This Privacy Policy describes how Durable Rooftop Solutions LLC ("Durable Rooftop", "DRS", "we", "our", "us") collects, uses, discloses, and protects personal information in connection with our commercial roofing services, our public-facing marketing website (durablerooftopsolutions.com), our lead-capture and estimation surfaces, and our internal customer-relationship- management application (the "CRM"). This policy operates as a controlled subordinate of the DRS Information Security Program and inherits its definitions and governance.
1. Scope
This policy applies to:
- Personal information submitted to Durable Rooftop through public-facing surfaces — the marketing website, the online estimator, the contact form, and inbound voice or messaging channels published by Durable Rooftop.
- Personal information collected in the course of providing commercial roofing services to customers — including job-site addresses, points of contact, signed estimates, photographs, invoices, and warranty records.
- Personal information processed inside the DRS CRM by authorized Durable Rooftop personnel and contractors.
- Personal information transmitted to or received from third-party service providers used in the operation of Durable Rooftop's business.
This policy does not cover information practices of third-party websites that link to or from Durable Rooftop's properties.
2. Information We Collect
Durable Rooftop collects only the categories of information necessary to operate its business. Categories include:
2.1 Information you provide directly
- Identifiers and contact information: name, business name, mailing address, service address, email address, telephone number.
- Estimate and project information: building characteristics, roof measurements, photographs of the property, descriptions of the issue, decision-making role within the customer organization.
- Communication content: messages submitted through the contact form, the estimator, email correspondence, voicemail and call-recording transcripts where call recording has been disclosed, and chat transcripts with the Durable Rooftop assistant.
- Contractual and financial information: signed estimates, change orders, invoices, payment records, and tax-relevant identifiers required for vendor or customer onboarding.
2.2 Information collected automatically
- Web analytics and operational telemetry: IP address, user-agent, pages viewed, referring URL, and session timing on durablerooftopsolutions.com.
- Edge and security telemetry: request metadata processed by Durable Rooftop's content-delivery and security provider (Cloudflare) to operate the site, mitigate abuse, and provide rate limiting.
- Cookies and similar technologies: session cookies necessary for authenticated areas of the site, and limited analytics cookies as disclosed at the relevant surface.
2.3 Information from third parties
- Lead-enrichment providers: publicly available business contact information used to identify and contact prospective customers.
- Advertising and call-tracking providers: the originating ad source, search keyword, and the dynamically-assigned tracking phone number associated with an inbound call.
- County and parcel data sources: publicly available property records used to identify commercial roofing prospects.
2.4 Information sourced through Plaid
When Durable Rooftop's authorized personnel connect a Durable-Rooftop-owned business bank account through Plaid Link inside the CRM, Durable Rooftop receives transaction data and account metadata from Plaid for the connected accounts. This data describes Durable Rooftop's own banking activity; it does not describe end-consumer banking. Use of Plaid is governed by Plaid's own privacy notice, available at plaid.com/legal.
3. How We Use Information
Durable Rooftop uses personal information to:
- Respond to inquiries and prepare estimates for prospective customers.
- Schedule, perform, and document roofing services for active customers.
- Operate billing, invoicing, and warranty workflows.
- Communicate operational updates, scheduling information, and follow-ups to active and prospective customers.
- Improve the marketing website, the estimator experience, and Durable Rooftop's overall service quality.
- Operate Durable Rooftop's internal financial reconciliation, tax accounting, and management reporting.
- Detect, investigate, and respond to security incidents and abuse.
- Comply with applicable legal, tax, regulatory, and contractual obligations.
Durable Rooftop does not sell personal information. Durable Rooftop does not use personal information for advertising profiling outside of the limited cases described below.
4. Legal Bases for Processing
Where applicable law requires identification of a legal basis, Durable Rooftop relies on:
- Performance of a contract — to provide quoted, contracted, and warranted roofing services to customers.
- Legitimate interests — to operate, secure, and improve Durable Rooftop's business, including responding to inbound prospective-customer inquiries and protecting against abuse, where these interests are not overridden by individual rights.
- Consent — where required by law, for example for certain marketing communications or for cookies that are not strictly necessary, evidenced by the individual's submission of a form or response to a clearly-disclosed prompt.
- Compliance with legal obligation — for tax, regulatory, and lawful-request handling.
