Privacy Policy

Last updated: 12 October 2026

This policy explains how Prompt Roofing handles personal information through this website, roofing enquiries and services, client accounts, and our authorised business publishing integrations. It also explains how to request access, correction or deletion of your information.

Go to data deletion instructions · Facebook, Instagram and other connected accounts

Who is responsible for your information?

Prompt Roofing is responsible for the information it collects and uses for its roofing business. Contact us about privacy at orders@promptroofing.co.za, on 011 392 2809, or at 38 Quinn Street, Norton Home Estate, Benoni, 1509, South Africa.

Information we collect and why

• Enquiries and service records: your name, phone number, email address, service area, site address, roof problem, correspondence and photos you provide. We use these to respond, arrange inspections, prepare quotations, carry out work and provide after-sales support.
• Client accounts and transactions: account identifiers, authentication records, quotations, orders, invoices, payment status, guarantees and claims. We use these to provide account access, manage services and maintain necessary business records.
• Website and security information: IP addresses, browser/device information, request logs, consent choices, page visits and interactions. We use these to operate and protect the website and, subject to applicable consent choices, measure performance and advertising results.
• Connected business accounts: account and Page identifiers, profile names or handles, access permissions, authorisation tokens, approved content, publication identifiers and operational results, as explained below.

Information comes from you, authorised staff, connected service providers and technical interactions with our website. Providing enquiry details is voluntary, but without enough contact and job information we may be unable to respond or deliver the requested service. Please avoid submitting unnecessary identity documents or sensitive personal information.

We process information for requested services and contracts, applicable legal obligations, legitimate business and security purposes, or consent where required. Submitting an enquiry does not give blanket permission to publish your details or send unrelated marketing. You may withdraw consent or object to direct marketing by contacting us; this does not undo lawful processing already carried out.

Cookies, analytics and advertising

Essential cookies support security, sessions and normal website operation. Optional analytics and advertising tools, when enabled and permitted by your consent choices, may include Google Analytics, Google Tag Manager, Google Ads, Microsoft Clarity and Hotjar. They may process browser/device information, page activity, advertising click identifiers and conversion events.

Where enhanced conversion measurement is enabled and authorised, contact details may be normalised and hashed before being sent to Google to match an enquiry to advertising. Hashing is a protection measure; it does not make that information anonymous. Optional measurement is separate from our use of your details to respond to a service enquiry.

You can accept, reject or change optional cookie choices through the website's cookie controls. You can also manage cookies in your browser. Rejecting optional cookies does not prevent you from requesting roofing services.

Facebook, Instagram and other connected accounts

The Prompt Roofing app and completion-marketing tools are for authorised staff to connect and publish to business accounts they legitimately manage. Website visitors do not need Facebook or Instagram login to request roofing services. Integrations operate only when the relevant account is connected and the required provider permissions are granted.

Facebook authorisation may provide basic profile information and the Pages the authorising person may manage, including Page IDs, names, links, permissions and Page access tokens. We use Page-list and read permissions to identify the intended Prompt Roofing Page and publishing permission to send approved business updates. Instagram authorisation provides the professional-account identifier, username and access token for account verification and approved content publishing.

YouTube and Google Business Profile integrations similarly use authorised channel or location identifiers and credentials to verify destinations and publish approved content. We record post/video identifiers, links, processing states and errors to track results and prevent duplicate publication. These publishing tools are not used to collect private social messages, friends lists or unrelated account content.

Publishing credentials are held in encrypted private storage with restricted access. They are used to maintain the authorised connection, including token renewal where supported, and are not included in public posts. We do not sell platform account information or use publishing permissions for unrelated advertising or profiling.

Account owners can withdraw app access through the relevant platform's app or business-integration settings. Revocation stops future authorised access but does not automatically erase records we already hold or remove existing public posts. Contact us using the deletion instructions below for those requests.

Project photos and public updates

Photos supplied for quotations, job records or guarantees are not automatically approved for marketing. Public project photos require confirmation that they show the genuine work, may be published and have passed privacy checks. Public captions should use a service area rather than a client's name or full street address. Identifying details should be removed or obscured before publication.

Approved photos, captions and videos may be published on our website, Facebook, Instagram, YouTube or Google Business Profile. A factual completion update may be published without site photos; it must not claim photographic before-and-after proof. Contact us if a published item identifies you or you wish to withdraw permission for future use.

Who receives information?

Relevant information may be accessed by authorised staff and service providers supporting hosting, email and messaging, quotation and job management, payment processing, backups, analytics or advertising. Approved public content is sent to the publishing platform and becomes visible to its audience. We may also disclose information where legally required or necessary to protect lawful rights. We do not sell your personal information.

Some providers process information outside South Africa. Transfers must have an applicable lawful basis and appropriate protection under POPIA. External platforms also handle information under their own policies; you can review Meta's Privacy Policy and Google's Privacy Policy.

Security and retention

We use access controls, encrypted connections, protected credentials and backups to reduce the risk of unauthorised access or loss. No internet service can guarantee absolute security. Suspected security compromises are assessed and notifications made where required by law.

We retain information for the purpose it was collected, ongoing service and guarantee obligations, necessary financial records, security, disputes and applicable legal requirements. Connected-account credentials are needed while authorised publishing access is maintained; deletion requests include review and removal of credentials no longer needed. Publication records may be retained where needed for audit, duplicate prevention or lawful obligations.

Backup copies can remain until their normal retention cycle expires and are restricted to recovery purposes. If a backup is restored, applicable deletion requests must be reapplied. Information that is no longer needed should be deleted or de-identified.

Data deletion instructions

You can request deletion of website, client or connected Facebook/Instagram app data without logging in to this website:

1. Email orders@promptroofing.co.za with the subject Privacy and data deletion request. If email is unavailable, call 011 392 2809 for help making the request.
2. Tell us the contact email/phone, quote reference or connected account/Page name or ID that helps locate the records, and what you want deleted. For platform data, identify the Prompt Roofing app and the Facebook Page or Instagram account concerned. Do not send passwords, access tokens or an App Secret.
3. We may ask for limited verification of your identity or authority over the account before acting, to protect information from unauthorised deletion.
4. We will review the request without unnecessary delay, remove or de-identify information we are no longer entitled to retain, and explain the outcome, any information retained and the reason. Applicable legal retention, active guarantees or disputes may limit deletion; they do not justify retaining unrelated information indefinitely.

For a connected-account deletion request, the review covers stored account identifiers, authorisation tokens and associated app records. Removing authorisation alone does not remove existing public posts. If you also want a post, photo or video removed, include its link; we will address content under our control. Copies, shares or information held independently by a platform or other people may require a separate request to that party.

Your rights and complaints

Subject to POPIA, you may ask whether we hold your information, request access or correction, request deletion, object to applicable processing or direct marketing, and withdraw consent where processing relies on it. Contact us using the details above. We will explain any applicable verification requirements, lawful limits or prescribed access-request procedure.

If your concern is unresolved, you may contact South Africa's Information Regulator. This website and its business-account publishing tools are not directed at children; please contact us if a child has supplied personal information requiring attention.

Changes to this policy

We may update this policy when our services, integrations or obligations change. The current version and its update date will be published here. New processing that requires consent will require that consent separately.