Data Protection Notice

Rock Roofing Ltd respects your right to privacy. In this Privacy Notice we explain who we are, how we collect, share and use personal information about you, and how you can exercise your privacy rights. Rock Roofing Ltd is committed to being transparent about how it collects and uses any personal data and to meeting its data protection obligations. We will therefore comply with the General Data Protection Regulation 2018 act (GDPR) regarding all processes and requests in line with the data we hold. If you have any questions or concerns about our use of your personal information, please contact james@rockroofingltd.co.uk.

We may collect your personal information such as name, email address, postal address, telephone number, gender and date of birth. We need the personal information to enter into and perform a contract with you. We retain personal information we collect from you where we have an ongoing legitimate business need to do so.

We may disclose your personal information to:

• relevant employees in our company;
• third party services providers and partners who provide data processing services to us or who otherwise process personal
  information for purposes that are described in our Privacy Notice or notified to you when we collect your personal information;
• any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure
  is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to
  protect your interests or those of any other person;
• a potential buyer (and its agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of
  our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in our
  Privacy Notice; or
• any other person with your consent to the disclosure.

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident.
These countries may have data protection laws that are different to the laws of your country, which includes the EU Standard
Contractual Clauses.

We use appropriate technical and organisational measures to protect the personal information that we collect and process about
you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

You are entitled to know what data is held on you and to make what is referred to as a Data Subject Access Request (‘DSAR’).
You are also entitled to request that your data be corrected in order that we hold accurate records. In certain circumstances, you have other data protection rights such as that of requesting deletion, objecting to processing, restricting processing and in some cases requesting portability. Further information on your rights is included in our Privacy Notice.

You can opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You have the right to complain to a data protection authority about our collection and use of your personal information.