Privacy Policy

GREENAWAY ROOFING LIMITED, trading as Eaveline, is the data controller for personal data collected through greeroof.shop.

Registered office: 8 The Holdings Longcroft, FK4 1SZ, United Kingdom. Contact: support@greeroof.shop, +44 7202274182.

For any privacy request, email us with “Privacy” in the subject line.

• Order and delivery data: name, email, phone, delivery address, city, postal code and country, and the items you buy.
• Account and membership data: membership tier, subscription status and renewal dates.
• Support and enquiry data: messages you send through the contact, wholesale-inquiry, order-tracking and support forms.
• Payment data: handled by Stripe. We receive confirmation of payment and limited details (such as card brand and last four digits); we never receive or store your full card number.
• Technical data: essential cookies and standard server logs (IP address, browser type) needed to run the site securely.

Directly from you when you check out, subscribe, create an account or contact us; automatically from your device for essential site operation; and from our payment processor (Stripe) when you complete a payment.

• To fulfil your order — process payment, arrange delivery and handle returns (performance of a contract).
• To manage membership — billing, renewals and member benefits (performance of a contract).
• To provide support — answer enquiries and order-status requests (legitimate interests and contract).
• To retain checkout leads — where you enter details but do not complete payment, so we can follow up (legitimate interests; you may object at any time).
• To meet legal duties — tax, accounting and consumer-law records (legal obligation).
• To keep the site secure — prevent fraud and abuse (legitimate interests).

Where we rely on consent (for example non-essential communications), you can withdraw it at any time.

We share personal data only with processors that help us run the store, under contract and only as needed:

• Payment: Stripe (payment processing and fraud prevention).
• Hosting: Vercel (website hosting and delivery).
• Database and storage: Supabase (order, lead and account records).
• Delivery: the postal and courier carriers who ship your order.
• Email: our email provider for confirmations and support replies.

We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.

We ship worldwide, so your delivery details may be processed in the country of delivery. Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision.

• Order and transaction records: kept as long as needed to fulfil the order and to meet tax and accounting duties (generally up to 6–7 years).
• Checkout and enquiry leads that do not become orders: up to 24 months, then deleted or anonymised.
• Support correspondence: up to 24 months after your query is resolved.

You have the right to access, correct, delete or restrict your data, to object to processing based on legitimate interests, to data portability, and to withdraw consent. To exercise any right, email support@greeroof.shop. We respond within one month.

If you are in the UK you may complain to the Information Commissioner's Office (ICO). If you are in the EEA you may complain to your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioural advertising. To make a request, email support@greeroof.shop. We will not discriminate against you for exercising these rights.

We use essential cookies to keep your cart and session working. We keep cookie use to a minimum and do not store long-term marketing cookies without consent. See our Cookie Policy for details.

We do not make solely automated decisions that produce legal effects about you. Our store is intended for adults: children under 13 may not register or order, and those aged 13–17 must have a parent or guardian's consent. We do not knowingly collect data from children under 13; if you believe we have, contact us and we will delete it.

We use encryption in transit (HTTPS), access controls and reputable processors. Payment card data is handled entirely by Stripe on PCI-DSS-compliant infrastructure. No method of transmission is completely secure, but we take reasonable steps to protect your data.

Questions or requests: support@greeroof.shop or write to us at the registered office above. We may update this policy; the “last updated” date shows the current version.