This policy explains what Find a Metal Roofer collects when you use findametalroofer.com, why we collect it, who else sees it and the choices you have. The short version: we collect what we need to run a free directory with accounts and reviews, we do not sell personal information, and you can ask us to show, correct or delete what we hold about you.
Last updated: October 16, 2026.
1. Who we are
The site is operated by the publisher of Find a Metal Roofer, which is responsible for the personal information described here. You can reach us through the contact page.
2. What we collect
- Account data. When you register we store your display name, email address, a scrambled (hashed) version of your password, whether you signed up as a homeowner or a pro, the date you joined and your recent logins.
- Listing data. If you add or claim a company listing we store what you enter: business name, phone, email, website, street address, service area, license number, insurance status, year founded, crew size, hours, description, logo, photos, video and social links. Most of this is published on purpose, because that is what a listing is. A claim request also records how you are connected to the business.
- Reviews and responses. The star rating, title, text, project type, city and year you give, your display name, the date, and any owner response. Reports of a review or listing are stored with the reporter’s message and email.
- Newsletter. Your email address, the date you subscribed and whether you later unsubscribed.
- Messages. What you type into the contact form or a quote request form, with your name and email. A quote request is forwarded to the company you chose, and we keep a copy.
- Server logs. Our hosting provider and our software record the IP address, browser type, pages requested, time and referring page for each visit. We use these for security and troubleshooting and keep them for a limited time.
- Form protection. Our forms use a hidden field and a timing check to catch bots. These record nothing about you beyond whether the submission looked automated.
3. Cookies
We use essential cookies only: the cookie that keeps you logged in, a security token that protects forms, and a cookie that remembers a notice you dismissed. These cannot be switched off without breaking login. We do not use advertising cookies or sell data to ad networks. If we enable website analytics in the future we will use a privacy-respecting tool, say so here, and treat its cookies as optional. You can clear or block cookies in your browser at any time.
4. Services we rely on
- Hosting. The site runs on servers operated by our hosting provider in the United States, which stores our database and logs on our behalf and processes them only on our instructions.
- Email. Account emails, notifications and the newsletter are sent through an email delivery service, which receives the address and the message.
- Maps. Pages with a map load map tiles from OpenStreetMap servers, so your browser sends your IP address and the tile request to them, as it does for any image on the web. Listing addresses, and the zip code or city you search for a radius search, may be sent to OpenStreetMap’s geocoding service to find coordinates; we cache the results and send nothing that identifies you. See the OpenStreetMap copyright and privacy page.
- Cloudflare Turnstile (optional). If enabled on our forms, Turnstile checks that a submission comes from a person. Cloudflare receives technical data about your browser and connection to make that decision; see Cloudflare’s privacy policy. We do not use its checks for anything else.
5. How we use information
To run the directory and your account, publish listings and reviews, moderate content, send the emails you asked for or that your account needs, answer your messages, forward quote requests to the company you chose, keep the site secure, measure traffic in aggregate, and meet legal obligations. We do not use your information to build advertising profiles, and we do not sell it.
6. What is public
Listings are public, including the business contact details a company enters. Reviews are public with the display name, rating, text, project type, city and year you provide, and so are owner responses. Search engines index public pages. Your email address, password and account settings are never public. Choose a display name you are comfortable seeing next to your review.
7. Who we share with
The service providers in section 4, under agreements that limit what they may do with the data. The company you send a quote request to, which receives your message and contact details. Authorities or others when the law requires it or when we need to protect the rights or safety of the site and its users. A successor operator if the site changes hands, with notice to account holders. Nobody else, and never for money.
Bid requests. When you tick up to three companies on the map results and send one bid request, we send your name, email address, phone number and roof description to exactly those companies and to nobody else, and we keep a copy so you can see every answer on one page. The companies may contact you about that request only; we tell them not to add you to mailing lists. Requests are deleted twelve months after they are sent, and the address they were sent from is forgotten after ninety days.
8. How long we keep it
Account data stays while your account is open and for a short period after it closes. Reviews stay as long as the listing exists, unless removed under the guidelines or at your request. Listing data stays while the listing is published. Newsletter addresses stay until you unsubscribe. Server logs are kept for a short period, typically a few weeks to a few months. Messages are kept as long as needed to handle them and for a reasonable record afterward.
9. Your rights and choices
Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, ask us to delete it, ask for a copy in a portable format, and unsubscribe from the newsletter with the link in any issue. Residents of California, Texas, Virginia, Colorado, Connecticut and other states with privacy laws have these rights by statute, along with the right to opt out of the sale or sharing of personal information and targeted advertising (we do none of these) and the right not to be treated differently for exercising them.
To make a request, use the contact page and tell us what you want. We verify requests by emailing the address on your account, or by asking for details only the account holder would know. We respond within the time your state law requires, usually 45 days, and tell you if we need longer. If we decline a request we explain why, and you may appeal by replying to our response; we will have a different person review it. An authorized agent may act for you with written permission.
10. Children
The site is for adults and businesses. Children under 16 may not register, write reviews or subscribe to the newsletter. If we learn that we have collected personal information from a child under 16 we delete it. Parents who believe this has happened should contact us.
11. Security
The site uses HTTPS, passwords are stored hashed, access to the database is limited to the people who run the site, and forms are protected against automated abuse. No system is perfectly secure, so use a password you do not use elsewhere and tell us if you suspect a problem.
12. Where information is processed
We operate in the United States and the site is intended for people in the United States. Information is stored and processed here. If you use the site from elsewhere, your information is transferred to the United States.
13. Changes to this policy
We update this policy when our practices change. The date at the top shows the current version, and for material changes we post a notice on the site or email account holders.
14. Contact
Privacy questions and requests go to through the contact page.