Privacy policy
We keep your roof address for 18 months and sell it to nobody.
This is what knoxroofingpros.org takes from you, what it does with it, which advertising platforms see a piece of it, and how to make us show you or delete what we hold. Written plainly, because a roofing contractor in Dallas has no business being vague about this.
Effective October 1, 2026 · Last updated October 1, 2026
- Inquiries kept18 months
- Server logs kept60 days
- Consent record6 months
- Your request answeredWithin 14 days
01 When this policy took effect
This policy takes effect on October 1, 2026, and that is also the date it was last changed. It covers every page under knoxroofingpros.org, the inquiry form on the contact page and the support chat in the corner of each page.
It does not cover what happens on the roof. Photographs of your house taken during an inspection, the estimate and the signed contract are handled under that contract, described in the terms of use.
02 Who runs this site
The site is operated by Knoxroofingpros, trading as Knox Roofing at knoxroofingpros.org. That business decides what is collected here and why, which makes it the controller of your data in GDPR terms and the business in US state privacy terms.
- Post
- 9659 Wendell Rd, Dallas, Texas 75243, United States
- [email protected]
- Phone
- 214-646-6625
That Wendell Road address is the shop where the sheet metal gets bent and the office where your message is read. There is no separate privacy department. The person answering a data request is the same office that books inspections.
03 Exactly what we collect
When you send the inquiry form
The form writes your name, phone number, email, the street address of the roof, the kind of inquiry you picked, your message, the roof material you selected, and whether you ticked the consent box. Alongside that, automatically, it records your IP address, your browser's user-agent string, the page you came from, the moment the form was rendered and the moment you sent it. Those two times are how we tell a person from a bot that fills a form in 0.4 seconds.
When you use the support chat
The chat keeps the whole conversation, plus the name, phone and email if you choose to give them. A token is stored in your own browser so you can close the tab and come back to the same thread. Delete your browser storage and the token goes with it.
Technical and log data
Like every web server, ours writes an access log: IP address, time, page requested, user-agent and referrer.
Cookie and storage identifiers
Your choice in the cookie banner is stored in your browser under site_consent_v2. Nothing else on this site persists a choice. If you allow storage, the advertising tags described below may set their own identifiers; the cookie policy lists them one by one.
Advertising click identifiers
When you arrive from a paid ad, the link carries a click identifier: gclid from Google, msclkid from Microsoft, fbclid from Meta. The site reads it from the landing URL.
We take no account, no password, no payment and no card data. Nothing is sold on this site and no payment is taken here.
04 What each piece is used for
- Form and chat contents are used to call you back, look at the address before we drive out, book the inspection and send the written estimate. That is all they are for.
- Render and send times, IP and user-agent are used to filter spam and abuse of the form and chat.
- Server logs keep the site running: finding broken links, spotting attacks, fixing errors.
- The consent record exists so the banner does not ask you again on every page, and so we can show what you chose.
- Click identifiers, only after you allow storage, tell the ad platform that a click on its ad led to an inquiry. It is how we learn which ads bring in roofs and which waste money.
We do not sell your details or build a profile of you. Nobody gets added to a newsletter, because there is no newsletter.
05 The legal basis for each use
Visitors from Europe are owed a stated legal basis for every use. Here they are, one per row.
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your inquiry and quoting the roof | Form fields, chat messages | Steps taken at your request before a contract |
| Contacting you about this roof | Name, phone, email | Consent, given by the tick box |
| Stopping spam and abuse | IP, user-agent, render and send times | Legitimate interest in a working form |
| Running and securing the site | Server access logs | Legitimate interest |
| Remembering your cookie choice | site_consent_v2 | Legal obligation to record consent, and legitimate interest |
| Ad measurement | gclid, msclkid, fbclid, platform cookies | Consent only, withdrawable at any time |
06 The ad platforms that send people here
We pay for ads. Google Ads and Microsoft Advertising send traffic to this site today, and Meta Ads sends traffic when a campaign runs there. Someone searching "roof inspection dallas" may click one of ours and land on this site.
