Home
Privacy

Your roof enquiry is kept 24 months and sold to nobody.

This is the privacy policy for an Atlanta roof repair company. You hand us a name, a phone number and the address of a roof. Below is every line of what happens to that, set out as a ledger: the clause, what it means, and why it applies to you.

Effective October 2, 2026 19 clauses Questions: [email protected]

We are a roofing company in Atlanta, GA. We are not a data business. The site exists so you can book a roof inspection in Atlanta, describe a leak, or ask for a written scope on a replacement.

Paid ads bring people here, so ad platforms see some of what happens on these pages. Where they do, the ledger names them and the identifier they use. Nothing is stored for advertising until you press Allow on the cookie bar. On a phone each row reads as its own block.

Ad platforms
Consent Mode v2
Retention
Data request
Accessibility

P-01

When this policy applies

Clause	What it means	Why it applies
01.1Effective date	This version took effect on October 2, 2026. It is also the date of the last update.	Any enquiry sent from that day forward is handled under these terms.
01.2Scope	Covers garoofingandrepair.co, its inquiry form, its support chat and the phone and email contact made through it.	Work agreed on site is covered by the written scope and the terms, not this page.

P-02

Who holds your data

Clause	What it means	Why it applies
02.1Controller	Garoofingandrepair, trading at garoofingandrepair.co as GA Roofing & Repair.	We decide what is collected and why, so we answer for it.
02.2Postal address	1201 W Peachtree St NW, Atlanta, Georgia 30309, Atlanta, Georgia, United States.	A reviewer, a regulator or you can identify the business and write to it.

P-03

What we collect

Clause	What it means	Why it applies
03.1Inquiry form	Name, phone, email, property address, the kind of enquiry, your message, the requested specification and the consent tick. Sent to `roka1b8.php`.	We cannot find a roof or call you back without the address and the number.
03.2Sent with the form	IP address, the browser user-agent string, the referring URL, the moment the form was rendered and the moment it was sent.	The two timestamps and two hidden fields catch bots. Most spam fills a form in under two seconds.
03.3Support chat	The messages you type, plus any name, phone or email you choose to give. A token is kept in your browser so you can come back to the same conversation.	So a question about a leak on Tuesday is still there when we answer on Wednesday.
03.4Technical logs	Standard server access logs: IP, time, page requested, status code, user-agent.	Every web server writes these. We use them to fix faults and block abuse.
03.5Cookie and storage identifiers	Your consent choice under `site_consent_v2`. Analytics and advertising cookies only after you allow them. Detail on the cookie page.	The choice has to be remembered or the bar would ask on every page.
03.6Ad click identifiers	gclid, msclkid or fbclid when you arrive from an ad. See P-06.	The platform adds it to the link, not us. We read it only to tie a click to an enquiry.
03.7Never collected	No account, no password, no payment, no card data. Nothing is sold on this site.	Estimates are written after an inspection. Payment never goes through the website.

P-04

What each piece is used for

Clause	What it means	Why it applies
04.1Form and chat content	Calling you back, booking the inspection, writing the scope and price basis for your roof.	That is what you asked for when you sent it.
04.2Logs and timestamps	Keeping the site running and filtering spam submissions.	A form flooded with junk means a real leak call gets missed.
04.3Analytics	Counting visits and which pages people read, once you allow it.	Tells us whether the services page answers the questions people actually phone about.
04.4Advertising measurement	Reporting to Google Ads, Microsoft Advertising and Meta Ads that a click led to an enquiry, once you allow it.	We stop paying for searches that never produce a roof job.

P-05

The legal basis for each use

Clause	What it means	Why it applies
05.1Contract	Handling your enquiry and preparing an estimate are steps taken at your request before a contract.	Covers 04.1. No form, no inspection.
05.2Legitimate interest	Server logs, spam filtering and keeping enquiry records for follow-up questions about the work.	Covers 04.2. Light, expected, and you can object under P-12.
05.3Consent	Analytics cookies, advertising cookies and sending conversion signals to ad platforms. Also the tick on the form that lets us contact you back.	Covers 04.3 and 04.4. Withdraw at any time from Cookie settings in the footer.

