UNDERCOVER Roofing Privacy Policy

Introduction

This Privacy Policy outlines UNDERCOVER Roofing’s ("we", "our" or "the Company") practices with respect to information collected from users who access our website at undercoverky.com ("Site"), or otherwise share personal information with us (collectively: "Users").

Grounds for data collection

Processing of your personal information (meaning, any information which may potentially allow your identification with reasonable means; hereinafter "Personal Information") is necessary for the performance of our contractual obligations towards you and providing you with our services, to protect our legitimate interests and for compliance with legal and financial regulatory obligations to which we are subject.

When you use the Site, you consent to the collection, storage, use, disclosure and other uses of your Personal Information as described in this Privacy Policy. We encourage our Users to carefully read the Privacy Policy and use it to make informed decisions.

What types of information do we collect?

We collect two types of data and information from Users.

The first type of information is un-identified and non-identifiable information pertaining to a User(s), which may be made available or gathered via your use of the Site ("Non-personal Information"). We are not aware of the identity of a User from which the Non-personal Information was collected.

Non-personal Information which is being collected may include your aggregated usage information and technical information transmitted by your device, including certain software and hardware information (e.g. the type of browser and operating system your device uses, language preference, access time, etc.) in order to enhance the functionality of our Site. Our web host may also log the pages you request.

The second type of information is "Personal Information", which is individually identifiable information, namely information that identifies an individual or may with reasonable effort identify an individual.

Such information includes:

• Device and connection information: When you visit the Site, our web host, Cloudflare, receives the standard technical information any website receives, such as your IP address, browser type and the page requested, and may keep it in its server logs to secure and operate the Site. We do not collect geolocation data or device identifiers.
• Inspection request information: When you request an inspection through our Site you will be asked to provide us certain details such as: full name; phone number; physical address; and, if you choose, e-mail, a best time to call and a note.

How do we receive information about you?

We receive your Personal Information from various sources:

• When you voluntarily provide us your personal details in order to request an inspection through our Site;
• When you use or access our Site in connection with your use of our services;
• From the ad-campaign codes in a link you followed to our Site (see "Cookies and browser storage" below).

What information do we collect?

We do not rent, sell, or share Users’ information with third parties except as described in this Privacy Policy.

We may use the information for the following:

• Communicating with you via phone, text, or email – sending you notices regarding our services, providing you with technical information and responding to any customer service issue you may have;
• To communicate with you and to keep you informed of our latest updates and services;
• To market our websites and products (see more under "Marketing");
• Conducting statistical and analytical purposes, intended to improve the Site.

In addition to the different uses listed above, we may transfer or disclose Personal Information to our subsidiaries, affiliated companies and subcontractors.

In addition to the purposes listed in this Privacy Policy, we may share Personal Information with our trusted third party providers, who may be located in different jurisdictions across the world, for any of the following purposes:

• Hosting and operating our Site;
• Providing you with our services, including providing a personalized display of our Site;
• Storing and processing such information on our behalf;
• Providing you with marketing offers and promotional materials related to our Site and services;
• Performing research, technical diagnostics or analytics;

Today those providers are Cloudflare, which hosts the Site and runs the inspection request form, and Resend, which delivers inspection requests to us by email. The Site does not store your request itself; it is sent to us by email.

The Storm Check (on the homepage and at /storm-check) looks up storm reports in your browser: the address you pick is never sent to us unless you send the inspection request or ask for the PDF, in which case the address and the storm reports shown are included with your request. A share link holds only a map location rounded to about 100 meters, never your address.

The street address field in the inspection request form uses Google Maps Platform address autocomplete. As you type in that field, what you type is sent to Google to suggest matching addresses. Google’s handling of that information is covered by the Google Privacy Policy.

Notwithstanding the foregoing, we do not share, sell, or disclose phone numbers or SMS/text messaging opt-in consent with any third party or affiliate for their own marketing, advertising, or promotional purposes.

We may also disclose information if we have good faith to believe that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our policies (including our Agreement), including investigations of potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues; (iv) to establish or exercise our rights to defend against legal claims; (v) prevent harm to the rights, property or safety of us, our users, yourself or any third party; or (vi) for the purpose of collaborating with law enforcement agencies and/or in case we find it necessary in order to enforce intellectual property or other legal rights.

User Rights

You may request to:

1. Receive confirmation as to whether or not personal information concerning you is being processed, and access your stored personal information, together with supplementary information.
2. Receive a copy of personal information you directly volunteer to us in a structured, commonly used and machine-readable format.
3. Request rectification of your personal information that is in our control.
4. Request erasure of your personal information.
5. Object to the processing of personal information by us.
6. Request to restrict processing of your personal information by us.
7. Lodge a complaint with a supervisory authority.

However, please note that these rights are not absolute, and may be subject to our own legitimate interests and regulatory requirements.

If you wish to exercise any of the aforementioned rights, or receive more information, contact us:

Email: [email protected]
Phone: (859) 300-0710

Retention

We will retain your personal information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing client personal data, account opening documents, communications and anything else as required by applicable laws and regulations.

We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.

Cookies and browser storage

The Site uses Google Ads tags and cookies to measure the results of our ads (see "Google Ads" below). It does not set any other cookies.

