Privacy Policy

1. Introduction

RoofGuard.AI ("we", "us", "our") is a trading name of Exall Group Limited, a company registered in England and Wales. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website at roofguard.ai, our AI roof monitoring services, and any associated mobile applications (collectively, the "Service").

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is available upon request by contacting us at hello@roofguard.ai.

2. Information We Collect

2.1 Information You Provide

When you request an installation, create an account, or contact us, we may collect your name, email address, phone number, company name, job title, site address and postcode, roof type and specifications, and any additional information you provide in correspondence.

2.2 Information Collected Automatically

When you visit our website, we automatically collect your IP address, browser type and version, operating system, referring URL, pages visited and time spent on pages, device identifiers, and cookies and similar tracking technologies. Please see our Cookie Policy for more details.

2.3 Roof Monitoring Data

Our cameras and AI systems collect photographic images of your roof captured at regular intervals, AI-generated analysis and defect detection data, location data associated with camera hardware, and alert and notification records.

3. How We Use Your Information

We use your personal data to provide and maintain our roof monitoring service, including camera installation, image capture, AI analysis, and alert delivery. We also use it to process your installation requests and manage your account, to send you service-related communications including alerts, reports, and maintenance notifications, to improve our AI detection algorithms and overall service quality, to comply with legal obligations including health and safety requirements, to respond to your enquiries and provide customer support, and to send you marketing communications where you have opted in to receive them.

4. Lawful Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

Contract: Processing necessary for the performance of our service agreement with you, including installation, monitoring, and alert services.

Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, fraud prevention, and ensuring network security, where these interests are not overridden by your rights.

Consent: Where you have given us specific consent, for example for marketing communications. You may withdraw consent at any time by contacting us.

Legal Obligation: Processing necessary to comply with applicable laws and regulations.

5. Data Sharing

Service providers: We share data with third-party companies that assist us in delivering our services, including cloud hosting providers, SMS and email delivery services, payment processors, and telecommunications providers for 4G connectivity. These providers are contractually bound to process your data only on our instructions and in accordance with data protection law.

Professional advisors: Our lawyers, accountants, and insurers where necessary for the operation of our business.

Law enforcement: Where we are required to do so by law, regulation, or court order.

We do not sell your personal data to third parties. We do not share your roof imagery or monitoring data with any third parties except as necessary to deliver our service to you.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Account and contact information is retained for the duration of your contract and for 6 years thereafter for legal and accounting purposes. Roof imagery and monitoring data is retained for the duration of your contract and for 12 months after termination. Alert and notification records are retained for 24 months. Website analytics data is retained for 26 months.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, secure cloud infrastructure with access controls, regular security assessments, and staff training on data protection. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Information Commissioner's Office (ICO) or transfers to countries deemed to provide an adequate level of data protection.

9. Your Rights

Under the UK GDPR, you have the following rights:

Right of access: Request a copy of the personal data we hold about you.

Right to rectification: Request correction of any inaccurate or incomplete personal data.

Right to erasure: Request deletion of your personal data in certain circumstances.

Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances.

Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format.

Right to object: Object to the processing of your personal data where we rely on legitimate interests.

To exercise any of these rights, please contact us at hello@roofguard.ai. We will respond within one month.

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will notify you by email or through a notice on our website.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: