GDPR Policy
Last updated 20 October 2026.
The law that applies
Admiral Roofing Specialists Limited handles personal information under the UK General Data Protection Regulation and the Data Protection Act 2018. The Privacy and Electronic Communications Regulations 2003 apply to cookies and to electronic marketing. What this website actually collects is listed in the Privacy Policy. Cookies are listed in the Cookie Policy.
This page is the firm’s account of how those duties are met for admiralroofingservices.co.uk, and of how a person uses the rights the UK GDPR gives them. It is the document to use if you want a copy of your details, a correction, or deletion.
The controller
The controller is Admiral Roofing Specialists Limited, company number 11701881, trading as Admiral Roofing Specialists. The registered office is 46 St Marys Close, Hessle, East Yorkshire, HU13 0HJ. Kerry Southwell, director, is the contact for the controller.
Contact Kerry Southwell at info@admiralroofingservices.co.uk or 01482 627895. Mark a letter to the registered office “FAO Kerry Southwell”.
We have not appointed a statutory data-protection officer. The firm is not required to do so on the processing this website carries out. The same contact details are the route for every request on this page.
How we apply the principles
Article 5 of the UK GDPR requires personal information to be handled lawfully, fairly and transparently; collected for specified purposes and not reused in a way those purposes do not allow; limited to what is needed; accurate; kept no longer than necessary; and protected. The controller is responsible for showing that it does this.
For this website that means:
- we tell you, in the Privacy Policy, what the quote form collects and why, before you send it;
- we use enquiry details to reply, to quote, to do work you ask for, to keep a proper record, and to protect the form. We do not reuse them for an unrelated marketing list;
- the form asks for the details needed to contact you about a roof. It does not ask for a date of birth, a payment card, or an identity document;
- if you tell us a detail is wrong, we correct the copy we hold;
- we do not keep a database of enquiries on the website. Email and job papers are kept only for the periods described in the Privacy Policy;
- the site is served over HTTPS, and the form is checked before an email is sent.
Lawful bases
We rely on Article 6 of the UK GDPR, and only on the bases that match the purpose.
Contract. Where you ask us to reply, to visit, or to quote, we process your name, telephone number, email address, postcode, chosen service, message and the page the form came from so that we can take those steps at your request. If you later accept a quote, the same details are used to perform that contract. The form will not send without the required fields. You can still telephone us.
Legitimate interests. We keep a record of a genuine enquiry, and we block automated or abusive use of the form, because that is necessary for a roofing firm answering the public. The information is what you chose to send. It is not used to profile you for advertising. You may object. We will stop unless we can show a compelling reason, such as a legal claim about the work, or the request is about a security log we still need in order to protect the site.
Legal obligation. Where an enquiry becomes paid work, tax and accounting law can require us to keep a record. We rely on that duty for those records, not for every unanswered enquiry.
We do not rely on consent for the quote form. Consent is not the right basis for a record we need in order to reply. Where consent is the only proper basis, which on this site means promotional email you have asked for, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before you withdrew it, and it does not stop us replying to an enquiry you have already sent.
Special category data
We do not ask for special category data, and we do not ask for criminal-offence data. Special category data includes health, racial or ethnic origin, political opinions, religious beliefs, trade-union membership, genetic and biometric data, sex life and sexual orientation.
If you volunteer a health detail so that we can arrange access, for example that someone in the house should not be disturbed, Article 9 of the UK GDPR still applies to that detail. We use it only to arrange the visit or the work, on the basis that you have made it public to us for that purpose by sending it, or that you have given your explicit consent by asking us to take it into account. We do not copy it into a separate health record. Do not send medical records, and do not send them as an attachment. The form does not accept files.
Children
The site is not directed at children and is not an information-society service offered to a child. The age of digital consent in the United Kingdom does not set the audience for this site. If we learn that a message came from a child under 13, or from a child of any age who is not arranging work with a parent or guardian, we delete it unless a person with parental responsibility asks us to keep it so that we can reply about the property.
Roofing work is not given to anyone under 18. That is a work rule, set out in the Anti-Slavery Policy, not a statement that the website collects children’s data.
Your rights
You have the following rights. Each one has conditions and exemptions in the UK GDPR. We will tell you if we rely on an exemption, unless telling you would defeat the exemption, for example where a disclosure is restricted by law.
