Privacy Policy

The company sets a high standard for consent. Therefore, whenever the company processes information the company will request your consent beforehand and will not knowingly use your information without this consent.

As outlined in section 2 of this privacy policy, the company obtains two types of information. These include information necessary to enter a contract and information necessary for personalisation and marketing purposes. When requesting consent, the company provide you with the option to provide consent for both types of information independently.

The company obtains consent in four primary ways. Whichever way consent is requested, the company will ensure that this privacy policy is freely accessible. The ways in which the company obtains consent include:

• Orally by telephone
• Writing by email
• Electronically by checkbox
• Cookies acceptance pop-up

Once consent has been given, the company will continue to assume you agree to the collation, use, storage and sharing of your information as outlined in this privacy policy. This is unless you have requested the removal of your data as per section ‘5.2’ of this privacy policy.

Information necessary to enter a contract is required in order for the company to provide a service to you (i.e. sell you goods). This information may also be required to comply with other laws, such as the requirement to keep accounting records for a minimum of 6 years. This information includes:

• Full name
• Company name
• Email address
• Telephone number
• Postal address
• VAT number
• Purchased items
• Payment details

As with all information you provide, it is your right to request that this information is removed verbally or in writing as per section of ‘5.1’ of this privacy policy. The company will oblige within 30 days of the request unless such information is necessary in order to maintain a contract or comply with the law. It is important to note that the company DO NOT store payment details.

Information necessary for personalisation and marketing purposes is used to send or display personalised and/or generic marketing material to you. This information includes:

• Activity data when visiting roofingmegastore.co.uk, including pages visited, visit duration and technology used.
• Demographic data when visiting roofingmegastore.co.uk, including age, gender, location and interests.
• Email address provided when purchasing from or making contact through roofingmegastore.co.uk
• Telephone number provided when purchasing from or making contact through roofingmegastore.co.uk

Some of the above information is not processed or stored by the company. This is due to the use third party platforms and technology to process and store such data, as outlined in section ‘4.2’ of this privacy policy.

As with all information you provide, it is your right to request that this information is removed verbally or in writing. In cases where the data is not stored by the company, you will need to contact the company storing your data directly. The company will oblige within 30 days of the request unless such data is necessary in order to maintain a contract or comply with the law.

Storing the information you provide is sometimes necessary for the purpose of maintaining a contract or carrying out marketing activity. Storing information may also be required in order to comply with the law.

The company takes the utmost care to ensure your personal information is stored securely and only if necessary, we DO NOT store payment details. This includes, in circumstances where your data is shared with the parties outlined in section ‘4’ of this privacy policy, ensuring that third parties also take the utmost care when storing your information.

Whilst the company aims to offer the maximum level of security when storing your information digitally or physically, breaches are always possible. In the unlikely circumstance of a personal data breach, the company follows strict processes to ensure you and the appropriate authority are informed.

Should the company become aware of a breach, the company will inform you as soon as possible. In all circumstances the company will attempt to notify you and the appropriate authority within 72 hours. The company will also record the data breach internally for future reference. The company will also keep you informed throughout any investigation if your information was compromised.

The company will retain your personal information for as long as is necessary to fulfil the purpose we processed it for. Unless you withdraw consent as per section ‘5.3’ of this privacy policy, the company will continue to use your information as per this privacy policy.

When placing an order with the company and consenting to your personal information being ‘processed to provide you with a service’, the company will share some of the information provided with our product manufacturers, courier providers, payment gateways and review platforms. This information includes:

1. Full name
2. Company name
3. Telephone number
4. Email address
5. Postal address
6. VAT number
7. Purchased items
8. Payment details (payment gateways only)

Below is confirmation of which of the above information is passed on to these third parties and the purpose for sharing such information with them.

Product Manufacturers

Will be provided with the above information, excluding email address, VAT number and payment details, to process and manufacture the purchased items as well as provide any guarantee.

Courier Providers

Will be provided with the above information, excluding email address, VAT number and payment details, to provide delivery of the purchased items.

Payment Gateways

Will be provided with all of the above information to process payment for the purchased items securely.

Klarna

In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you.

General information on Klarna you can find here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy.

Review Platforms

Will be provided with the above information, excluding company name, telephone number, VAT number and payment details, to request and obtain service and product reviews.

