
• Brand colour and logo (if uploaded)
• Billing information (processed by Stripe — we do not store card details)

For homeowners:

• To generate and display an instant roof price estimate
• To send your enquiry to the roofing contractor whose widget you used
• To send you a confirmation email with your quote summary

For contractors:

• To provide access to the contractor dashboard and lead inbox
• To send email notifications when new leads are received
• To manage your subscription via Stripe

We process homeowner data on the basis of consent — you explicitly tick a consent checkbox before submitting your details. You may withdraw consent at any time by contacting the roofing contractor directly or emailing us at the address below.

We process contractor data on the basis of contract — it is necessary to provide the service you have signed up for.

Lead data is retained for as long as the contractor's account is active, or until they delete the lead from their dashboard. If a contractor closes their account, all associated lead data is deleted within 30 days.

Contractor account data is retained for the duration of the contract and deleted within 30 days of account closure.

We use the following third-party processors:

• Supabase / PostgreSQL — database hosting (EU-West region)
• Google Maps & Solar API — address lookup and roof area estimation
• Resend — transactional email delivery
• Stripe — payment processing and subscription management

Each processor is bound by a Data Processing Agreement and complies with UK GDPR.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Object to or restrict processing
• Data portability

To exercise any of these rights, please email privacy@quickroofquote.co.uk. We will respond within 30 days.

We use a single HTTP-only session cookie (rrq_token) to authenticate contractor accounts. We do not use tracking or advertising cookies. The quote widget does not set any cookies on third-party websites.

For any privacy-related questions or requests, contact us at privacy@quickroofquote.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).