Privacy & cookies

Who we are

WEATHER-TECH ROOFING (MANSFIELD) LTD, trading as WeatherTech Roofing, is the data controller for personal data you give us on this site. We're a UK company registered in England — company number 11923704, registered office 183 Mansfield Road, Clipstone, NG21 9AB.

What we collect

• Your name, phone, email and address when you request a quote or contact us — to respond to your enquiry.
• Photos of your property or job that you send us — to plan the work.
• Standard server logs (IP address, timestamp, page) — for security and to fix problems.

We don't buy lists, and we don't send marketing emails unless you ask for them.

Our lawful basis

When you ask us for a quote or get in touch, we handle your details to take steps at your request before entering into a contract. Beyond that, we rely on our legitimate interest in running the business and keeping the site secure, and on our legal obligations (for example, keeping records for tax). Any optional marketing is sent only with your consent, which you can withdraw at any time.

Who we share it with

We don't sell your data. To run the business we rely on a few suppliers for cloud hosting, authentication, and delivery of our texts and emails. We also use AI providers, including Anthropic (Claude), for the enabled features described under “Google account data” below. Providers may process information outside the UK/EU; contact us if you need details about a particular service. If you accept analytics/marketing cookies, Google and Meta also process usage data as described under “Cookies” below.

How we protect your data

We apply appropriate technical and organisational measures to keep your data — and any sensitive data such as authentication credentials — safe:

• Encryption in transit. All connections to our site and internal system use HTTPS/TLS, so data is encrypted while it travels between your device, our servers and the services we rely on.
• Encryption at rest. Our internal system stores data on managed cloud infrastructure that encrypts it at rest.
• Access controls & least privilege. Access is restricted to authorised staff who sign in with their own accounts, with application controls for the features available to each role. Some external services require broad permissions, as explained below. WeatherTech OS integration credentials (such as Google Ads and Business Profile tokens) are stored in a restricted area reachable only by our own back-end servers — never exposed to your browser, to customers, or to ordinary staff logins.
• Retention & secure deletion. We keep data only for as long as we need it (see “How long we keep your data” below), then delete it. Revoking a Google connection stops future access through that grant; it does not itself delete information already stored. Contact us to request deletion of stored information or credentials.

No system can be guaranteed completely secure, but we review these measures and act promptly if we ever become aware of a problem.

Cookies

We use essential browser storage to keep the site working, including staff sign-in and remembering your cookie choice. This is always on.

With your consent, we also use analytics and marketing cookies to understand how the site is used and to measure our advertising:

• Google Analytics (GA4) — anonymous usage statistics (pages viewed, where visitors come from), set by Google.
• Meta Pixel — measures whether a visit led to an enquiry so we can gauge our Facebook/Instagram advertising, set by Meta.

Before you accept, Google runs in denied Consent Mode. It may receive cookieless measurement pings, but it cannot store or read analytics or advertising identifiers in your browser. Meta does not load. If you accept, Google can use analytics and advertising storage, Meta can measure visits and enquiries, and we can keep a first-party campaign-attribution cookie for up to 90 days. If you submit an enquiry, campaign and referrer details sent with that form may be stored on the enquiry so we can understand how customers find us. Use “Cookie settings” in the footer at any time to change your choice. When these tools are active, some device and usage data is processed by Google and Meta under their own privacy policies.

Google account data

WeatherTech OS is our internal staff application. Authorised staff connect Google services for staff sign-in, review management, advertising measurement and reporting. These connections concern our business accounts and staff; visitors do not need to connect a Google account to request a roofing quote.

• Staff sign-in. Google supplies basic account information, including the staff member's name and email address, to identify their account. Access to WeatherTech OS is subject to our staff approval and access controls.
• Google Business Profile. We retrieve and store business profile information, customer reviews and profile performance. Staff can review draft replies and publish replies or business updates to our Google profile. Review information, including names, ratings and comments used in reply drafts, is processed by Anthropic (Claude) when AI features prepare summaries and draft replies. We store the resulting drafts and summaries. If enabled, the system can also publish a templated thank-you to five-star reviews that contain no written comment.
• Google Ads. We retrieve campaign performance, including impressions, clicks, spend, conversions and conversion value, and compare it with leads in WeatherTech OS. The integration can create the sales conversion action and send eligible sales conversions, including Google click identifiers and contract values, to Google Ads for conversion measurement.
• BigQuery and Claude. Where authorised staff enable our Google Cloud BigQuery connector in Claude, Claude can access the datasets and tools permitted by the connected Google account and connector settings. We use this connection to inspect reporting datasets and query our Google Ads reporting data. Information returned to Claude is processed by Anthropic as part of that service.

We do not sell Google user data. Google and the service providers used to operate these features process the information needed to provide them. This includes our hosting and authentication providers and, for enabled AI features, our AI providers, including Anthropic (Claude). Some Google OAuth permissions cover a wider range of actions than the features described above; access also depends on the connected account's permissions and our application controls.

For WeatherTech OS integrations, connection credentials are kept on the server and restricted to the services that need them. Connections established directly in Claude are managed through Claude and Google's connection controls. Staff can disconnect integrations where the application provides a disconnect control, or revoke access in their Google Account security settings. For questions about stored information or deletion requests, contact weathertech@live.co.uk.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep your data

Quote enquiries: 12 months after our last contact, then deleted. Active customers: for the lifetime of any warranty on the work we've done for you. Server logs: 30 days.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email weathertech@live.co.uk and we'll respond within 30 days.

You can also complain to the Information Commissioner's Office.