As with all information you provide, it is your right to request that this information is removed verbally or in writing. In cases where the data is not stored by the company, you will need to contact the company storing your data directly. The company will oblige within 30 days of the request unless such data is necessary to maintain a contract or comply with the law.

For a freely available and comprehensive list of the company’s product manufacturers, courier providers, payment gateways and review platforms please contact the company directly. This will enable you to review their privacy policy and request that your data be removed.

When placing an order with the company and consenting to your personal information being ‘processed to perform marketing activities’, the company will share some of the information provided onto third party platforms. This information includes:

• Activity data when visiting roofingmegastore.co.uk, including pages visited, visit duration and technology used
• Demographic data when visiting roofingmegastore.co.uk, including age, gender, location and interests
• Purchase data when visiting roofingmegastore.co.uk, including the items purchased and their value
• Email address provided when purchasing from or making contact through roofingmegastore.co.uk
• Telephone number provided when purchasing from or making contact through roofingmegastore.co.uk

Remarketing Platforms

Will be provided with all of the above information to display targeted and/or generic marketing materials to you. Note that this information is processed via cookies, which you consent to through our cookies acceptance pop-up and as per our cookies policy.

Email Marketing Platforms

Will be provided with all the above information to send targeted and/or generic marketing emails to you. Note that this information is processed via forms, which you consent to electronically via checkbox.

Website Analytics Platforms

Will be provided with the above information, excluding email address and telephone number, to monitor and analyse your behaviour when visiting roofingmegastore.co.uk. Note that this information is processed via cookies, which you consent to through our cookies acceptance pop-up and cookie policy.

As with all information you provide, it is your right to request that this information is removed verbally or in writing. In cases where the data is not stored by the company, you will need to contact the company storing your data directly. The company will oblige within 30 days of the request unless such data is necessary in order to maintain a contract or comply with the law.

For a freely available and comprehensive list of the third party platforms used, please contact the company directly. This will enable you to review their privacy policy and request that your data be removed.

The right to access (commonly referred to as subject access) provides you with the right to request access to personal information the company stores. You can request access to your personal information verbally or in writing.

When requesting access, the company may request proof of identity, particularly if the company have doubts about the identity of the person making the request. Whilst the company will not charge a fee to access such data in most circumstances, the company may charge a reasonable fee should the company consider the request manifestly unfound or excessive.

Should further proof of identity be required or a reasonable fee apply, the company will inform you as quickly as possible. The company will then provide you with access to the requested personal data within 30 days of the request, unless you fail to respond to the company’s requests within an adequate time.

The right for erasure (commonly referred to as the right to be forgotten) provides you with the right to request that your personal information stored by the company is removed. You can request your personal information to be removed verbally or in writing.

When requesting erasure the company may request proof of identity, particularly if the company have doubt about the identity of the person making the request. Whilst the company will not charge a fee to access such data in most circumstances, the company may charge a reasonable fee should the company consider the request manifestly unfound or excessive.

Should further proof of identity be required or a reasonable fee apply, the company will inform you as quickly as possible. The company will then provide you with access to the requested personal data within 30 days of the request, unless you fail to respond to the company’s requests within an adequate time.

Note that the request for erasure can be refused in some circumstances. These include:

• To maintain a contract
• To comply with another legal obligation
• For the establishment, exercise or defence of legal claims

In the circumstance where the company refuse to remove your personal information, the company will inform you as quickly as possible. You are within your right to appeal this with the company or report your concerns with the relevant authority, such as the Information Commissioner’s Office.

The right to withdraw consent provides you with the right to request that the company no longer process your personal information. You can withdraw consent verbally or in writing.

When withdrawing consent, the company may request proof of identity, particularly if the company have doubt about the identity of the person making the request. Note that withdrawing consent does not affect the lawfulness of any processing carried out before consent is withdrawn.

Should you believe the company have failed in protecting your privacy in compliance with the law, you have the right to report a concern with the relevant authority. Whilst this authority can vary dependent upon country and region, concerns should be reported to the Information Commissioner’s Office in the United Kingdom.

This privacy policy applies to Roofing Megastore Ltd, who are responsible for processing and storing your information reasonably and securely as an organisation. The company’s information officer is named as Mr Ashton Hudson, who can be emailed at [email protected] or by telephone on 01295 565 565.

The company maintains the right to make lawful changes to this privacy policy without prior notice. Should the company make changes to this privacy policy, they will inform you within 72 hours through the most convenient and available channel. It is your responsibility to review this privacy policy in full in good time.