- Google Ads
- Adds
gclidto the link you click. - Microsoft Advertising
- Adds
msclkid, on Bing and its partner sites. - Meta Ads
- Adds
fbclidon links from Facebook and Instagram.
Until you press Allow, those identifiers stay in the address bar and go nowhere. After you allow, the platform's tag can report that a click became an inquiry. The platform gets a conversion signal. It does not get the contents of your message or the address of your roof.
No ad platform has reviewed or vouched for this policy. It is ours, and we answer for it.
07 Consent Mode v2, and what Decline does
The site runs Google's Consent Mode v2. Before any tag loads, four signals are set to denied:
ad_storage, which covers advertising cookiesad_user_data, which covers sending user data to Google for advertisingad_personalization, which covers remarketing and personalized adsanalytics_storage, which covers measurement cookies
They stay denied until you press Allow. Press Decline, or withdraw later with the "Cookie settings" button in the footer, and all four go back to denied at that moment. Your choice is written to site_consent_v2 so the banner stays out of your way.
The banner sits at the bottom of the screen. It never blocks the page, and declining costs you nothing: the form, the phone number and the chat all work the same.
08 Who else receives data
Five recipients. Each one named.
- Google Ireland Ltd and Google LLC, for Google Ads. Receives the
gclidconversion signal and the Consent Mode signals. - Microsoft Ireland Operations Ltd, for Microsoft Advertising. Receives the
msclkidsignal after you allow storage. Microsoft's own handling is set out in the Microsoft privacy statement at privacy.microsoft.com. - Meta Platforms Ireland Ltd, for Meta Ads. Receives the
fbclidsignal where a campaign runs there and you have allowed storage. - Our hosting provider, which serves the site, writes the server logs and stores the inquiry and chat database.
- Our mail provider, which carries the notification of your inquiry to the office inbox.
The hosting and mail providers work on our instructions and may not use your data for their own ends. The ad platforms act under their own policies once a signal reaches them.
09 Data that leaves the country
We are in Texas, and data collected here is processed in the United States. For a visitor in Europe, that is a transfer out of the EU or UK. Google, Microsoft and Meta also move data between their Irish entities and the US. Those transfers rest on the EU-US Data Privacy Framework, where the recipient is certified under it, and on the European Commission's Standard Contractual Clauses where it is not.
If you are in Europe and would rather nothing went to the ad platforms, press Decline. Nothing does.
10 How long we keep it
Real periods. Once a period runs out the data is deleted, not archived.
| Category | Kept for | Why that long |
|---|---|---|
| Inquiries and their email copies | 18 months | Long enough to cover a quote, a hail season and a follow-up on the same roof. |
| Chat transcripts | 18 months | Same reasoning as the form. |
| Server and access logs | 60 days | Enough to trace an attack or an error. |
| Record of a consent choice | 6 months | After that the banner asks again. |
If you hire us, the contract and the job file are kept under the contract's own terms, not this table.
11 How it is protected
Every page and every form post goes over HTTPS. The inquiry database sits outside the public web folder and is reached only through a password-protected office login. The form carries two hidden honeypot fields and a timing check that turn away automated junk before it is stored. Access is limited to the people in the office who book and quote roofs.
No system is breach-proof and we will not claim ours is. If a breach puts your data at risk, we tell you and the authorities the law requires us to tell.
12 Your rights if you visit from Europe
If you reach this site from the EU, the EEA or the UK, the GDPR (and the UK GDPR) gives you these rights over what we hold:
- Access: a copy of your data and how it is used.
- Rectification: wrong details corrected.
- Erasure: deletion, unless a law makes us keep it.
- Restriction: we hold it but stop using it while a question is settled.
- Portability: the data you gave us, in a machine-readable file.
- Objection: to anything we do on legitimate interest.
