RoofQuote← Home

Privacy Policy

Who we are. RoofQuote is operated by Bond Labs Limited (company number 17285766), trading as RoofQuote. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Contact: Bond.2018@outlook.com.

Bond Labs Limited is the controller for the personal data of account holders. For customers' details that you enter, you (the tradesperson) are the controller and we process that data on your behalf.

What we collect

  • Your account email (used for passwordless sign-in codes; there is no password).
  • Your company profile: name, address, phone, email, logo, brand colour, the firm's own terms text, VAT number and quote prefix.
  • Your rate card — the prices you enter so the Service can prepare quotes.
  • Your customers' details (name, contact details, addresses) and the quotes you create for them — you are the data controller for that information; we process it on your behalf.
  • Photos you upload to the visualiser and the composite images produced from them.
  • Essential cookies and similar storage: your sign-in session, your theme preference, and an acknowledgement of the cookie notice.

Customer quote links & acceptance

When a RoofQuote user sends a customer a quote link, the page at that link shows a frozen copy of the quote (company details, the price breakdown, the picture) to anyone who holds the link — it should not be forwarded. The link stays open for at least 60 days, and for a short period after the date the quote is valid until, never longer than 400 days; the user can revoke it at any time. When a customer opens the link, the time of the first open is recorded so the user knows it has been seen. If a customer accepts a quote through the link, the name they type, the time and the IP address of their connection are recorded with the quote as evidence of acceptance, together with any note they add. That record is kept with the quote for as long as the user keeps the quote; theRoofQuote user (the tradesperson) is the data controller for it and the point of contact for any request about it.

Where it lives

Data is stored with Supabase (Postgres, Auth and Storage) in the London (eu-west-2) region and served via Vercel. Access is scoped to your account by row-level security; photos and quote images are held in a private bucket that only your account can read. Your company logo is stored so it can appear on your quotes and on the customer link. If you have configured sending, quote-link emails go through Resend; that is optional and off until you set it up. There is no advertising and no third-party tracking or analytics pixels.

Lawful bases

  • Contract — to create your account and provide the Service.
  • Legitimate interests — to keep the Service secure and to prevent abuse (for example rate-limiting and recording the IP on an acceptance).
  • Your instructions — for customers' personal data, we act as your processor and only process it to provide the Service to you.

How long we keep it

We keep your data for the life of your account. You can export it and delete the account at any time from Settings. When an account is deleted we remove the profile, customers, quotes, rate card and uploaded photos.

Your rights

You have the right to access, rectify, erase, port, restrict or object to the processing of your personal data. In the app: Settings → Your data (a JSON file of your profile, rate card, customers and quotes, or a CSV of the quotes alone), and Settings → Delete account. For anything else, email Bond.2018@outlook.com.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers

The primary store is in the United Kingdom (London). The app is served by Vercel, which may handle requests on infrastructure outside the UK. Where a provider processes personal data outside the UK, we rely on the transfer tools they offer — typically the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses.

Cookies

Only essential cookies and similar storage are used: your sign-in session, your theme preference, and an acknowledgement of the cookie notice. There is no advertising and no third-party tracking. The cookie notice on first visit points here.

Children

RoofQuote is a tool for tradespeople. It is not directed at anyone under 16, and we do not knowingly collect personal data from children.

Changes

If we change this policy we will update the Last updated date at the foot of this page.

Last updated: 27 August 2026.