Privacy, Accessibility and Data Disclosures

Effective Date and Document Scope

This privacy notice, accessibility specification, and data request schedule takes effect on 2026-11-10. It applies to all electronic transmissions, inquiry submissions, diagnostic dispatch chats, and programmatic advertising traffic handled through the domain scottroofingsco.com.

All updates replace earlier notices immediately upon posting. We maintain dated archives of prior notices to establish exact terms governing any historic estimate, inquiry, or consent signal recorded by our systems.

Data Controller and Operating Entity

The data controller responsible for the processing of personal information gathered on this website is Scottroofingsco, trading at scottroofingsco.com as Scott Roofing Company.

Our postal address, written out in full, is 24777 N 15th Ave, Phoenix, Arizona 85085, Phoenix, Arizona, United States. We hold active Arizona Registrar of Contractors licence ROC No. 123456, under which our crew has logged 247 completed residential and commercial roofing projects since 2018. Governing law for data protection and disputes is the law of Arizona, United States, with disputes heard in the courts of Phoenix. For administrative communications, our telephone is 602-442-7663 and electronic mail is directed to [email protected].

Categories of Data Collected

We limit data capture to information necessary for roof inspections, leak diagnostics, cost modeling, and advertising verification. Our systems collect data through four operational channels:

First, our site inspection inquiry form (processed by tagac09.php) collects: contact name, telephone number, electronic mail address, street address of the property requiring roofing services, inquiry classification (new roof installation, tile roof replacement, roof repair, system/membrane repair, or hourly tile repair), project notes, structural specifications, and explicit privacy consent confirmation. The server automatically logs the client IP address, browser user-agent string, referring URL, timestamp of form rendering, and timestamp of form transmission, alongside validation tokens.

Second, the dispatch support chat (hafufb2.php) logs conversation transcripts, session timestamps, and generates a random client token stored in the browser’s local storage so ongoing technical conversations survive page refreshes.

Third, standard web server infrastructure records access logs containing incoming IP addresses, requested file paths, HTTP status codes, and network transmission metrics for network security.

Fourth, paid advertising inbound links provide advertising click identifiers (gclid for Google, msclkid for Microsoft, and fbclid for Meta) that are processed under our consent controls.

We maintain no visitor accounts, require no passwords, and process no credit card or payment transactions on this domain.

Purposes of Data Processing

Every category of data processed by Scott Roofing Company serves a defined operational or legal purpose:

Form submissions allow our estimator to calculate roof pitch, measure square footage from aerial maps or field inspection records, assess underlayment degradation, schedule physical ladder inspections, and generate itemized quotes within our confirmed bands (such as 8,500 to 30,000 USD for new installations or 15,000 to 40,000 USD for tile replacements).

Support chat data enables prompt answers to inquiries regarding crew availability, monsoon storm damage assessments, and emergency tarping protocols.

Server network telemetry protects server endpoints from malicious brute-force attempts, automated vulnerability scans, and distributed denial-of-service disruptions.

Advertising parameter handling measures return on advertising spend, verifies click legitimacy against fraudulent bots, and aligns incoming requests with local Phoenix search inquiries.

Legal Bases for Processing

Under state and international data privacy statutes, we process personal information solely where an authorized legal basis exists:

Contractual necessity governs the processing of customer names, street addresses, phone numbers, and structural specifications when preparing estimates, issuing roofing proposals, or fulfilling repair work under Arizona ROC No. 123456.

Freely given consent serves as the legal basis for optional marketing cookies, conversion attribution pixels, and advertising measurement parameters. Consent is granted explicitly through our consent banner or form consent checkbox and can be revoked at any time.

Legitimate interest supports our analysis of server security logs, IP rate-limiting, and fraud prevention measures, balanced strictly against visitor privacy rights.

Legal obligation requires retention of project contracts, licensing filings, structural invoices, and tax records in compliance with Arizona statutory contractor mandates.

Paid Advertising Platforms and Campaign Attribution

This website is an active landing destination for paid advertising campaigns today. Google ads, Microsoft advertising, and Meta Ads run traffic to our pages to connect Phoenix homeowners and commercial property managers with our roofing crew.

When a visitor arrives via a sponsored link, the respective advertising network attaches a unique click identifier to the landing URL: Google Ads attaches gclid, Microsoft Advertising attaches msclkid, and Meta Ads attaches fbclid.

These parameters permit campaign attribution, verify click authenticity, and ensure advertising traffic reaches relevant service scopes without cloaking or doorway redirects. Campaign materials accurately represent the services of Scott Roofing Company, Arizona ROC No. 123456, and our confirmed USD pricing ranges.