- Withdrawing consent: at any time, through the footer "Cookie settings" button or by writing to us. It does not undo what was lawful before.
13 Your rights under US state law
Texas residents have rights under the Texas Data Privacy and Security Act. California residents have them under the CCPA as amended by the CPRA. Residents of the other states with privacy laws in force, including Colorado, Connecticut, Virginia, Utah and Oregon, have similar ones. In practice they come to this:
- To know what personal information we hold about you and where it came from.
- To get a copy of it.
- To have it corrected or deleted.
- To opt out of the sale of your personal information, or its sharing for cross-context behavioral advertising.
- To limit the use of sensitive information. We collect none.
- Not to be treated worse for using any of these rights.
We do not sell personal information for money. Passing click identifiers to an ad platform can count as "sharing" under the CCPA, which is why it happens only after you press Allow. Pressing Decline is your opt-out, and you can also opt out by email. An authorized agent may make a request for you with your signed permission.
14 Global Privacy Control is honored
If your browser or extension sends the Global Privacy Control signal (the Sec-GPC header), the site treats it as an opt-out of sale and sharing. All four Consent Mode signals stay denied and the banner does not ask you to reconsider. You do not have to do anything else.
15 Children
This site is for property owners and managers booking roof work. It is not meant for children and we do not knowingly take data from anyone under 13, or under 16 where that is the local threshold. If a child has sent us something, write to us and we delete it.
16 If you want to complain
Tell us first if you can. Most problems are fixed with one email. But you do not need our permission to go further:
- In Texas, or any US state, complain to your state Attorney General. For Texas that is the Office of the Texas Attorney General, Consumer Protection Division.
- In California, complain to the California Privacy Protection Agency, or to the California Attorney General.
- In Europe or the UK, complain to the data protection authority where you live or work.
17 How to ask for your data
Email [email protected] with "Data request" in the subject, or write to Knox Roofing, 9659 Wendell Rd, Dallas, Texas 75243, United States. You can also send it through the contact form by choosing "Something else". Say which right you are using. Give us the email or phone you used with us, so we can find the record.
We may ask one question to confirm the data is yours; we will not ask for a copy of your driver's licence to answer a request about a form you filled in. We answer within 14 days. The Texas Data Privacy and Security Act allows a business 45 days and the GDPR allows a month. We do not need either. If a request is complicated and we need longer, we tell you why before the 14 days run out.
There is no charge. If we turn a request down, we say why and how to appeal; an appeal is answered within 60 days, and if you are in Texas you can take it to the Attorney General after that.
18 Accessibility of this site
We build this site to the Web Content Accessibility Guidelines 2.1 at level AA. Practically: every page works by keyboard alone, starting with the "Skip to content" link. Text on the dark ground is set to pass 4.5:1 contrast. Every photograph carries a written description. Buttons and links are at least 44 pixels tall so a thumb can hit them on a phone. The horizontal step rail on the home page turns into a plain vertical list if your device asks for reduced motion.
Something will still be wrong somewhere. If a page fights your screen reader, your zoom or your switch, call 214-646-6625 or email [email protected]. Tell us the page and what happened. We fix it, and in the meantime we will take the inquiry by phone.
19 When this policy changes
A change is published on this page with a new "last updated" date at the top. If the change matters, a new recipient or a longer retention period, the cookie banner asks for your choice again on your next visit. If you have an open inquiry with us, we email you about it. Old versions are kept and sent on request.
20 Talk to a person about your data
A real person in the Dallas office reads these. Not a form letter.
- [email protected]
- Phone
- 214-646-6625
- Post
- Knox Roofing, 9659 Wendell Rd, Dallas, Texas 75243, United States
This policy is governed by the law of Texas, United States, and disputes about it are heard in the courts of Dallas, without taking away any right your own local law gives you. How cookies are set is covered in the cookie policy; estimates, contracts and warranty in the terms. If you came here to book a roof inspection, the contact page is where that happens.