Privacy Policy & Compliance Standards

This policy took effect on 2026-11-10. All subsequent data processing operations, intake logs, and commercial telemetry records originating from our marketing and dispatch portals conform to the operational stipulations set forth herein.

The data controller responsible for operations on this website is Highpointroofingcorps, trading at highpointroofingcorps.com. Physical correspondence and legal process must be directed to our headquarters at 7105 SW 8th St, #202, Miami, Florida 33144, Miami, Florida, United States. Telephone inquiries are received at 305-801-5332.

Collected data is utilised exclusively to: (a) evaluate structural roof damage and schedule physical on-site inspections by certified roofers; (b) generate transparent estimates for standing seam metal roofing, flat roof repair TPO EPDM, flashing replacement, or decking repair; (c) verify property jurisdiction within Miami-Dade High Velocity Hurricane Zone (HVHZ) building boundaries; (d) measure paid advertising performance without personal profiling; and (e) safeguard our communication systems against fraudulent automated submissions.

Under applicable state and international legal frameworks, processing activities proceed under distinct authorities: contract necessity applies when evaluating a re-roofing estimate Miami FL or arranging emergency leak repairs requested by the property owner; consent serves as the sole ground for deploying optional analytical storage and advertising measurement cookies; legitimate interest governs server security maintenance, abuse mitigation, and technical logging necessary to ensure site integrity.

This website receives live commercial traffic funded through digital marketing campaigns. Specifically, Google Ads, Microsoft Advertising, and Meta Ads direct prospective clients to our technical landing pages. These networks append distinct campaign click identifiers to incoming web requests: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads. These cryptographic strings enable deterministic attribution of advertising expenditure without generating cross-site consumer behavioral profiles on our infrastructure.

Our infrastructure strictly implements Google Consent Mode v2. Prior to an explicit affirmative interaction by the visitor, four fundamental platform permissions are initialized in a denied state: ad_storage, ad_user_data, ad_personalization, and analytics_storage. If a visitor declines cookies or ignores the selection prompt, all four signals remain denied, preventing advertising platforms from reading or writing persistent device cookies. If the visitor subsequently revokes authorization, the state transitions instantly back to denied.

We limit processor engagements to essential infrastructure providers. Direct platform partners include: Google LLC / Google Ireland Ltd (Google Ads advertising attribution and performance auditing); Microsoft Ireland Operations Ltd / Microsoft Corporation (Microsoft Advertising attribution, governed under the provisions of the Microsoft privacy statement at privacy.microsoft.com); Meta Platforms Ireland Ltd / Meta Platforms Inc. (Meta Ads referral tracking); our dedicated hosting provider maintaining server containers and enquiry relational databases; and our transactional mail provider routing inspection dispatches to our estimator desk.

Data collected from visitors located outside the United States is transferred to and processed on secure web servers situated within the United States. Where international transmission occurs, protection is ensured via Standard Contractual Clauses (SCCs) authorized by the European Commission, alongside supplementary technical safeguards including transport layer encryption (TLS 1.3) and restricted database access.

Data is expunged according to predefined, objective retention schedules: inquiry submissions, including contact forms and forwarded notification emails, are retained for 24 months to maintain project estimation history and warranty service continuity; real-time support chat transcripts are preserved for 12 months; web server network access and security error logs are wiped after 30 days; visitor consent choices recorded under site_consent_v2 expire after 12 months; formal data subject access requests are acknowledged and resolved within 5 days of verified receipt.

We enforce comprehensive technical protections including mandatory HTTPS encryption across all endpoints, automated honeypot verification on forms to prevent automated exploitation without capturing end-user biometrics, least-privilege administrative access controls, and segregated database storage for commercial dispatch communications.

For individuals accessing this portal from the European Economic Area or United Kingdom, the General Data Protection Regulation (GDPR) grants enforceable statutory rights: the right of access to confirmed data copies; the right to rectification of inaccurate records; the right to erasure (“right to be forgotten”); the right to restriction of processing; the right to data portability in structured formats; the right to object to processing based on legitimate interests; and the right to withdraw previously granted consent at any time without retroactive penalty.

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), alongside comprehensive state privacy enactments in Florida, Texas, Virginia, Colorado, and Connecticut, consumers possess the right to know what personal data categories are collected, request deletion of personal information, correct factual errors, and prohibit the sale or sharing of personal data. High Point Roofing Corp does not sell consumer personal information, nor do we disclose customer records to data brokers.

Our systems recognize the Global Privacy Control signal. When a user’s web browser broadcasts the Sec-GPC header set to 1, our client-side software automatically suppresses all non-essential analytical and advertising storage mechanisms without requiring individual manual intervention or banner configuration.

Our construction services and web interfaces are directed exclusively to adults, commercial facility directors, and property owners aged 18 and older. We do not knowingly solicit, collect, or process information from minors under 16 years of age. If we discover inadvertent intake of minor data, it is permanently erased immediately.

Consumers who believe their privacy rights have been infringed maintain the right to register formal complaints with relevant oversight bodies: Florida residents may lodge concerns with the Office of the Florida Attorney General; California residents may file directly with the California Privacy Protection Agency; European residents may address their national Data Protection Authority.

To submit an inquiry, request data export, or demand record destruction under statutory privacy frameworks, transmit a verified communication to our compliance department at [email protected] or by postal delivery to 7105 SW 8th St, #202, Miami, Florida 33144. Our officers verify requester identity against the recorded project address and contact details, issuing a comprehensive resolution within 5 days.

We reserve the prerogative to modify this document in response to statutory amendments or construction infrastructure revisions. When updates occur, the revision date at the head of this statute is amended. Material procedural alterations will be accompanied by an advisory statement on our primary digital portal.

Direct operational and legal queries regarding this privacy framework to our designated communications officer at [email protected], via telephone at 305-801-5332, or by written correspondence delivered to High Point Roofing Corp, 7105 SW 8th St, #202, Miami, Florida 33144, Miami, Florida, United States.