Privacy Policy
Last updated: 2025-08-18
1. Introduction and General Provisions
This Privacy Policy explains how Oxalyn SkyGuard (“we”, “us”, “our”) collects and uses personal information when you visit oxalyn.sbs (the “Site”) or contact us about roofing services in Portsmouth, United Kingdom. By using the Site, you acknowledge that you have read and understood this Policy and agree to its terms. If you do not agree, please discontinue use of the Site.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and—where applicable—the California Consumer Privacy Act (CCPA/CPRA). We aim to handle information lawfully, fairly and transparently, following the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
2. Data We Collect
We collect information in three broad categories:
- Personal details you provide directly: name, phone number, email address, property address, preferred appointment time, and any details you include in enquiry forms or phone calls. If you proceed with works, we may also record job notes, photographs of the roof area, and invoices to deliver and evidence the service.
- Technical data: IP address, device and browser type, operating system, referral URLs, pages viewed, time on page, and approximate geolocation (city‑level such as Portsmouth). This information is gathered through server logs and analytics tools to ensure security and improve the Site.
- Cookies and similar technologies: as described in our Cookie Policy on oxalyn.sbs. We use strictly necessary cookies, performance analytics (e.g., Google Analytics), functional cookies to remember preferences, and advertising cookies (for example, Google Ads) where consented.
3. How and Why We Use Data
We use your information to deliver, improve and protect our services, including to:
- Respond to enquiries, provide quotes, schedule surveys, and perform roofing works in Portsmouth and surrounding areas.
- Operate, maintain and improve the Site, including monitoring performance and preventing abuse.
- Measure marketing effectiveness and personalise content (for example, via Google Ads audiences and aggregated analytics reports).
- Provide customer support, process invoices and payments, and send service or warranty updates.
- Comply with legal obligations, such as accounting, tax, and health & safety requirements, and to resolve disputes.
Legal bases: We rely on performance of a contract (when providing quotes and works), legitimate interests (for security, improvement, and limited direct marketing), compliance with legal obligations (record keeping), and—where required—your consent (e.g., for non‑essential cookies or email marketing). Where we use legitimate interests, we balance our interests against your rights and expectations.
4. Sharing Your Data
We do not sell personal information. We may share limited data with trusted third parties strictly for the purposes described above, including website hosting and security providers, analytics and advertising networks, IT support, payment processors, accountants, professional advisers, and insurers. Where we engage third parties, we put in place appropriate contracts (data processing agreements) requiring them to protect your data and use it only on our instructions.
We may disclose information when legally required—such as to regulators or law enforcement—or to protect our rights, users, or the public. If we undergo a business reorganisation (for example, a merger or acquisition), personal data may be transferred to a successor entity under safeguards that preserve your rights.
5. Use of Third‑Party Services
We may use Google Analytics and Google Ads on oxalyn.sbs. These services set cookies and collect usage data to help us understand how the Site is used and to reach relevant audiences. You can manage cookie preferences through the banner on our Site or your browser settings. For details on how Google processes data, please consult their privacy documentation.
6. Storage and Protection of Data
We retain personal data only as long as reasonably necessary for the purposes set out in this Policy—typically for the duration of your project and warranty period, plus any additional time required for legal or accounting obligations. We implement administrative, technical and physical safeguards to protect data, including encryption in transit (HTTPS), access controls, least‑privilege principles, and staff awareness training. Although no system is perfectly secure, we aim to keep risk proportionate and continually improve our measures.
7. Your Rights
Under the UK GDPR you may request: access to your data; rectification of inaccurate data; erasure; restriction of processing; data portability; and objection to processing (including to direct marketing). Where processing relies on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. We will respond to verified requests within one month, or inform you if we need more time for complex cases.
To exercise your rights, email hello@oxalyn.sbs. We may ask for proof of identity and may decline a request where doing so would adversely affect the rights of others or conflict with our legal obligations. If you are dissatisfied, you can lodge a complaint with the UK Information Commissioner’s Office (ICO).
8. Children
Our services are intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will delete it.
9. International Transfers
Some providers may process data outside the UK or EEA. When this occurs, we use appropriate safeguards such as standard contractual clauses or rely on adequacy regulations to ensure your data receives a level of protection essentially equivalent to that in the UK.
10. Changes to this Policy
We may update this Policy to reflect changes in law or our practices. The “Last updated” date above shows the latest version. If changes are significant, we will provide a prominent notice on oxalyn.sbs or contact you if appropriate.
11. Contact Information
The data controller for oxalyn.sbs is Oxalyn SkyGuard. You can reach us at hello@oxalyn.sbs or by post at 78 Queen Street, Portsmouth, United Kingdom, PO1 3HX. We aim to respond to privacy enquiries promptly.
By using oxalyn.sbs, you confirm your acceptance of this Privacy Policy.