How we handle your data

Who we are

Who holds your data

Pluvian Roofing Ltd is registered in England and Wales under company number 17437580, and is the data controller for everything described on this page. Its registered office is 47 Northcote Road, Croydon CR0 2HY. Write there if you would rather use post; email reaches us faster.

Pluvian Roofing Ltd is registered with the Information Commissioner's Office as a data controller, registration reference ZC259646.

Your data

What we collect

When you use our contact form we ask for your name, phone number, email address, postcode and a message describing what you need. With every enquiry we also record which page of this site the form was on and, where your browser sends it, the page that linked you here. If you reach us from one of our adverts or a campaign link, we also keep the campaign tags and Google's ad click reference, so we can tell which adverts lead to enquiries. Nothing is stored on your device. No accounts, no tracking cookies for advertising.

You can attach photographs of the roof if you want to. They are optional, they are stored privately alongside your enquiry, and nobody can reach them from the web without a link we create ourselves. They are deleted with the rest of your enquiry.

Commercial enquiries

Business contact details and project documents

If you make a commercial enquiry, we also ask for your organisation, your job title and your role in the project, and a few details about it: the building, the roof, where the project stands and whether a main contractor is appointed. You can attach project documents, such as drawings, specifications, schedules or reports, or give us a link to them. We collect all of this to assess the project and price the work.

Project documents are kept privately with our database provider, Supabase, and never at a public address: nobody can open one without a short-lived link we create ourselves. They are checked for viruses before anybody opens them, and they are deleted together with the enquiry, as the section on how long we keep it explains.

Cookies

Cookies and website statistics

This website sets no cookies at all, which is why you have not been asked to agree to any. There are no advertising cookies and nothing is stored on your device.

We count visits in total, meaning which pages are viewed, where the visit came from and what kind of device was used, through Vercel, which already hosts this website and does the counting for us as our processor, with no cookies and nothing stored on your device, working instead from a code made from each request that changes every day, as Vercel's Web Analytics privacy policy explains.

Purpose

Why we collect it

We use these details to reply to you, arrange visits, and prepare quotations and reports. If you become a customer, we keep your details in our customer records so we can look after your roof over time. In legal terms, we process this data because it is necessary for taking steps before entering a contract with you, and for our legitimate interest in running the business. Recording which advert or campaign brought an enquiry rests on the same footing: our legitimate interest in knowing which of our adverts actually lead to work.

Consent

Marketing is opt-in only

The contact form includes a checkbox for occasional roof care tips and offers. It is never pre-ticked. If you leave it unticked, we will not send you marketing, full stop. If you do tick it, you can change your mind at any time: every marketing email will include an unsubscribe link, or you can simply email us and we will remove you.

Our adverts

Calls, messages and Google Ads

When somebody taps our phone number or our WhatsApp link, we count it: which of the two it was, the page it was on, and whether the visit came from one of our adverts. We count visits that arrive from one of our adverts the same way, page by page: just the page, and the fact that the visit came from an advert. Nothing in either count identifies you, and no cookie or anything else is stored on your device to make it.

If you came to us from one of our adverts, the enquiry form shows one more box, unticked. Tick it and we tell Google Ads that your enquiry came from an advert, passing on the click reference that advert gave your visit and the time you sent the form, and nothing you wrote in it. Leave it unticked and nothing about your enquiry is shared with Google Ads.

You can withdraw at any time by writing to office@pluvian.uk, and from then on we share nothing further. Withdrawing does not undo what was shared before it. Google explains what it does with this on its own page, How Google uses information from sites or apps that use our services.

WhatsApp

Messages on WhatsApp

If you message our WhatsApp number, the WhatsApp Business Platform, run by Meta, passes the message to the company's office system as well as to our phone. We keep the words of your messages with your enquiry or customer record so the whole team can see what was agreed. We do not keep photos, videos or files you send there; they stay on our phone. If we do not yet know your number, your message waits for us to decide who you are, and is deleted after seven days if we have not. We only reply to messages you have sent to us, and we never send marketing on WhatsApp.

Retention

How long we keep it

Enquiries that do not become jobs are kept for up to two years, so we have context if you come back to us, then deleted. Customer records are kept for as long as we look after your roof and for six years after the last work, in line with standard UK business record keeping. Our system is also backed up: daily database copies are kept for 30 days and the copy from the first day of each month for 12 months, then deleted, and a photo or document removed from the system drops out of the copies once 30 days have passed. Because a monthly copy is kept for 12 months, information deleted from our system, including at your request, can remain in an encrypted copy until that copy expires, at most 12 months later.

Storage

Where your data lives

Form submissions are stored in our secure customer database, hosted by Supabase, and our website is hosted by Vercel. Each enquiry is also sent by email to the office inbox, which is provided by Google Workspace. If you become a customer, your invoices and accounting records are kept in QuickBooks Online, provided by Intuit. Project documents sent with a commercial enquiry are checked for viruses by GitHub, and every night an automated job on GitHub copies the company's office system to a shared drive in our Google Workspace that only the director can see. For both, the data passes through a machine GitHub runs, which may be in the United States, and is deleted from it when the job ends. The database copy is encrypted before it leaves that machine; photos and documents are stored on the drive as they are. WhatsApp messages reach us through Meta's WhatsApp Business Platform. We use Claude, an AI assistant made by Anthropic, to help us work with the enquiries, customer records and messages in the company's office system. We do not sell or rent your details to anyone. We only share them with services we use to run the business, and only as far as needed to do so.

UK GDPR

Your rights

Under UK GDPR you can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Just email us. If you are unhappy with how we have used your information, tell us first at office@pluvian.uk or by post to our registered office, 47 Northcote Road, Croydon CR0 2HY. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay. If you are still unhappy after that, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Get in touch

Contact

Any questions about your data, or to unsubscribe, email office@pluvian.uk. To have your data deleted, including the WhatsApp messages we keep, email office@pluvian.uk and say which phone number or email address you used.

Last updated: 21 October 2026