Privacy starts with saying exactly what this roof site records.

This privacy statement takes effect on 2026-10-08. It is the current statement for Tin Roof Co. and tinroofco.com. The date is not a promise that every clause stays unchanged; changes are handled in the changes clause below.

The page explains the present operation of this site, including traffic from paid advertising and the form and chat routes that a visitor can use.

The controller and operator is Tinroofco, trading at tinroofco.com. The postal address is 116 Workshop Way, Floor 2, Austin, Texas 83299, Austin, Texas, United States. This is a roofing services site for homes in Austin, Texas.

There is no account area, checkout, payment page, or card-data collection on this site. Its catalogue is inquiry-only.

The inquiry form writes name, phone, email, address, the kind of enquiry, the message, the requested specification, and the consent tick. With it, the system records the IP address, browser user-agent string, referring URL, the moment the form was rendered, and the moment it was sent.

The support chat receives the conversation and an optional name, phone, email, and consent choice. Chat keeps a conversation and a token in the visitor's browser so the visitor can return to it. The browser stores the consent choice under site_consent_v2. Nothing else on this site persists a choice.

Server and access logs contain technical request information. Paid advertising links may carry the click identifiers gclid, msclkid, and fbclid.

Name and a reply route let the crew answer. The address gives context about access and the property. The kind of enquiry, message, and requested specification separate metal roofing Austin requests from roof leak repair Austin, replacement, or a small seasonal roof repair request.

IP address, user agent, referring URL, render time, and send time help protect the form, investigate faults, and understand the request record. Chat data lets the conversation continue. Consent storage remembers whether optional storage was allowed or declined.

Advertising click identifiers attribute a visit or inquiry to the campaign that sent it. They do not turn this site into a payment service or an account service.

Google Ads, Microsoft Advertising and Meta Ads send traffic here today. Google Ads may attach gclid to a click. Microsoft Advertising may attach msclkid. Meta Ads may attach fbclid where a campaign runs there. These identifiers may arrive in the URL and are handled with the consent choices described here.

This statement does not claim that any platform has reviewed, approved, or verified this site. The identifiers are campaign information, not a promise of a roof result and not a binding price.

Consent Mode v2 holds ad_storage, ad_user_data, ad_personalization, and analytics_storage denied until the visitor allows storage. If the visitor declines or withdraws, all four are set back to denied at that moment.

The cookie banner does not block the page. Allow and Decline are real choices, and Cookie choices in the footer reopens the choice. Global Privacy Control is honoured as an opt-out without asking again.

Data can be received by these named services and routes:

• Google Ireland Ltd / Google LLC, for Google Ads, which attaches gclid and receives consent signals.
• Microsoft Ireland Operations Ltd, for Microsoft Advertising, which attaches msclkid. Its handling is described in the Microsoft privacy statement at privacy.microsoft.com.
• Meta Platforms Ireland Ltd, for Meta Ads, which attaches fbclid where a campaign runs there.
• The hosting provider that serves this site and stores the enquiry database.
• The mail provider that carries the notification to the operator's inbox.

The site does not sell data. These recipients are named by function because the service records are routed through them.

Hosting, mail, Google, Microsoft, and Meta may process information across borders, including outside the United States. Where a transfer applies, it is made under the provider's applicable contractual safeguards, adequacy mechanism, or other lawful transfer measure. The relevant provider's own notice governs its processing.

Visitors reaching the site from Europe can use the GDPR rights below. The operator does not add a made-up certification or transfer promise to this statement.

The site sends inquiry and chat requests over encrypted transport where the browser and service support it. The enquiry database and mail route are restricted to the operating service path. Honeypot fields, input checks, server-side validation, access logging, and retention limits help reduce automated abuse and unnecessary storage.

No security measure makes an internet transmission risk-free. Do not put card numbers, passwords, or information about someone else into an inquiry.

Where the gdpr applies, a visitor can request access, rectification, erasure, restriction, portability, objection, and withdrawing consent. Withdrawal affects consent-based processing after withdrawal; it does not rewrite processing that was lawful before the withdrawal.

Send a request using the contact details in the data-request clause. The operator may ask for enough information to identify the relevant record, not for a password or payment.

US state privacy law applies, including California's ccpa and CPRA. Depending on where a visitor lives and the law in force, rights can include access to categories and copies, correction, deletion, portability, and an appeal or complaint route. A visitor can opt out of the sale or sharing of personal information. Tin Roof Co. does not sell information on this site.

The operator responds to a valid request within 10 days as stated below. The exact right available can depend on the visitor's state and the request.

Tin Roof Co. honours global privacy control, including the Sec-GPC header, as an opt-out without asking again. Optional storage remains denied when that signal applies. A visitor can still send an inquiry using only the fields needed for a reply.

The site is not directed to children and takes no data from them knowingly. It has no child account, game, profile, or child-focused service. If a parent or guardian believes a child sent information, contact office@tinroofco.com so the record can be reviewed and removed where appropriate.

A visitor may complain to their state Attorney General. A visitor in California may contact the California Privacy Protection Agency. A visitor covered by the gdpr may complain to a data protection authority in the country or region where they live, work, or believe an infringement occurred.

When this statement changes, the updated text is published here, the effective date is changed, and the version is shown in the legal header. A consent choice is not silently treated as a new optional permission because this page changed. The visitor can revisit Cookie choices and decide again.

For a roofing question, use the contact and inquiry page. For cookies, read the separate cookie statement.