Privacy Policy

Identity

Who the website is for

ER Group London is the trading name used on this website by ER Group London Ltd.

Our company number is 15408737 and our published address is 21 Ellis Street, London, SW1X 9AL.

You can contact us using the telephone number or email address shown on this website.

Who this policy covers

Website visitors and prospective clients

This policy covers website visitors, prospective clients and project-team contacts who use this website or submit a roofing enquiry.

It explains the personal information collected through the website, why it is used, how it is protected and the rights available to you.

Information collected

Contact, project and technical data

The contact form asks for name, email address, telephone, postcode or location, project type, project details and consent confirmation.

The website may also process technical information needed for security and reliable operation, including request timing, submission identifiers and hashed device or network information.

The form does not request payment details, account passwords or identity documents. Please do not include unnecessary sensitive information in your enquiry.

Collection method

Direct submission and technical request handling

Information is collected when you submit the enquiry form, contact us directly or use the website.

Some technical information is processed automatically to deliver pages, validate requests and protect the form from misuse.

Optional analytics is used only where the required consent has been given.

Purposes

Why information is processed

We use personal information to respond to enquiries, understand the property and proposed roofing work, keep appropriate enquiry records and protect the website from misuse.

We may also use technical information to maintain the website, investigate faults and improve security.

Enquiry information is not used for automated decision-making or advertising profiling.

Legal basis

Our reasons for using personal information

Depending on the circumstances, we process information to take steps at your request before entering a contract, for our legitimate interests in responding to enquiries and operating a secure website, to meet legal obligations or on the basis of consent.

Where processing relies on consent, you can withdraw that consent at any time.

Enquiry storage

How website enquiries are stored

Accepted enquiries are stored in a protected, non-public part of the website system so authorised team members can review and respond to them.

Security controls use system-generated identifiers and do not store raw IP addresses as part of the accepted enquiry record.

Retention

How long information is kept

Website enquiry audit records are configured to be kept for 90 days.

Other correspondence and project records may be retained for longer where needed to respond to an enquiry, manage a working relationship or meet legal and business obligations.

Information is deleted or anonymised when it is no longer reasonably required.

Sharing and recipients

Who may receive personal information

Enquiry information is intended for authorised ER Group personnel who need to assess and respond to the enquiry.

Personal information may be handled by service providers who support website hosting, security or email delivery on our behalf.

We do not sell personal information. We may disclose information where required by law or where necessary to establish, exercise or defend legal rights.

International transfers

Safeguards for data handled outside the UK

Some service providers may process information outside the United Kingdom.

Where this occurs, we take reasonable steps to ensure appropriate contractual or legal safeguards are in place.

Security controls

How we protect personal information

The enquiry form uses request validation, spam checks, rate limiting and non-public storage to reduce the risk of misuse.

Access to personal information is limited to people and service providers who need it for the purposes described in this policy.

No method of online transmission or storage is completely secure, but we use proportionate technical and organisational measures to protect information.

User rights

Rights may depend on context

Depending on the circumstances, you may have rights to request access, correction, erasure, restriction or portability of your personal information, to object to processing and to withdraw consent.

Not every right applies in every circumstance.

Use our published contact details to make a request or raise a privacy question. You also have the right to complain to the Information Commissioner's Office.

Automated decision-making

Automated checks and profiling

The website does not currently use automated decision-making or profiling to make business decisions about individuals.

Spam and rate-limit checks are security controls used to protect the form, not automated project-acceptance decisions.

Website security controls may automatically reject suspicious or repeated form submissions, but they do not make decisions about whether a roofing project will be accepted.

Children

The services are not directed at children

The residential roofing services and enquiry workflow are not directed at children.

The website does not intentionally collect children's data and does not implement age verification.

If we become aware that a child has provided personal information through the website, we will take appropriate steps to remove it.

Changes

Updates to this policy

This policy may be updated when website data-processing behaviour changes.

Please revisit this page periodically to see the current version.