Privacy notice

Last updated: 5 November 2026.

Who we are

Peak Roofing (“we”, trading name), a roofing company based in Lancashire, is the controller of the personal information described here. Contact us about privacy by phone or text on 07576 545213. Our business details and website terms are on their own page.

What we collect and why

When you call or text us: your phone number, your name if you give it, what you tell us about your roof, and any photos you send. We use this to reply, arrange a visit and quote. Lawful basis: taking steps at your request before a contract, and our legitimate interest in answering enquiries.
If you send the enquiry form (on a computer, or “Use the form” on a phone): the type of job, your town or postcode, your name and phone number, and your email address, message and photo if you add them. With it we receive the page you were on and, if you came from one of our Google adverts, the advert details: a click reference (gclid, gbraid or wbraid), the campaign, the keyword you searched, keyword match type, device type, ad network and the location Google reports, plus a reference number for the enquiry, how long the form took to fill in (to filter out spam), the website you came from, when you first and last visited from an advert, and your cookie choice. To stop spam floods, your IP address is held for 15 minutes to count how many enquiries come from it. We use this to call or text you back about your enquiry. Lawful basis: taking steps at your request before a contract. If you accepted measurement on the cookie banner, we also tell Google which advert led to your enquiry (and, later, to a booked job), so we don’t pay for adverts that don’t work. If you didn’t, Google is told the enquiry happened without being able to use it for advertising (we send your choice with it), and we use the click reference only in our own reports. Lawful basis: our legitimate interest in knowing which adverts work. You can object to this at any time and we’ll stop.
If you arrive from one of our Google adverts: the page makes a short reference (for example “ref G7KQ2M”) and keeps it with the advert’s click reference, campaign, keyword, the town and service the advert was about, and your cookie choice on our website’s server for 90 days. On a phone, the reference is pre-typed into the text message, so a text that arrives with it can be matched to the advert. Nothing is stored on your phone, and you can delete the reference before sending. Lawful basis: our legitimate interest in knowing which adverts work. If your browser sends a Global Privacy Control signal, the reference isn’t stored. If you tap our phone number, we also keep the time of the tap with the advert’s click reference and your cookie choice (no phone number) for 90 days, so a call that follows can be matched to the advert.
When we do work for you: your address and the job details, to carry out the work, invoice and keep records. Lawful basis: our contract with you and legal obligations (tax records).

Calls to 07576 545213 are recorded, and you’ll hear a short message saying so at the start of the call. We keep recordings with your enquiry, so we have an accurate note of what you need, and delete them on the same timetable as the enquiry. Lawful basis: our legitimate interest in keeping an accurate record of what was agreed. We won’t send you marketing texts or make marketing calls unless you’ve agreed to them, and any we send will tell you how to stop them. Replies about your own enquiry or job, including a text to confirm we got it, aren’t marketing.

Who we share it with

We don’t sell your information. We use a small number of service providers who process it on our behalf, under contract:

Lead Wave, our website and lead-handling provider, who runs our website and helps us manage enquiries.
HighLevel (LeadConnector), our customer relationship (CRM) and phone provider, which stores calls, call recordings, texts and enquiries. Its servers may be in the United States; where your information goes outside the UK, it’s protected by appropriate safeguards: the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge where the provider is certified under it.
Cloudflare, our website host, which delivers the pages you see and, if spam protection is switched on for the form, checks that a person (not a bot) sent it, which involves your IP address. If your enquiry can’t be passed to our CRM straight away, Cloudflare holds it for us until it can be; it’s deleted once passed on, and in any case after at most 330 days.
Google, if you came from one of our adverts: the click reference and whether it led to an enquiry or booked job (no name, no message). If our Google tag is switched on and you accept measurement on the cookie banner, Google may also receive a scrambled (hashed) version of the email or phone number you enter, to match the enquiry to the advert. We don’t use Google forwarding numbers on our adverts. When you call us after clicking one of our adverts, we may send Google the time of the call and a scrambled (hashed) copy of your number so it can tell us the advert worked. Google may only use the number for measurement if you accepted measurement on our website; otherwise it is told not to. Lawful basis: our legitimate interest in knowing which adverts work. You can object at any time.

How long we keep it

Enquiries that don’t lead to work: up to 12 months after our last contact. Customer and job records: 6 years after the job, for tax and legal reasons. Then we delete it.

Your rights

You can ask for a copy of your information, ask us to correct it, delete it, restrict or object to how we use it, or move it to someone else. We’ll reply within one month. We don’t make decisions about you by automated means.

If you’re unhappy with how we’ve used your information, please complain to us first by phone or text (details above). We’ll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, 0303 123 1113.

Cookies and measuring visits

Google’s advertising tag loads only if you press “Accept” on our cookie banner; “No thanks” is just as easy, and you can change your mind with “Cookie settings” at the bottom of every page. See our cookie notice.

Your browser’s Global Privacy Control signal is respected too.