5. How We Share Information
Durable Rooftop does not sell personal information. Durable Rooftop shares information in the following circumstances:
- With service providers acting on our behalf, under contracts that limit their use of the information to the services they provide for Durable Rooftop. Categories include hosting and infrastructure (Amazon Web Services), edge security and content delivery (Cloudflare), email and productivity (Google Workspace), inbound call routing and recording (CallRail), customer-relationship and estimating systems during transition (AccuLynx), AI inference for the Durable Rooftop assistant (Anthropic), banking-data aggregation (Plaid, for Durable-Rooftop-owned accounts only), bookkeeping, advertising analytics (Google), lead-prospecting (Apollo, Hunter, Tracerfy), and outbound-email delivery to business prospects (Instantly).
- With professional advisors — accountants, attorneys, and insurers — under their professional obligations of confidentiality.
- With subcontractors and crews that Durable Rooftop assigns to a specific job, limited to the information they require to perform that job.
- In connection with a legal process or to protect rights — where Durable Rooftop is required by lawful process to disclose information, or where disclosure is necessary to protect the safety, rights, or property of Durable Rooftop, its customers, or the public.
- In connection with a corporate transaction — for example, in the event of a merger, acquisition, or asset transfer, subject to standard confidentiality protections.
6. Cookies and Analytics
Durable Rooftop uses a small number of cookies and similar technologies on its public website and CRM:
- Strictly necessary cookies required for authenticated sessions and basic site operation.
- Analytics cookies to understand aggregate traffic patterns and improve the website.
- Advertising attribution for inbound calls and form submissions, including a CallRail-issued tracking phone number that is dynamically swapped on the page.
Where applicable law requires, Durable Rooftop discloses the use of non-strictly-necessary cookies at the relevant surface and honors signals such as Global Privacy Control where applicable.
7. Data Retention and Deletion
Durable Rooftop retains personal information only as long as needed for the purposes described in this policy and as required by law. Specific retention practices, including retention periods for active customer records, lead records, financial records, and operational logs, are described in the DRS Data Retention & Deletion Policy, which is incorporated into this Privacy Policy by reference. On a verified deletion request, Durable Rooftop removes personal information from active systems and retains anonymized references only as needed for legal, tax, warranty, and accounting purposes.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access to the personal information Durable Rooftop holds about you.
- Correction of inaccurate or incomplete personal information.
- Deletion of your personal information, subject to legal and contractual exceptions.
- Portability — to receive your personal information in a structured, commonly-used format.
- Objection or restriction of certain processing.
- Withdrawal of consent where processing is based on consent.
- Non-discrimination for exercising these rights where applicable law provides this protection.
To exercise these rights, contact Durable Rooftop using the contact channel published on this site. Durable Rooftop responds to verified requests within the timelines required by applicable law and may need to verify the identity of the requester to protect against fraudulent requests.
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide additional rights, including the right to know the categories of personal information collected, the categories of sources, the business or commercial purposes for collection, and the categories of recipients. Durable Rooftop does not sell personal information and does not knowingly share personal information for cross-context behavioral advertising.
9. Children's Privacy
Durable Rooftop's services are directed to commercial property owners and decision-makers, not to children. Durable Rooftop does not knowingly collect personal information from children under 13 (or the equivalent age threshold in the applicable jurisdiction).
10. Security
Durable Rooftop maintains an Information Security Program that documents the technical, administrative, and physical controls in place to protect personal information. These controls include encryption of data in transit and at rest, role-based access control, multi-factor authentication on administrative consoles, formal change management, logging and monitoring, and incident-response procedures. The Information Security Program is available to parties with a legitimate need to review it under appropriate confidentiality terms.
11. International Data Transfers
Durable Rooftop is established and operated in the United States. Personal information collected by Durable Rooftop is processed and stored in the United States.
12. Changes to This Policy
Durable Rooftop may update this Privacy Policy to reflect changes in its practices, technology, legal requirements, or other operational reasons. The effective date at the top of this policy reflects the most recent change. Where required by law, Durable Rooftop will provide notice of material changes through the website or by direct communication.
13. Contact
Questions, comments, or requests regarding this Privacy Policy or Durable Rooftop's privacy practices may be submitted through the contact page. Privacy-specific inquiries will be routed to the policy owner.