Cookie Policy

1. What are cookies and similar technologies?

• Cookies are small files placed on your device that store settings or identifiers.
  
• Pixels/Tags are small pieces of code that load when you visit a page or open an email.
• Local storage/SDKs are technologies that store or access information on your device or app.

We use these technologies to make the Site work, keep it secure, understand how it’s used, and—if you allow—improve our marketing and measure campaign performance.

2. How we decide when to use cookies

• We use essential cookies without consent, because they are required to run the Site and keep it secure.
  
• We ask for your choice before using non‑essential cookies (analytics, advertising/measurement and certain functional cookies).
• Where cookies or pixels involve personal information, we handle that information in line with our Privacy Policy and Australian Privacy Principles.

3. Your choices

• Cookie banner: On your first visit, we present options to Accept all, Reject non‑essential, or Manage cookies by category.
• Change your mind anytime: You can change or withdraw your consent using the “Manage cookies” link in the Site footer.
• Browser settings: You can also block or delete cookies in your browser.
• If you reject non‑essential cookies, the Site will still work, but some features may be limited.

4. The cookies we use

Notes: The specific cookies and providers may change over time. We keep this list reasonably current, and the Manage cookies panel reflects the latest set.

A) Essential

Required to operate the Site, keep it secure, support load balancing, fraud prevention and privacy preferences. These cannot be switched off.

• Cloudflare security cookies (e.g., __cf_bm, cf_clearance) – bot management and security.
• Consent preference cookies (e.g., cookie_consent_*) – remember your cookie choices.
• Session cookies (e.g., rh_session) – keep you signed in and remember progress.

Typical duration: session to 12 months.

B) Analytics

Help us understand Site usage and improve performance.

• Google Analytics 4 (e.g., _ga, _ga_*, _gid) – distinguish visitors/sessions, measure traffic.

Typical duration: 24 hours to 2 years.

C) Advertising & Measurement

Measure marketing effectiveness, prevent duplicate ads, and—if enabled—build audiences for advertising.

• Meta Pixel (e.g., _fbp) – ad delivery and measurement.
• Google Ads/Conversions (e.g., _gcl_au) – conversion tracking and attribution.

Google Ads/Conversions (e.g., _gcl_au) – conversion tracking and attribution.

D) Functional / Support

Enhance features such as forms, chat or content embeds.

• HubSpot (e.g., hubspotutk, __hssc, __hssrc, __hstc) – forms and CRM integration.

Typical duration: session to 6 months.

5. How we use information from cookies

Depending on your choices, we may:

• Operate the Site, secure it and prevent fraud/abuse (essential).
• Measure traffic, diagnose issues and improve the Site (analytics).
• Measure marketing and understand the effectiveness of our ads (advertising & measurement).
• Personalise content or streamline forms (functional).

If cookies or pixels handle personal information, we use and disclose that information as described in our Privacy Policy at /legal/privacy.

6. Third‑party cookies and international transfers

Some cookies are set by third parties (for example, Google, Meta and HubSpot) when their code runs on our pages. Those providers may process data on servers outside Australia. Where this involves personal information, we take steps consistent with the Privacy Act to manage overseas disclosures. For information about how those providers handle data, please refer to their privacy policies.

7. Do Not Track (DNT)

Some browsers offer a “Do Not Track” (DNT) signal. There is currently no standard for how websites should respond to DNT in Australia. We honour the choices you make in our Manage cookies controls and your browser settings.

8. How long we keep this data

Cookie lifetimes are listed above. Analytics and measurement data are retained only as long as needed for the purposes described (subject to your preferences) and then de‑identified or deleted in accordance with our Privacy Policy.

9. Changes to this policy

We may update this policy to reflect changes to cookies, providers or legal guidance. Material changes will be highlighted on this page and reflected in the Manage cookies panel. The “Last updated” date shows when this policy was most recently revised.

10. Contact us

Questions or requests (including withdrawing consent):

 Email: privacy@roofhero.com.au

We aim to respond promptly and will work with you to resolve any concerns.