Roofing Supplies Group Holdings Ltd Last updated: October 2026

Who We Are

Roofing Supplies Group Holdings Ltd (Company Registration Number: 02181364). Registered Office: First Floor, Unit 8 St. Georges Park, Kirkham, Preston, Lancashire, PR4 2EF. Email: [email protected]. For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Roofing Supplies Group Holdings Ltd is a data controller for personal information it determines how and why to process. Where a Group subsidiary independently determines how and why personal information is used, that company may also be a controller. Please contact us for details of the relevant Group company.

What Personal Data We Collect

  • Name, contact details, company name and job title
  • Billing and delivery addresses, order and transaction information
  • Trade account details, applications, credit limits, payment history and debt recovery records
  • Information provided about business owners, directors, guarantors and authorised account users, where relevant
  • Credit references, credit-check results and information received from credit reference agencies, where applicable
  • Electronic signatures and associated audit records for documents signed electronically
  • Website usage data, including IP addresses and cookies
  • CCTV footage at branch locations, where applicable

How We Use Your Personal Data and Our Lawful Bases

We use personal information for the purposes below, relying on the relevant lawful basis under UK GDPR:
  • Processing and delivering orders, administering accounts and responding to service enquiries — performance of a contract or legitimate interests, as appropriate
  • Assessing trade credit applications, setting and reviewing credit limits, monitoring payment performance, preventing fraud and recovering debts — legitimate interests, legal obligation or contract performance, as appropriate
  • Maintaining accounting, tax and other statutory records — legal obligation
  • Protecting premises, staff and customers using CCTV where installed — legitimate interests
  • Operating, securing and improving our websites and services — legitimate interests; consent where required for non-essential cookies or similar technologies
  • Sending marketing communications — legitimate interests or consent, as applicable under UK data protection and electronic marketing rules; you can opt out of marketing at any time
  • Managing electronic applications, approvals and signatures — contract performance or legitimate interests, as appropriate
Where we rely on legitimate interests, we consider and balance those interests against the rights and freedoms of individuals. We do not rely on consent where another lawful basis applies.

Sharing Your Information

We may share personal information where necessary with:
  • Relevant companies within Roofing Supplies Group for administration, account management and related business purposes
  • Credit reference and fraud prevention agencies for credit assessment, account monitoring and payment-performance reporting, where applicable
  • Debt collection agencies, insurers, legal advisers and other professional advisers where necessary
  • IT, website hosting, electronic signature and document management providers
  • Payment processors and delivery or logistics partners
  • Regulators, courts and public authorities where required by law
Credit reference agencies may retain records of searches and information shared with them, in accordance with their own privacy notices. Where personal credit checks are carried out on individuals (such as sole traders, directors or guarantors), we will provide relevant information about those checks at the application stage. We do not sell personal data.

International Transfers

Where personal data is transferred or accessed outside the UK, including through cloud or electronic-signature providers, we use appropriate safeguards where required by UK data protection law, such as applicable adequacy regulations or approved contractual safeguards. You may contact us for more information about relevant safeguards.

Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described above, including to meet legal requirements and handle disputes. Typical periods include:
  • Order and invoice records: generally six years, or longer where legally required
  • Trade account and related records: during the relationship and for relevant legal or limitation periods afterwards
  • Unsuccessful credit applications: retained only for a documented, proportionate period based on business and legal requirements
  • Electronic signing records: retained alongside the related agreement or application for the applicable retention period
  • General enquiries: normally up to 12 months unless needed for an ongoing matter
  • CCTV footage: a limited period under the relevant site retention schedule, unless needed for an investigation

Data Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration.

Your Rights

Subject to applicable legal conditions and exemptions, you may have the right to:
  • Access your personal data and request correction of inaccurate information
  • Request deletion or restriction of processing
  • Object to processing, including direct marketing
  • Receive certain information in a portable format (data portability)
  • Withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing
  • Request information about, and exercise applicable rights relating to, solely automated decisions with legal or similarly significant effects
To exercise your rights, contact [email protected]. You can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Cookies

Our websites may use cookies and similar technologies. Please see our separate Cookie Policy for details, including how to manage your preferences. Non-essential cookies are used only where the required consent has been obtained.