Who is responsible
CAMPBELL & SON ROOFING LTD, trading online as Seamguard, is the data controller for storefront, order, delivery, membership and support information. Our registered contact address is Unit 3A, The Old Sawmill, Inverness, Scotland, IV3 8JG, United Kingdom. Privacy questions may be sent to support@campbellrooff.shop or raised by phone at +44 7604263595.
This policy applies to visitors and customers worldwide. Our operational consumer-law and privacy approach reflects our United Kingdom establishment while recognising applicable UK GDPR, EU GDPR and California rights.
What we collect
We collect name, email, phone, country, shipping address, billing address, guardian contact where relevant, order contents, delivery instructions, return reasons, budget band and support message text. For order fulfilment, we keep the purchased SKU, quantity, price, dispatch status, tracking reference, delivery events and return or refund history.
We also receive transaction status, payment reference, fraud-screening outcome and limited billing metadata from the payment provider. We do not receive or store your full card number, card security code or online-wallet credentials. Stripe or PayPal processes those details in its own secure environment under its own privacy terms.
Device and request data can include IP address, browser, pages requested, cookie choices, security-verification result and approximate region.
Collection sources
We collect data directly from you when you use checkout, contact, property-order, membership, support and return forms. We also receive data from Stripe or PayPal for payment and billing events; from hosting, security and permitted analytics systems for device and request events; and from warehouse, postal, courier, freight and customs providers for order fulfilment, delivery scans, customs events and delivery exceptions.
When you contact support, we may connect your message to the order, shipping address, dispatch and return records needed to resolve the request.
Why we use it and legal bases
- Contract: take payment, pack and deliver goods, administer memberships, issue receipts, provide order tracking and manage returns.
- Legitimate interests: prevent fraud, secure the storefront, answer support questions, improve product instructions, plan stock and keep proportionate business records.
- Legal obligation: tax, accounting, consumer-rights, product-safety, dispute and regulatory records.
- Consent: optional marketing, non-essential analytics and the GDPR consent recorded on lead forms where consent is the selected basis.
A complete shipping address and contact data are necessary for order fulfilment. We use them to validate the destination, prepare the parcel, provide them to the relevant carrier, send dispatch updates, address delivery exceptions and handle returns. If required information is not provided, we cannot dispatch goods.
We do not use roof-care answers to make legal or similarly significant automated decisions.
International transfers
Worldwide ordering means processors, payment providers and carriers may handle data outside your country, including the United Kingdom, European Economic Area and United States. Where data protection law requires it, we use an adequacy decision, the UK International Data Transfer Agreement or Addendum, Standard Contractual Clauses, and supplementary safeguards. Delivery data necessarily travels to the destination country and relevant customs or carrier systems.
How long we keep it
- Checkout leads that do not become an order and contact or property-order enquiries: up to 24 months after the last meaningful contact.
- Order, payment, refund, tax and accounting records: generally 6 years after the relevant financial period or longer where law or an active dispute requires.
- Membership records: active term plus up to 6 years for contract, payment and dispute records.
- Security logs: usually up to 12 months, unless an investigation requires longer.
- Cookie and consent records: for the lifetime stated in the Cookie Policy, then deleted or refreshed.
We delete, anonymise or securely isolate data when the applicable period ends.
Security
We use transport encryption, role-restricted administration, server-only payment secrets, signed administrative sessions, input validation, anti-abuse checks, processor access controls, backups and monitoring. No internet service is risk-free; contact us promptly if you believe order or account information is exposed. Never send full card details by email or support form.
GDPR and CCPA rights
Depending on where you live, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. California residents may request categories and specific pieces of information, correction or deletion, and may opt out of sale or sharing. We do not discriminate for exercising privacy rights.
Do Not Sell or Share
We do not sell personal information and do not share it for cross-context behavioural advertising. You may still send a request titled “Do Not Sell or Share” to support@campbellrooff.shop; we will record and honour any applicable preference.
We may need to verify your identity or an authorised agent before completing a request. You may complain to the UK Information Commissioner’s Office and, where applicable, your local supervisory authority or the California Privacy Protection Agency.
Automated decisions and children
The store is not for children under 13. People aged 13–17 may browse only with guardian permission and must supply a guardian email where the form requests it. Chemical goods must be handled by an adult. We do not knowingly profile children, and the Roof Care Finder uses a transparent rules table rather than automated eligibility or risk scoring.
Contact and complaints
Write to CAMPBELL & SON ROOFING LTD, Unit 3A, The Old Sawmill, Inverness, Scotland, IV3 8JG, United Kingdom; email support@campbellrooff.shop; or call +44 7604263595. Please describe the data, order or form involved. We aim to acknowledge privacy requests promptly and respond within the period required by applicable law. If our answer does not resolve a UK privacy concern, you can complain to the Information Commissioner’s Office.