Privacy Policy

Last updated: June 17, 2025

1. Introduction

Copper Hammer Roofing (“Copper Hammer,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

  • visit [www.copperhammerroofing.com] or any sub-domains (the “Site”),

  • engage with us by phone, text, email, social media, or in person, or

  • use any other service that links to this Privacy Policy (collectively, the “Services”).

Our practices are designed to comply with the Utah Consumer Privacy Act (“UCPA”), California Consumer Privacy Act / California Privacy Rights Act (“CCPA/CPRA”), Colorado Privacy Act (“CPA”), Virginia Consumer Data Protection Act (“VCDPA”), and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”).

2. Scope

This policy applies to personal information we collect from customers, prospective customers, vendors, subcontractors, and visitors to the Site. It does not cover:

  • Copper Hammer employees or job applicants (see our Employee/Applicant Privacy Notice);

  • information collected by third-party websites that link to or from our Site;

  • separately branded services that post a different privacy notice.

3. Information We Collect

CategoryTypical Data PointsSourceLegal Basis (GDPR)IdentifiersName, postal address, email, phone number, IP address, online IDsYouConsent / Contract / Legit. interestProperty & project detailsStreet address of project, roofing type, photos/videos (including drone images), insurance infoYou / Job-site visitsContract / Legit. interestCommercial infoQuotes requested, services purchased, payment historyYouContractInternet activityDevice and browser type, referral URLs, pages viewed, clickstream data, session recordingsAutomated (cookies, pixels, server logs)Legit. interestGeolocation (coarse)City or ZIP inferred from IPAutomatedLegit. interestPayment dataLast four digits of card, ACH details, transaction IDs (processed by PCI-compliant third-party processor; we do not store full card numbers)You / Payment processorContract / Legal obligationUser-generated contentReviews, testimonials, comments, uploaded filesYouConsentSensitive data (rare)Insurance policy numbers or driver’s license (when required for permits or financing)YouExplicit consent / Contract

We do not knowingly collect data from children under 13 (or 16 in the EEA/UK).

4. How We Collect Information

  1. Directly from you – when you request an estimate, sign a contract, pay an invoice, leave a review, fill out a form, or contact us.

  2. Automatically – via first- and third-party cookies, pixels, server logs, call-tracking numbers, chat widgets, and analytics tools.

  3. From third parties – lead-gen partners (e.g., HomeAdvisor, Angi), social media platforms, financing partners, insurers, and publicly available sources (county records, aerial imagery).

5. Cookies & Similar Technologies

We use:

  • Essential cookies to make the Site work (e.g., session ID).

  • Performance/analytics cookies (Google Analytics 4, Microsoft Clarity) to understand Site usage.

  • Functional cookies to remember your preferences (e.g., hide cookie banner).

  • Advertising cookies/pixels (Google Ads, Meta, LinkedIn) to deliver relevant offers.

You can manage cookies through our Cookie Settings tool or via your browser. Opting out of advertising cookies will not stop ads, but they may be less relevant.

6. How We Use Your Information

PurposeExamples of UseProvide & manage the ServicesSchedule inspections, prepare quotes, ship materials, install or repair roofing systems, process paymentsCustomer supportRespond to questions, change orders, warranty claimsMarketing & promotionsSend newsletters, roof-maintenance reminders, seasonal offers (opt-out anytime)Analytics & improvementsMonitor Site performance, identify popular content, enhance UXSecurity & fraud preventionDetect spam, block malicious IPs, protect against payment fraudLegal complianceObtain permits, meet OSHA and building-code requirements, respond to court ordersBusiness operationsMaintain accounting records, perform audits, plan mergers or acquisitions

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

7. Sharing & Disclosure

We share personal information only as needed:

Recipient TypeWhy We ShareService providersWeb hosting, cloud storage (AWS US-West), email (Mailgun), SMS (Twilio), payment processing (Stripe), CRM (JobNimbus)Marketing partnersWith your consent, for co-branded promotions or referral programsSubcontractors & suppliersTo deliver materials, fabricate custom copper details, install specialty productsGovernment agencies & inspectorsFor permits, inspections, rebates, or as required by lawProfessional advisersAttorneys, accountants, insurers, auditorsSuccessorsIn a merger, asset sale, or business reorganizationLegal authoritiesWhen we believe disclosure is necessary to comply with the law, protect safety, or enforce contracts

We do not sell or “share” personal data for cross-context behavioral advertising as defined by CPRA/UCPA unless you affirmatively opt in.

8. Retention

We keep personal information only as long as necessary to:

  • complete your roofing project and warranty period,

  • fulfill the purposes described above, and

  • meet legal, accounting, and insurance obligations (e.g., 7 years for tax records; up to 10 years for construction-defect statutes).

When retention is no longer required, we securely delete or anonymize the data.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access / Know the personal information we hold about you

  • Correct inaccurate or incomplete data

  • Delete / Erase your personal information

  • Opt out of targeted advertising or data sales

  • Data portability (receive a copy in a machine-readable format)

  • Restrict / Object to certain processing activities (EEA/UK)

  • Appeal a refusal to act on your request (CO, VA, CT)

How to exercise your rights

Submit a verifiable request through:

  • Email: randy@copperhammerroofing.com

We will confirm receipt within 10 days (U.S.) or 1 month (EEA/UK) and respond within the time required by law (usually 45 days). We may request additional information to verify your identity. Authorized agents may act on your behalf with written permission.

10. International Transfers

Our servers and many of our service providers are located in the United States. If you are located outside the U.S., your information will be transferred to and processed in the U.S., which may have data-protection laws different from your country. Where required, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

11. Security

We implement industry-standard administrative, technical, and physical safeguards, including:

  • TLS/SSL encryption in transit

  • AES-256 encryption at rest for cloud backups

  • Principle of least privilege for staff access

  • Multi-factor authentication for critical systems

  • Routine vulnerability scans and penetration testing

No Internet transmission or storage system is guaranteed 100 % secure, so we cannot promise absolute security.

12. Children’s Privacy

Our Services are not directed to children under 13 (16 in the EEA/UK), and we do not knowingly collect personal data from them. If we learn we have, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on the Site and update the “Last updated” date. Material changes will be highlighted or otherwise communicated to you.

14. Contact Us

Copper Hammer Roofing
Attn: Privacy Officer
Email: randy@copperhammerroofing.com

15. State-Specific Disclosures

  • Utah (UCPA): You have the right to opt out of targeted advertising and the sale of personal data. We do not sell personal data as defined by UCPA.

  • California (CCPA/CPRA): For a list of personal information categories we collected in the past 12 months and details on your rights, please review our California Privacy Notice at [link].

  • Colorado, Virginia, Connecticut, Nevada, and others: You have similar rights to access, delete, and correct data and to opt out of targeted ads; see Section 9 for how to exercise them.