Collection Notice

What we collect

• Homeowners: name, contact details, property address, roof data (including aerial measurements and photos), job brief/scope, preferred dates; communications (messages and calls); device data (IP, browser, site interactions).
  
• Contractors: Contractors: business and contact details, licence numbers, insurance details (PL, workers comp), HBCF eligibility (as applicable), references, performance/quality and conduct data; platform and billing information.

How we collect

Directly from you; from contractors; from our service providers (e.g., aerial/roof data, analytics, hosting, communications and support tools, payment processors); and from public sources (e.g., licence registers).

Why we collect and use your information

To operate our marketplace: scope jobs, invite tenders, present quotes, coordinate inspections, facilitate homeowner–contractor engagement, verify contractor compliance, run our business (including training, quality and analytics), communicate with you, prevent fraud/abuse, and comply with laws.

Who we disclose to

Participating contractors; our service providers (hosting, analytics, communications, document storage, payment processors for contractor fees); insurers or scheme administrators where required (e.g., HBCF); regulators or law enforcement (as required or authorised by law); and prospective acquirers in a business transfer.

Cross‑border disclosures

Some providers may process or access personal information outside Australia (e.g., United States, European Union, Singapore). We take reasonable steps so overseas recipients handle personal information consistently with the APPs.

Do you have to provide this information?

You can browse anonymously. If you don’t provide contact and property details, we may be unable to scope your job, organise tenders or coordinate inspections.

Your rights

You can request access to, or correction of, your personal information. See our Privacy Policy or contact privacy@roofhero.com.au.

Data security and retention

We use MFA, RBAC, encryption and other controls to protect personal information. We keep it only as long as needed for the purposes above or as required by law, then securely delete or de‑identify it.