P-06

The ad platforms that send you here

Clause	What it means	Why it applies
06.1Google Ads	We run search ads on Google Ads today. A click adds `gclid` to the address you land on.	Someone searching "roof repair atlanta ga" probably reached us this way.
06.2Microsoft Advertising	We run ads on Microsoft Advertising (Bing search). A click adds `msclkid`.	Same purpose, different search engine.
06.3Meta Ads	Where a campaign runs on Facebook or Instagram, Meta Ads adds `fbclid` to the click.	Mostly storm-season campaigns aimed at Atlanta homeowners.
06.4What the identifier does	It is a random string. It lets the platform match your click to a later enquiry, and only once you have allowed advertising storage.	No platform has been given your name, phone or roof address by us.

P-07

Consent Mode v2, signal by signal

Signal	What it means	Default and on decline
07.1`ad_storage`	Whether advertising cookies may be written to your browser.	Denied until you press Allow. Set back to denied the moment you decline or withdraw.
07.2`ad_user_data`	Whether data about you may be sent to Google for advertising.	Denied until you press Allow. Denied again on decline.
07.3`ad_personalization`	Whether your visit may be used to show you targeted ads later.	Denied until you press Allow. Denied again on decline.
07.4`analytics_storage`	Whether analytics cookies counting visits may be written.	Denied until you press Allow. Denied again on decline.

Consent mode is set before any tag loads. The four signals start as denied on every page. While they are denied, Google receives cookieless pings at most, with no identifier written to your device. Pressing Decline, or withdrawing later, flips all four back to denied straight away; you do not need to reload.

P-08

Who else receives it

Recipient	What it receives	Their own terms
08.1Google Ireland Ltd / Google LLC	Google Ads click data with gclid and the four consent signals.	policies.google.com/privacy
08.2Microsoft Ireland Operations Ltd	Microsoft Advertising click data with msclkid.	privacy.microsoft.com/privacystatement
08.3Meta Platforms Ireland Ltd	Meta Ads click data with fbclid, where a campaign runs there.	facebook.com/privacy/policy
08.4Hosting provider	Serves the site and stores the enquiry database and chat transcripts.	Bound by a processing agreement to act only on our instructions.
08.5Mail provider	Carries the notification of your enquiry to our inbox.	Same processing terms. It does not use the content for itself.

P-09

Data crossing borders

Clause	What it means	Why it applies
09.1Where it is held	We work in Atlanta and hold enquiry data in the United States.	If you write to us from Europe, your data leaves the country you sent it from.
09.2What makes it lawful	Transfers from Europe rely on the EU-US Data Privacy Framework where the recipient is certified, and on the European Commission's Standard Contractual Clauses where it is not.	The Irish entities of Google, Microsoft and Meta pass data to their US parents under those same mechanisms.

P-10

How long we keep each thing

Category	Period	Why that long
10.1Enquiries and email copies	24 months from the day received, then deleted.	Long enough to answer a question about a repair through two full storm seasons.
10.2Chat transcripts	6 months	Chat is quick questions. Anything that becomes a job moves into the enquiry record.
10.3Server and access logs	90 days	Enough to trace a fault or an attack, then rotated out.
10.4Consent choice record	12 months, then the bar asks again.	A choice made a year ago should be confirmed, not assumed.

P-11

How it is protected

Clause	What it means	Why it applies
11.1In transit	Every page, form post and chat message travels over HTTPS.	Your address and number are not readable on coffee-shop Wi-Fi.
11.2At rest	The enquiry store sits outside the public web folder, behind a password-protected panel only the office uses.	The crew gets the address and the job notes, not the database.
11.3If something goes wrong	If a breach affects your data we tell you and the relevant authority as the law requires.	No system is perfect. Saying so is more useful than pretending.

