Privacy notice

Who we are

Roofy is the controller of the personal data described here for uk.roofy.io and Roofy UK accounts. We handle it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Contact us about privacy at [email protected].

What we collect

Account details: your name, email address, password (stored only as a secure hash), phone number if you add one, and what brings you to Roofy UK.

What you do on Roofy UK: listings you create, enquiries and messages, saved homes and searches, your address and postcode where you give them, membership and billing records (card details are handled by our payment provider, not stored by us), and branch claims.

Technical data: your IP address, device and browser details, and security logs. Saved homes you keep without an account stay on your device.

Why we use it and our lawful bases

To run your account, show and send enquiries, list your property and provide a membership you buy (contract).

To keep Roofy UK secure, prevent fraud and abuse, rate-limit and audit sensitive actions such as branch claims, and improve the service (legitimate interests).

To meet tax, accounting and other legal duties (legal obligation).

To send optional updates and marketing, only if you agree; you can withdraw at any time (consent).

Who we share it with

The agent, owner or branch you contact gets your enquiry and the details you include. Service providers that host Roofy UK, send email, calls and text messages, and take payments process data on our instructions under contract. We may share data when the law requires it or to protect people from harm. We do not sell your personal data.

International transfers

Some providers process data outside the UK, including in the United States. Where they do, we use safeguards the UK recognises, such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

We keep account data while your account is open. When you close it we delete or anonymise it within a reasonable period, except records we must keep by law (for example billing records, kept for six years) or need for an open complaint or claim.

Your rights

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. You can download your data and close your account from Settings, or email [email protected]. We reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Cookies

We use cookies that are needed to sign you in and keep your account secure: roofy_uk_ui tells pages that you are signed in and a secure session cookie holds your session. They are separate from Roofy US cookies.

Changes

We will update this notice when how we use data changes, and tell you about important changes before they apply.