- Access. You may ask whether we are processing your personal information and ask for a copy, together with the purposes, the categories, the recipients, the retention period or the criteria we use, and the other particulars Article 15 requires.
- Correction. You may ask us to correct information that is inaccurate, and to complete information that is incomplete.
- Deletion. You may ask us to delete information where we no longer need it, where you withdraw a consent we were relying on and there is no other basis, where you object and we have no overriding ground, or where we have processed it unlawfully. We do not have to delete information we must keep for a legal obligation, or that we need to defend a legal claim.
- Restriction. You may ask us to restrict processing while we check accuracy, where the processing is unlawful but you prefer restriction to deletion, where we no longer need the information but you need it for a legal claim, or while we consider an objection.
- Portability. Where we process information by automated means and the basis is a contract or consent, you may ask for a copy in a structured, commonly used, machine-readable format, and you may ask us to send it to another controller where that is technically feasible. An enquiry that exists only as an email in a mailbox will often fall outside this right, because it is not an automated filing system of the kind Article 20 describes. Where the right applies, we will honour it. Where it does not, we will still give you a copy under the right of access if you ask.
- Objection. You may object to processing based on legitimate interests. We will stop unless we show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for a legal claim. We do not process this website’s enquiries for direct marketing. If we ever did, you could object and we would stop that marketing.
Making a request
Email info@admiralroofingservices.co.uk, call 01482 627895, or write to the registered office and mark the letter “FAO Kerry Southwell”. Say which right you are using, and give us the name, email address and telephone number you used so that we can find the right record. We may ask for information we reasonably need to confirm that you are the person the record is about, or to find it. We will not ask for more identification than the request needs. A copy of a passport is not required for an ordinary enquiry about a quote.
We respond within one month of receiving the request, or of receiving the information we reasonably asked for in order to identify you and locate the data. If the request is complex, or if you make several requests, we may extend that period by up to two further months. If we do, we will tell you within the first month and explain why.
There is no fee. If a request is manifestly unfounded or excessive, we may charge a reasonable fee based on the administrative cost, or we may refuse. We will explain that decision.
If we do not act on a request, we will tell you why, and we will tell you that you can complain to the Information Commissioner’s Office and seek a remedy from a court.
When we may refuse
We may refuse all or part of a request where the law allows it. The usual reasons for this firm are:
- we cannot satisfy ourselves of your identity after a reasonable request for information;
- the information is not yours, and disclosing it would identify another person who has not agreed, unless it is reasonable to disclose it without that agreement;
- we no longer hold the information;
- we must keep it for tax, or to establish, exercise or defend a legal claim;
- the request is manifestly unfounded or excessive.
A refusal is explained in writing unless the law prohibits that explanation.
Automated decisions
Article 22 of the UK GDPR limits decisions based solely on automated processing, including profiling, which produce a legal effect or a similarly significant effect. We do not make that kind of decision about visitors or enquirers.
The spam check, when it is switched on, only decides whether the form submission is accepted by the website. A failed check does not decide whether we will do roofing work, and it does not decide price, credit or access to a service of the firm beyond that form. You can telephone 01482 627895 instead.
Processors
A processor may handle personal information only on our instructions. For this website those processors are the website host, the provider of our email inbox, and, when the spam check is switched on, Cloudflare for that check alone. The OpenStreetMap Foundation receives technical data when the contact page loads the map. It is a separate controller of that request.
We do not authorise a processor to use enquiry details for its own marketing. Where a processor is outside the United Kingdom, the transfer safeguard is the one described in the Privacy Policy.
Personal-data breaches
If we become aware of a breach of security that leads to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of personal information, we will assess it. Where the UK GDPR requires notice to the Information Commissioner’s Office, we will notify the ICO without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will tell you in plain language, describe the likely consequences, and describe the measures we have taken, unless an exception in the UK GDPR applies.
The Information Commissioner
You may complain to the Information Commissioner’s Office if you are unhappy with how we handle your personal information. You do not have to complain to us first, although we would like the chance to put it right.
The ICO’s website is ico.org.uk/make-a-complaint. The helpline is 0303 123 1113. The postal address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
You may also apply to a court for a remedy under the UK GDPR. Nothing on this page limits that right.