It uses your browser’s storage for these things:

• Which ad or link brought you to the Site. When you arrive from a link that carries ad or campaign codes in the web address (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, gbraid, wbraid or fbclid), the Site saves those codes and the page you landed on in local storage under the name "uc_attr" for up to 90 days. Without such a link, the first page you visit is kept in session storage under the name "uc_lp" until you close the tab. If you submit an inspection request, these details are sent to us with it, together with a reference number we create for your request.
• When the cash-pay offer was last shown ("uc_xo"), so it appears at most once a month.
• That you already sent a request ("uc_lead"), so the offer doesn’t appear again, and its reference number ("uc_conv"), so the request is counted only once in our ad results.
• Your email and phone number, for one page. When you submit the form, they are kept in session storage under the name "uc_ec" until the thank-you page opens. That page reads them, deletes them right away and passes them to Google as described below.

The offer and request entries are never sent anywhere, and the ad or link details leave your browser only with a request you submit. You can delete these entries at any time by clearing your browser’s site data for undercoverky.com.

Along with an inspection request, the form also sends the page you submitted it from and timing information we use to filter out spam. The form may also record which team member’s page or which offer you came from.

Google Ads

We advertise on Google. The Site uses Google Ads tags and cookies to measure the results of those ads, for example whether a visit that started with one of our ads led to an inspection request or a call.

When you submit the form, your email and phone number are sent to Google in hashed form to match ad conversions. Hashing turns them into a code before they leave your browser. Google uses that code to match your request to our ads.

If you came to the Site from one of our ads, the phone number shown may be replaced with a Google forwarding number that rings through to us, so we can tell which ads lead to calls.

To learn more, see how Google uses information from sites that use its services. You can control the ads Google shows you in Google’s ad settings. The Site does not use Google Analytics.

The Google reviews shown on the Site are copies we host ourselves, so viewing them does not send information to Google. Links to our Google listing take you to Google, where the Google Privacy Policy applies.

Third party collection of information

Our policy only addresses the use and disclosure of information we collect from you. To the extent you disclose your information to other parties or sites throughout the internet, different rules may apply to their use or disclosure of the information you disclose to them. Accordingly, we encourage you to read the terms and conditions and privacy policy of each third party that you choose to disclose information to.

This Privacy Policy does not apply to the practices of companies that we do not own or control, or to individuals whom we do not employ or manage, including any of the third parties which we may disclose information as set forth in this Privacy Policy.

How do we safeguard your information?

We take great care in implementing and maintaining the security of the Site and your information. Although we take reasonable steps to safeguard information, we cannot be responsible for the acts of those who gain unauthorized access or abuse our Site, and we make no warranty, express, implied or otherwise, that we will prevent such access.

Marketing

We do not share, sell, or disclose phone numbers or SMS/text messaging opt-in consent with third parties or affiliates for marketing or promotional purposes. We may share limited information with subcontractors who support our operations, such as customer service providers, but text messaging originator opt-in data and consent are never shared with any third party for marketing purposes.

Out of respect to your right to privacy we provide you within such marketing materials with means to decline receiving further marketing offers from us. If you unsubscribe we will remove your email address or telephone number from our marketing distribution lists.

Please note that even if you have unsubscribed from receiving marketing emails from us, we may send you other types of important e-mail communications without offering you the opportunity to opt out of receiving them. These may include customer service announcements or administrative notices.

SMS Terms and Conditions

We only send text messages to contacts who have expressly opted in to receiving text messages from us. Please see our Privacy Policy, available at undercoverky.com/privacy-policy, which outlines how we handle phone numbers and texting.

You can cancel the SMS service at any time. Just reply “STOP” to any text message you receive from us. After you send “STOP”, we will send you a confirmation SMS message confirming that you have been unsubscribed. After this, you will no longer receive SMS messages from us. If you want to rejoin, simply sign up again as you did initially, and we will resume sending SMS messages to you.

If you are experiencing issues with the messaging program, you can reply with the keyword “HELP” for more assistance, or you can contact us directly at [email protected].

Storm alert texts

If you sign up for storm alerts, we keep your mobile number, the address you checked and its map location, the date and time you agreed, and the exact consent wording you agreed to. We use them only to text you when NOAA reports hail 1 inch or larger, wind of 58 mph or more, or a tornado within about 5 miles of that address (at most one text per storm), and to pass your sign-up to our team that serves your area. Consent is not required to buy anything. Reply STOP to any alert to opt out, or HELP for help. These records are stored with Cloudflare, and texts are sent through our SMS provider, RingCentral. We do not sell or share your number with anyone for their own marketing. If you opt out, we keep a record of the opt-out so we never text you again by mistake.

Carriers are not liable for delayed or undelivered messages.

Message and data rates may apply for any messages sent to you from us and to us from you. Message frequency may vary. If you have any questions about your text or data plan, please contact your wireless provider.

If you have any questions regarding privacy, please review our Privacy Policy, available at undercoverky.com/privacy-policy.

Corporate transaction

We may share information in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale). In the event of the above, the transferee or acquiring company will assume the rights and obligations as described in this Privacy Policy.

Minors

We understand the importance of protecting children’s privacy, especially in an online environment. The Site is not designed for or directed at children. Under no circumstances shall we allow use of our services by minors without prior consent or authorization by a parent or legal guardian. We do not knowingly collect Personal Information from minors. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at [email protected].

Updates or amendments to this Privacy Policy

We reserve the right to periodically amend or revise the Privacy Policy; material changes will be effective immediately upon the display of the revised Privacy policy. The last revision will be reflected in the "Last modified" section. Your continued use of the Platform, following the notification of such amendments on our website, constitutes your acknowledgment and consent of such amendments to the Privacy Policy and your agreement to be bound by the terms of such amendments.

How to contact us

If you have any general questions about the Site or the information we collect about you and how we use it, you can contact us at [email protected].

Privacy Policy originally effective: 08/21/2026. Last updated Oct 19, 2026.