Privacy policy
What the site keeps, read from the code that keeps it
Who is responsible
The controller of the personal information this site and the company handle is URBAN ROOFING SERVICES LTD, company number 17431576, registered in England and Wales, registered office Flat 1 Holmeswood Court 135 High Road LONDON, N22 6AY United Kingdom. Questions about your information go to enquiries@urbanroofing.work with “Data request” in the subject. The company is small and has no data protection officer; the same address reaches the person who decides.
This notice was written from the code of the booking service itself: the kinds of thing below are the kinds of thing it can store, and the times are the times it is set to delete them.
- No advertising scripts
- No cookies
- No mailing lists
- Never sold or passed on for anyone’s marketing
- No decisions made about you by machine
What is kept, why, and for how long
The booking service stores four kinds of thing, under a reference that starts URS-. Everything has an end date set when it is written; nothing waits for someone to remember to delete it.
| What | What is in it | Why, and the lawful basis | How long | How it goes |
|---|---|---|---|---|
| Your survey booking | Your name, email, telephone number if you gave one, the street and area (no house number), the postcode district, the half-day, your answers about the roof and the leak, your notes on access, the permissions checker’s answers if you attached them, and the times it was made and moved. | To plan and carry out the survey you asked for and to let you manage it. Steps taken at your request before a contract: UK GDPR Article 6(1)(b). | Until 30 days after the half-day you booked. Moving the booking moves that date. | It deletes itself; or at once when you cancel on the manage page. |
| Your leak photos | Up to three pictures. The location, device and time details a phone writes into a picture are removed, in your browser before sending, or on our side when they arrive. | To see the stain or the roof before the visit. Article 6(1)(b), as above. Please leave people out of them. | The same as the booking. | With the booking, at the same moment. |
| The hold on a half-day | Only the reference of the booking that holds it. | So one half-day carries one survey. Article 6(1)(b). | Until the day after the half-day. | It deletes itself; moving or cancelling frees it at once. |
| A cancelled booking’s note | The reference, the time you cancelled, the date the note goes, and a one-way fingerprint of your email with the reference, from which the email cannot be read back. | So the manage page can tell you, and only you, that the booking was cancelled. Legitimate interests: Article 6(1)(f). | 30 days from cancelling. | It deletes itself. |
Around the edges
Your connection’s address
To stop floods of bookings, the address of your connection is used as a counter by Cloudflare’s rate limiting: six booking attempts and ten lookups a minute. The count lasts one minute and is never stored with a booking. Legitimate interests: keeping the service available, Article 6(1)(f).
The request journal
For the booking pages and the checker’s answer page, Cloudflare’s Workers Logs keep the address asked for (which can include a booking reference or the checker’s answers), the time and technical details of the request, and a line if a booking email could not be sent. They are kept for three days, to run the service and put faults right. Article 6(1)(f). Ordinary pages like this one are not in it.
Page statistics
On ordinary pages like this one, Cloudflare’s Web Analytics runs a small script that reports, for each page view, the page address without anything after a question mark, the page you came from, your browser and system versions and how fast the page loaded, so that we see counts of visits and page speed. It sets no cookie and stores nothing in your browser (we checked in a browser on 13 November 2026), and it does not run on the booking, manage or checker-answer pages. Legitimate interests: knowing whether pages are read and load quickly, Article 6(1)(f). A script blocker, or browsing with scripts off, stops it; every page still works.
Emails
Each booking is also emailed, without its photos, to the company inbox, and your messages to enquiries@urbanroofing.work arrive in that inbox; our replies come from that address. The site never emails you itself. Booking emails are deleted when the booking goes; messages stay as long as the question needs them.
The permissions checker
It works in your browser and sends nothing. Without scripts, your answers go to our answer page in the address of the request, so they sit in the request journal for three days; if you attach them to a booking, they are kept with it.
If the company does work on your roof
The quote, the scope, the photographs taken on the roof, building-control papers, the hand-over, invoices and the messages about the job are kept for six years after the job ends: the company’s accounting and tax obligations need them (Article 6(1)(c)), and six years is the time in which a claim under a contract can be brought, so they are kept to answer one (Limitation Act 1980, section 5; Article 6(1)(f)). Carrying out the work itself rests on the contract, Article 6(1)(b).
Who handles it for us
- Cloudflare, Inc.
- Hosts the site, runs the booking service, stores bookings and photos, counts requests for the rate limit, keeps the request journal, gives us the page statistics and routes the company’s email. It acts as our processor under its data processing addendum. It is based in the United States and stores data across its own network; transfers rely on its certification under the UK extension to the EU–US Data Privacy Framework and on the UK International Data Transfer Addendum in that agreement. Cloudflare’s own privacy policy covers what it handles to run and protect its network.
- Google and Proton
- Host the company inbox: booking emails and your messages are delivered to mailboxes at Google (Gmail) and Proton (Proton Mail). Google is in the United States, under the same UK extension to the Data Privacy Framework; Proton is in Switzerland, which UK law treats as giving adequate protection.
- No one else
- Your information is not passed to anyone outside the company, except where the law requires it, or where a job needs it and you have agreed: for example the details a scaffold licence application asks for.
Your rights, and the quickest way to use them
- To see what is held. The manage page shows everything a booking stores, photos included, to anyone holding its reference and email. For anything else, ask.
- To have it corrected. Move the half-day yourself; for any other detail, write with the reference.
- To have it deleted. Cancel on the manage page and the details and photos go at once. Ask for anything else.
- To restrict it, or to object to what is kept on legitimate interests.
- To take it with you in a common machine-readable form.
A request by email is answered within one month, and costs nothing. We may ask you to confirm the reference or the email used, so that one person cannot see another’s booking.
If you are unhappy with how we handle it
Tell us first, through the complaints process. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at any time:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Children, and changes to this notice
Survey bookings are made by adults: someone over 18 has to be in on the half-day. If this notice changes, the new version is published here with its date. This version: 13 November 2026.