Consent Mode v2 Architecture and Signal Governance

We implement consent mode architecture directly within our client-side runtime to govern telemetry tags under Consent Mode v2. When a user first lands on any page, our framework initializes four core privacy signals to an explicit denied state:

1. ad_storage: denied
2. ad_user_data: denied
3. ad_personalization: denied
4. analytics_storage: denied

These four signals remain held denied until the visitor explicitly clicks the Accept button on our consent interface. If consent is granted, the parameters update to granted, allowing attribution beacons to transmit. If the visitor clicks Decline, or subsequently resets preferences via the Consent Settings control in our footer, all four signals are set back to denied, and browser storage keys associated with non-essential tracking are excised immediately.

Third-Party Processors and Service Partners

To maintain our web presence and dispatch roofing services across the Phoenix metropolitan area, we share specific data with vetted corporate processors under contractual data processing agreements:

Advertising processors include Google Ireland Ltd / Google LLC (Google Ads tag infrastructure and analytics attribution, which attaches gclid to a click and receives consent signals), Microsoft Ireland Operations Ltd (Microsoft Advertising, which attaches msclkid; its own handling is covered by the Microsoft privacy statement at https://privacy.microsoft.com/privacystatement), and Meta Platforms Ireland Ltd (Meta Ads, which attaches fbclid, where an advertising campaign runs there).

Infrastructure processors include the hosting provider that serves this site and stores the enquiry database for tagac09.php and hafufb2.php in secured US data centers, and the transactional mail provider that carries the notification to the operator inbox at [email protected] over encrypted TLS connections.

None of these partners have authorization to sell personal data submitted to Scott Roofing Company or use it for independent commercial profiling.

Cross-Border Data Transfers

Primary servers and office records for Scott Roofing Company reside in the United States. If you interact with our website from outside the United States, your transmission originates across international boundaries.

Cross-border data transfers to our US infrastructure or multinational service providers (such as Google, Microsoft, and Meta) comply with standard contractual clauses adopted by the European Commission, the UK International Data Transfer Addendum, and equivalent international transfer mechanisms ensuring protections comparable to originating jurisdictions.

Data Retention Periods

We enforce specific data lifecycles across all systems rather than retaining records indefinitely:

Inquiry submissions received through tagac09.php, together with transmission timestamps and field measurements, are retained for 36 months to maintain historical records for roof warranties, recurring inspections, and insurance re-evaluations.

Support chat conversation transcripts from hafufb2.php are retained for 12 months to provide continuity when past customers contact our desk following seasonal monsoon weather.

Web server network access and error logs containing raw IP addresses are rotated and permanently purged after 30 days.

First-party consent selection tokens (site_consent_v2) expire exactly 12 months from generation, after which the consent banner prompts the visitor anew.

Formal customer data access, deletion, or correction requests are logged and retained for 24 months to prove statutory compliance.

Technical and Operational Data Security

We maintain physical, electronic, and procedural safeguards designed to protect personal information against unauthorized access, destruction, loss, or alteration:

All HTTP traffic across scottroofingsco.com is forced onto TLS 1.3 encryption, ensuring end-to-end transport confidentiality. Database storage on our hosting system enforces restricted UNIX permissions, firewalled database ports, and administrative access gated by public-key authentication.

Our forms utilize server-side input sanitation, rate-limiting counters, and honeypot traps (firm and homepage) to defeat bot injection attacks without collecting intrusive biometric surveillance. On-site estimators access customer proposals solely via encrypted portable hardware protected by full-disk encryption and biometric access controls.

European Privacy Rights (GDPR)

For visitors protected by the General Data Protection Regulation (gdpr), Scott Roofing Company guarantees the full range of statutory data subject rights:

1. Right of Access: You may request confirmation of whether we process your personal data and obtain a structured copy of those records.
2. Right to Rectification: You may require us to correct inaccurate contact details, property measurements, or service logs.
3. Right to Erasure (Right to be Forgotten): You may request the deletion of your personal records where data is no longer necessary for warranty, tax, or legal defense purposes.
4. Right to Restriction: You may request the suspension of processing while the accuracy of your records or our legal bases are verified.
5. Right to Data Portability: You may request an export of your inquiry and project data in a structured, machine-readable format.
6. Right to Object: You may object at any time to processing based on legitimate interests or direct marketing.
7. Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any moment without affecting prior lawful processing.

United States State Privacy Rights (CCPA/CPRA & State Acts)

Residents of California under the California Consumer Privacy Act as amended by the CPRA (ccpa), alongside residents of Virginia, Colorado, Connecticut, Utah, and other applicable states, possess specific privacy entitlements:

Right to Know: You have the right to request disclosure of the categories of personal data collected, categories of sources, business purposes for collection, and categories of third parties with whom data is shared.

Right to Delete: You may request the deletion of personal information collected from you, subject to statutory exemptions for ongoing contractor warranty obligations, fraud prevention, and legal compliance under Arizona law.

