Privacy Policy

1. Introduction

Shingle Roofers Ltd ("we", "us", "our") is committed to protecting your personal information and complying with the Privacy Act 2020 (New Zealand) and the Information Privacy Principles (IPPs) contained within it.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, who we share it with, and what your rights are in relation to your information.

By using our website at shingleroofers.co.nz or engaging our services, you consent to the collection and use of your personal information as described in this policy.

2. What Personal Information We Collect

We collect personal information that is necessary for us to provide our roofing services and operate our business. This includes:

• Contact information: Name, phone number, email address, and physical address (required to provide a quote and carry out work)
• Property information: Address, property type, roof size, roof material, and condition details relevant to our services
• Communication records: Records of enquiries, quotes, instructions, complaints, and warranty claims sent via email, phone, or web form
• Payment information: Payment method details (processed securely through our payment providers we do not store full card numbers)
• Insurance information: Insurer name, claim number, and loss details where you engage us to assist with an insurance claim
• Website usage data: IP addresses, browser type, pages visited, and time on site (via cookies and analytics see Section 9)

We only collect information that is reasonably necessary for the purposes described in this policy. We do not collect sensitive information such as health information, ethnicity, or religious beliefs unless directly relevant to a specific service (e.g., asbestos removal health and safety requirements).

3. How We Collect Your Information

We collect personal information directly from you through:

• Web forms (quote requests, contact form)
• Telephone calls to our office or emergency line
• Email correspondence
• WhatsApp messages sent to our business number
• In-person communication during site inspections and consultations

We may also collect limited information indirectly, such as website analytics data, or from publicly available sources such as property records where relevant to our service delivery.

4. How We Use Your Information

We use your personal information for the following purposes:

• Preparing and delivering quotations for roofing services
• Scheduling and coordinating service delivery at your property
• Processing payments and issuing invoices and receipts
• Managing warranty claims and service follow-up
• Assisting with insurance claim documentation and insurer liaison
• Communicating with you about your job including pre-work notifications, progress updates, and completion notices
• Sending service reminders (e.g., recommended annual inspection notices) where you have not opted out
• Complying with our legal obligations, including health and safety requirements for asbestos work
• Analysing website usage to improve the user experience on our Site

We do not use your personal information for automated profiling or decision-making that produces legal or significant effects about you.

5. Sharing Your Information

We do not sell or rent your personal information to third parties. We share your information only in the following limited circumstances:

• Service delivery partners: Subcontractors we engage to assist with specific elements of your job (e.g., specialist asbestos disposal contractors) shared only to the extent necessary for them to complete their portion of the work
• Insurers and loss adjusters: Where you have engaged us to assist with an insurance claim, we share the damage assessment and related documentation with your insurer or their appointed assessor, as authorised by you
• Payment processors: Financial transaction data is processed through secure third-party payment processors who hold their own privacy and security obligations
• Analytics providers: Aggregated, anonymised website usage data processed through tools such as Google Analytics
• Legal requirements: Where we are required to disclose information by law, court order, or regulatory authority (including WorkSafe NZ in relation to notifiable asbestos work)

Any third parties with whom we share information are required to handle it securely and only for the specific purpose for which it was shared.

6. Storage and Security

We take reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure. These steps include:

• Password-protected and encrypted access to digital records
• Secure email communications for sensitive information
• Limiting access to personal information to staff who need it to perform their job functions
• Physical security for any paper records held at our office

While we take these precautions, no data transmission over the internet or storage system can be guaranteed to be completely secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

Personal information is retained for as long as it is required for the purposes it was collected, or as required by law. Quotation records, job files, and warranty documentation are typically retained for 7 years. We securely destroy or de-identify information when it is no longer needed.

7. Overseas Disclosure

Some of our service providers such as cloud storage, email services, and website analytics platforms may store or process data in overseas locations including Australia and the United States. Where this occurs, we take reasonable steps to ensure those providers have privacy protections comparable to the NZ Privacy Act 2020.

By using our website or services, you consent to the transfer of your information to such overseas providers where this is necessary for the provision of services to you.

8. Your Privacy Rights

Under the Privacy Act 2020, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct any personal information that is inaccurate or out of date
• Deletion: Request deletion of your personal information where we no longer have a lawful basis to retain it (subject to our legal record-keeping obligations)
• Opt-out of marketing: Unsubscribe from any marketing communications at any time by contacting us or using the unsubscribe link in any email
• Complain: Lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached the Privacy Act 2020

To exercise any of these rights, please contact our Privacy Officer at [email protected] or call 022 196 9021. We will respond to requests within 20 working days as required by the Privacy Act 2020.

9. Cookies and Website Analytics

Our website uses cookies small text files stored on your device to improve your browsing experience and analyse website usage. We use the following types of cookies:

• Essential cookies: Required for the website to function correctly (e.g., form session management). These cannot be disabled.
• Analytics cookies: Used via Google Analytics to understand how visitors use our site pages visited, time spent, and geographic location (anonymised). This helps us improve the site's content and usability.

You can control cookie settings through your browser settings. Disabling analytics cookies will not affect your ability to use the site but will limit our ability to improve it over time.

We do not use advertising cookies or share your browsing data with ad networks for targeting purposes.

10. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Privacy Complaints

If you have a complaint about how we have handled your personal information, please contact us in the first instance:

We will acknowledge your complaint within 5 working days and aim to resolve it within 20 working days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner at www.privacy.org.nz.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The date of the most recent update is shown at the top of this page. We encourage you to review this page periodically. Continued use of the Site or our Services after any changes constitutes your acceptance of the updated policy.

13. Contact Us

For all privacy-related enquiries: