Last updated: 30 May 2026

Privacy Policy

1. Controller and contact

RoofMatch is currently operated by Luke Skelly t/a RoofMatch. For privacy requests, contact hello@roofmatchuk.com. A postal address is available on request where legally required or reasonably needed for a formal data protection notice.

2. Data we collect

For customers, we collect account details, name, email, phone number, property postcode, request category, urgency, roof type/material, building height, access notes, job scale, water ingress details, temporary repair notes, descriptions, messages, uploaded photos or media, shortlist choices, contractor ratings and reviews, and support messages.

For contractors, we collect account details, company name, contact name, email, phone number, service counties, base postcode, radius, specialisms, business profile information, approval status, credits balance, referral codes and referral relationships, responses, payment records, support messages and admin notes.

We also collect technical data such as session cookies, device/browser information, IP-derived security signals, error logs, audit logs and notification preferences.

3. Why we use data

We use personal data to create accounts, process roofing requests, match requests to eligible contractors, allow contractors to express interest, allow customers to shortlist contractors, unlock contact details, manage credits, process Stripe payments, send service notifications, provide support, investigate abuse and improve the platform.

Our usual lawful bases are contract, legitimate interests, legal obligation and consent where required. Consent is most relevant for optional analytics, optional push notifications and any optional use of non-essential cookies.

4. Who can see request information

Before shortlist/contact unlock, approved contractors may see job information needed to assess whether they are interested, such as outward postcode, county, category, urgency, description and photos where supported. Customer name, email, phone and full address details are restricted.

When a customer shortlists a contractor, contact details unlock for that contractor and the lead fee is charged. Admin users can access request and account details for support, safety, audit, fraud prevention and operational management.

5. Photos, media and AI-assisted processing

Uploaded photos and media may contain personal data if they show people, addresses, vehicles, neighbouring property or other identifying details. Please avoid uploading unnecessary personal or sensitive information.

RoofMatch may use uploaded media to operate the service, help contractors understand requests, troubleshoot issues, detect abuse and improve the product. If AI-assisted tools are used, including third-party model providers, they should be used to support triage, summaries or quality checks only. They do not replace contractor inspection or professional advice.

We will not intentionally use customer media for public marketing without permission. Any future machine-learning use beyond service improvement should be made clear in this policy and, where required, offered on a consent basis.

6. Processors and sharing

We use trusted service providers for hosting, database, authentication, email, payments, error logging and platform operations. This may include Supabase, Lovable, Stripe, Google Workspace and similar infrastructure providers.

We share relevant request details with eligible or shortlisted contractors as part of the marketplace. We may share information where required by law, to prevent fraud or abuse, to protect users, or to enforce our terms.

7. International transfers

Some providers may process data outside the UK. Where this happens, we expect appropriate safeguards such as adequacy regulations, standard contractual clauses or equivalent legal protections.

8. Retention

We keep personal data only for as long as needed for the service, legal, tax, accounting, audit, safety, fraud-prevention and dispute-resolution purposes.

Open requests, support tickets, credit ledgers, Stripe references, admin audit logs and abuse-prevention records may need to be retained after an account is closed. Where deletion is not appropriate, we may anonymise or restrict access instead.

Closed roofing requests are automatically archived after a defined inactivity period (by default 12 months after closure) and then permanently purged after a further retention window (by default 6 months in the archive). Purging removes the request, its responses, assignments and any uploaded photos from our active systems. These windows are configurable by the operator and may change over time; anonymised or aggregated records, financial records and audit logs may be kept longer where required by law or for fraud prevention.

Customers and contractors can ask us at any time to archive or delete a specific request earlier by emailing hello@roofmatchuk.com, subject to the legal and operational exceptions noted above.

9. Your rights

  • Access a copy of your personal data.
  • Correct inaccurate or incomplete data.
  • Ask us to delete data where there is no overriding legal, safety, audit or fraud-prevention reason to keep it.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Complain to the Information Commissioner's Office at ico.org.uk.

To make a request, email hello@roofmatchuk.com. We may need to verify your identity before acting on a request.

10. Security

We use account authentication, role-based access, row level security, audit logs and operational controls to protect data. No online service can be guaranteed completely secure, but we work to limit access to what is needed for each role.