How we handle your details

Who is responsible for your details

Tommy Smith, trading as Vision Roofing Services, of 91 Alexander Road, Reigate, Surrey RH2 8EA.

That is the person who decides what happens to anything you send through this website. In data protection law that is the data controller.

You can email [email protected] or ring 07477 536 273.

What the two forms collect

There are two forms on this website and they do not ask for the same things.

The short one, near the foot of most pages, asks for two things: your name and your phone number. It also carries which page of this website you sent it from, so we know whether you were reading about gutters or about a new roof.

The fuller one on the contact page asks for your name and phone number, then offers four optional boxes: your email address, your postcode, what the roof needs, and a message about what is happening.

That is the lot. Neither form asks for your full address, and neither asks for anything to do with payment.

Where your enquiry goes

When you press send, the form is posted to a small piece of code running on this website's own hosting, which is Cloudflare Pages. It sits at the address /api/enquiry.

That code stores nothing. It has no database and it keeps no record of what you typed. It writes your answers into an email and hands that email straight to Resend, an email delivery service.

Resend then delivers that email to the Vision Roofing Services inboxes, and a copy goes to our partners. Our own inboxes are the Outlook one named at the top of this page, which is a Microsoft account, and a Vision Roofing Services inbox on Gmail, which is a Google account. Our partners' mailbox runs on Google's business email as well. The next section explains why they get a copy.

So your enquiry sits in those mailboxes, and a request to delete it is carried out in every one of them.

The businesses involved: Cloudflare hosts the website and runs the code, Resend delivers the email, and Microsoft and Google provide the mailboxes it lands in. Our partners read the copy they receive. Nobody outside that list sees it. Your details are not sold, not passed to any other trade, and not used to send you marketing.

Why a copy also goes to our partners

Our partners built this website and look after it. Every enquiry email is sent to the Vision Roofing Services inboxes and to them at the same time.

The reason is plain. A contact form can break without anyone noticing. The emails simply stop, the website carries on looking perfectly normal, and the first sign of trouble is a quiet fortnight. The second copy means a broken form gets spotted quickly, instead of enquiries falling into a hole for weeks.

They use that copy for nothing else. It is never used to contact you, and it is deleted on the same twelve month basis as ours.

One more thing worth saying plainly, because it is true today. The Gmail inbox named above was set up for Vision Roofing Services by our partners, and they still hold the sign in details for it while that account is handed over. So until the handover is finished, they can reach the copies in that inbox as well. Ask us and we will tell you where that has got to.

If the form does not go through

Sends fail sometimes. If the short form cannot get through, it falls back to opening your own email app with your name and number already written into a message addressed to the Outlook inbox named at the top of this page. Nothing has left your device at that point. You press send yourself, or close it and ring instead. An email sent that way goes to that one inbox only, because it travels through your own email provider rather than through this website.

If the form on the contact page cannot get through, it tells you so and shows both mobile numbers, so you are never left believing a message arrived when it did not.

The hidden box that catches spam

Both forms carry a box labelled Company that is hidden from view. You never see it and you cannot fill it in.

Automated spam scripts fill in every box they find, so anything typed in that one means the submission came from a machine rather than a person. Those are thrown away and no email is sent. It collects nothing about you and it does nothing to a real enquiry.

Why we hold it, and what the law calls that

The everyday reason: to ring you back, answer what you asked and give you a free estimate.

Under UK GDPR and the Data Protection Act 2018 we have to name a lawful basis for that, and there are two here.

The first is taking steps at your request before a contract is made. You asked us to look at a roof, so we can hold what we need in order to do it.

The second is called legitimate interests. In plain words that means we have a fair, ordinary reason for holding something and it does not ride over the top of your privacy. Ours is keeping the enquiry route working and being able to answer you, which is what the agency copy is for.

If work goes ahead, the record of the job is kept because tax law requires it.

How long it is kept

An enquiry that does not turn into work is deleted after twelve months, and the copy held by the agency is deleted on that same twelve month basis.

How that actually happens, because a promise with nothing behind it is worth nothing. There is no automatic deletion. An enquiry sits in the ordinary email inboxes named above and in a record held on this website's hosting, and clearing both out is a job done by hand, by the people who read them.

This website started taking enquiries in August 2026, so nothing sent through it has reached twelve months old yet and the first clear out falls due in August 2027. If you would rather not wait for it, you do not have to. Ask us to delete your details at any time and we will do it, in every mailbox it reached and in the record held on this website's hosting. The section below tells you how to ask.

If we do the work, the job record is kept for six years. That is how long you have to bring a claim about it, and how long tax records must be held.

Where in the world it is handled

Resend is set up in its European region, so the email is handled there.

Cloudflare runs a network of servers all over the world and answers a request from whichever one is nearest to you, so the moment your form is posted may be handled outside the UK.

These are mainstream services, used on their own standard terms. Nothing special has been negotiated with any of them, and we are not going to dress it up as more than that.

This website sets no cookies and does not track you

No cookies. No tag manager, no advertising pixel, no chat widget, no embedded map and no social buttons. This website sets nothing on your device to recognise you.

Cloudflare, which serves this website, counts page views for us with Cloudflare Web Analytics. It sets no cookies and uses no local storage, so it stores nothing on your device. It records totals such as which pages are viewed, which website sent the visitor and how quickly pages load. It does not identify you and it cannot follow you to another website.

One other count is worth naming plainly. It counts how many times the phone buttons and the WhatsApp buttons are tapped. All that is stored for a tap is which button it was, which page it happened on and the time. It uses no cookies, it records nothing that identifies you, and it cannot tell one visitor from another or follow anybody anywhere.

An enquiry is different, and we would rather say so than let the sentence above cover it. When you send one of the forms, what you typed is stored securely on this website's hosting as well as being emailed, so that Vision Roofing and Verithora can reply to you and keep a record of what you asked for. It is kept for up to twelve months and then deleted, and you can ask us to delete it sooner at any time. The section headed What you can ask us to do tells you how.

Even the typefaces are served from this website rather than borrowed from another company, so reading a page here does not tell anybody else that you were on it.

One thing is worth naming rather than hiding behind the word nothing. Cloudflare, which serves this website, sends every browser a network error reporting policy. It asks your browser to remember for seven days where to report a failed connection to this website, and to report only failures, never successful visits. It is about broken connections, not about you, and it cannot follow you to another website.

That is why there is no cookie banner. There is nothing to ask you about.

If any further measurement is ever added to this website, this section is rewritten before it goes on, not after. If whatever is added needs to store or read anything on your device, you will be asked first and it will not run until you agree.

Links out are only links. Tapping the WhatsApp button hands you over to WhatsApp, and what happens there is between you and WhatsApp. This notice covers this website and stops at its edge.

What you can ask us to do

You can ask to see what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it while something is sorted out, or object to us holding it at all. Where it applies, you can also ask for a copy in a form you can take elsewhere.

Email [email protected] or ring 07477 536 273 and say plainly what you want. There is no charge, and the law gives us one month to answer.

If you are not happy with how we have handled it, you can complain to the Information Commissioner's Office, which is the UK regulator for this. That is done at ico.org.uk, or on 0303 123 1113.

Children

This website is for homeowners arranging roofing work. Nothing on it is aimed at children, and we do not knowingly take details from one.

When this notice changes

This page is updated before any change to the way your details are handled takes effect, and it names whoever is handling them.

Last changed 29 September 2026.