P-12

Your rights under the GDPR

Right	What it means	How to use it
12.1Access	A copy of everything we hold on you.	Email us. See P-17.
12.2Rectification	Wrong number or wrong address corrected.	Email or call.
12.3Erasure	Your record deleted before the retention period ends.	Email. We confirm in writing.
12.4Restriction	We keep the data but stop using it while a dispute is settled.	Email.
12.5Portability	Your enquiry data in a machine-readable file.	Email. We send CSV.
12.6Objection	Stop any use based on legitimate interest.	Email.
12.7Withdraw consent	Take back an Allow you gave earlier. Past use stays lawful.	Cookie settings in the footer, one click.

These GDPR rights are written for visitors who reach the site from Europe. We extend the same handling to anyone who asks.

P-13

US state privacy rights, California included

Clause	What it means	Why it applies
13.1California (CCPA / CPRA)	Know what we collect, delete it, correct it, and opt out of sale or sharing for cross-context behavioral advertising. No discrimination for using any of these.	The CCPA gives California residents these rights. We honor them.
13.2Other states	Residents of states with privacy laws in force, such as Virginia, Colorado, Connecticut and Texas, get the same access, deletion, correction and opt-out.	One process for everyone is simpler than fifty.
13.3Sale and sharing	We do not sell personal information for money. Ad cookies, once allowed, can count as "sharing" under California law. Declining on the cookie bar opts you out.	That is the honest reading of the statute, so we state it.

P-14

Global Privacy Control

Clause	What it means	Why it applies
14.1Sec-GPC header	If your browser sends the Global Privacy Control signal, we treat it as an opt-out of sale and sharing and keep the advertising signals denied, without asking again.	You already said no once, in your browser settings. That is enough.

P-15

Children

Clause	What it means	Why it applies
15.1Not for children	This site is for property owners and managers arranging roof work. We do not knowingly take data from anyone under 16.	If a child has sent us something, tell us and we delete it the same day we find it.

P-16

Where to complain

Clause	What it means	Why it applies
16.1US residents	You can complain to your state Attorney General. In California, also to the California Privacy Protection Agency.	They enforce the state privacy laws named in P-13.
16.2Visitors from Europe	You can complain to the data protection authority in the country where you live or work.	The GDPR gives you that right whatever we say.
16.3Us first, if you like	Write to us and we will try to put it right. It does not replace either route above.	Most problems are a wrong number or an old record, fixed in a day.

P-17

Making a data request

Step	What happens	When
17.1Send it	Email [email protected], or write to 1201 W Peachtree St NW, Atlanta, Georgia 30309, United States. Say which right you are using.	Any day.
17.2We check it is you	We match the request to the phone or email on the enquiry. We do not ask for ID documents unless the match fails.	Usually within 2 working days.
17.3We answer	A copy, a correction or a deletion confirmed in writing.	Within 14 days of receiving it.

An authorized agent can make a request for you with your signed permission. There is no charge.

P-A

Accessibility of this site

Clause	What it means	Why it applies
A.1Standard we work to	WCAG 2.2 level AA. Keyboard navigation, a skip link, visible focus rings, labelled form fields, text that resizes to 200% without breaking.	A homeowner with a leak should be able to reach us however they browse.
A.2Motion	The rotating word on the home page and the parallax layers stop when your system asks for reduced motion.	Moving type can make some people ill.
A.3Something does not work	Call 770-639-7663 or email [email protected] with the page and the problem.	We fix it, and meanwhile take your enquiry by phone.

P-18

When this policy changes

Clause	What it means	Why it applies
18.1How we announce it	The new version goes on this page with a new effective date at the top. A change to what ad platforms receive also resets the cookie bar, so you choose again.	You should not have to re-read the page to notice.
18.2Bigger changes	If we start using enquiry data for something new, we email people with an open enquiry before it happens.	Your data, collected for one reason, should not drift into another.

P-19

Talk to a person

Route	Details	Best for
19.1Email	[email protected]	Data requests. You get a written trail.
19.2Phone	770-639-7663	Quick questions, and anything about a roof.
19.3Post	1201 W Peachtree St NW, Atlanta, Georgia 30309, United States	Formal letters.

Cookie policy Terms of use Request a roof inspection