Right to Correct: You may request the correction of inaccurate personal records maintained by our estimating office.

Opt-Out of Sale or Sharing: Scott Roofing Company does not sell personal data for monetary consideration. We do not share personal information with third parties for cross-context behavioral advertising without prior consent. You have the permanent right to opt out of any future sharing.

Non-Discrimination: We never deny service, charge different prices, or alter our roofing workmanship based upon your exercise of state privacy rights.

Global Privacy Control (GPC) Signal Recognition

Our website recognizes and respects the global privacy control (GPC) browser signal. When your browser transmits the Sec-GPC header set to 1, our client-side consent controller interprets this request as a direct, binding instruction to opt out of advertising data sharing and non-essential analytical cookies.

Upon receiving the global privacy control signal, Consent Mode v2 signals remain in the denied state, marketing cookies are suppressed, and your choice is registered without requiring additional manual intervention.

Children’s Privacy Protection

Our roofing services, estimates, and website content are directed exclusively to property owners, facility managers, and adults over the age of 18. We do not intentionally target, solicit, or collect personal data from minors under 16 years of age.

If we discover that a minor under 16 has submitted personal details through our inquiry or chat forms without verified parental consent, our administrative staff immediately purges that transmission from our database and mail queues. Parents or legal guardians may contact us at [email protected] to request immediate removal of any suspected minor record.

Regulatory Complaints and Supervisory Authorities

If you believe that Scott Roofing Company has failed to process your personal data in accordance with statutory requirements, you retain the legal right to lodge an administrative complaint with regulatory enforcement agencies:

In the United States, complaints may be directed to the Office of the Arizona Attorney General (Consumer Protection Division) or your home state’s Attorney General. California residents may file formal complaints with the California Privacy Protection Agency (CPPA) or the California Department of Justice.

In the European Economic Area or United Kingdom, you may lodge a complaint with your local national Data Protection Authority (such as the UK Information Commissioner’s Office or the Data Protection Commission in Ireland). We invite consumers to contact our Phoenix operations desk first so we can resolve any record grievance directly and expeditiously.

Data Subject Request Process and Protocols

You may submit a formal request to access, inspect, export, rectify, or delete your personal information by sending an electronic transmission to [email protected] with the subject line “Personal Data Request”, or by sending written postal mail to:

Scott Roofing Company
Attention: Data Privacy Officer
24777 N 15th Ave, Phoenix, Arizona 85085, United States

To protect consumer privacy against impersonation, your request must include your full name, telephone number, the street address associated with your roofing project or inquiry, and the specific categories of data or actions requested. We verify identity by comparing supplied details with historical dispatch records.

We acknowledge and answer every verified data request within 10 days of receipt. Requests are fulfilled completely free of administrative charge, unless requests are demonstrated to be manifestly unfounded, repetitive, or excessive.

Modifications and Notification of Policy Changes

We review and update this privacy and data policy periodically to reflect operational shifts in our roofing estimating tools, adjustments to digital advertising network rules, or statutory changes in federal and state consumer data legislation.

When amendments are made, the revised document will be published immediately on scottroofingsco.com with an updated effective date header. Where revisions materially alter the processing of previously gathered personal data, we will provide a prominent notice on our website or communicate directly via electronic mail to affected inquiry contacts before changes take effect.

Privacy Officer Contact and Inquiry Dispatch

For any questions regarding our privacy architecture, Consent Mode v2 implementation, data processing practices, or trade credentials under Arizona ROC No. 123456, reach our operations desk directly:

Scott Roofing Company
24777 N 15th Ave, Phoenix, Arizona 85085, Phoenix, Arizona, United States
Telephone: 602-442-7663
Electronic Mail: [email protected]
Primary Office Hours: Monday through Saturday, 6:00 AM to 6:00 PM Mountain Standard Time

Digital Accessibility Commitment and Conformance Statement

Scott Roofing Company is committed to providing a digital experience that is accessible to all Phoenix-area property owners, including individuals with visual, auditory, cognitive, and motor disabilities. We target conformance with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA criteria.

Our static architecture emphasizes semantic HTML markup, unambiguous landmark roles, descriptive form control labelling, logical heading hierarchies, and keyboard-operable navigation controls. All primary interactive buttons and links feature minimum touch targets of 44 by 44 pixels. Our color ladder guarantees text contrast ratios surpassing 6.9:1 on secondary elements and 11.9:1 on primary body typography.

Users navigating with screen readers or alternative input devices can bypass header chrome using our top-level skip link. If you encounter any accessibility barrier or have difficulty completing an inspection request on our site, please contact our accessibility coordinator at 602-442-7663 or via email at [email protected]. We will provide the requested roofing information, diagnostic scope, or estimate through an alternative accessible communication channel.