Privacy Policy

1. Information We Collect:

We may collect the following categories of personal information:

​

1.1 Information You Provide Directly

• Name, email address, phone number

• Property address and project details

• Billing and payment information

• Messages, inquiries, or communication history

• Booking or service request details

Collected when you fill out forms, request services, contact us, or interact with our website.

​​

1.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address

• Browser type and device information

• Pages viewed and time spent on the site

• Cookies and tracking data

This helps us improve website performance, security, and user experience.

​​

1.3 Information from Third Parties

We may receive information from:

• Payment processors

• Scheduling platforms

• File‑delivery services

• Social media platforms (if you interact with us there)​

​

1.4 Sensitive Personal Information (California)

We do not intentionally collect or process sensitive personal information as defined under CPRA.

​​

1.5 GDPR Special Categories

We do not collect special category data (e.g., health, biometric, political, religious, or genetic data).

​​

2. Why We Collect This Information

We collect personal information for purposes including:

• Scheduling and managing appointments

• Delivering digital media products

• Processing payments and invoices

• Communicating project updates or responding to inquiries

• Improving website functionality and user experience

• Maintaining internal records and compliance

• Marketing our services (with opt‑out options available)

We do not sell personal information.

​​

3. Legal Basis for Processing (GDPR)

For individuals in the EU/EEA, we process personal data under the following lawful bases:

• Contract performance – to deliver the services you request

• Legitimate interests – improving services, preventing fraud, operating efficiently

• Consent – for marketing or cookie tracking

• Legal obligation – tax, accounting, or regulatory requirements

​

4. How We Share Information

We may share personal information only when necessary to operate our business, including with:

• Secure digital delivery platforms

• Payment processors

• Website hosting providers

• Customer support tools

• Legal authorities when required by law

We do not share personal information with third parties for their own marketing purposes.

​

5. International Data Transfers (GDPR)

If you access our website from outside the United States, your information may be transferred to and processed in the U.S.

When required, we use appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Secure transfer mechanisms

​

6. Your Privacy Rights

​​

6.1 California Residents (CCPA/CPRA)

You have the right to:

• Know what personal information we collect

• Access your personal information

• Correct inaccurate information

• Delete personal information

• Opt‑out of data sharing (we do not sell data)

• Limit use of sensitive personal information (not applicable)

• Non‑discrimination for exercising privacy rights

​​

6.2 EU/EEA Residents (GDPR)

You have the right to:

• Access your personal data

• Request correction

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

​

6.3 Submitting a Privacy Request

To exercise any of these rights, contact us at:
chris@abovetheroofmedia.com

We may need to verify your identity before we can fulfill your request.

​​​

7. Cookies & Tracking Technologies

Our website may use cookies or similar technologies to:

• Improve website performance

• Analyze traffic

• Personalize user experience

Visitors may disable cookies through browser settings.
EU/EEA visitors may be presented with a cookie consent banner.

​​

8. Minors’ Privacy

We do not knowingly collect personal information from individuals under the age of 18.

If such information is discovered, we will delete it promptly.

Parents or guardians may contact us to request the removal of a minor’s information.

​​​

9. Data Security

We use industry‑standard security measures to protect personal information, including:

• Secure servers

• Encrypted delivery platforms

• Access controls

However, no method of transmission or storage is entirely secure.
We take reasonable steps to safeguard your data, but we cannot guarantee absolute security.

​​​

10. Data Retention

We retain personal information only as long as necessary to:

• Provide services

• Meet legal or financial obligations

• Maintain business records

Digital media files are not stored indefinitely.
Clients are responsible for downloading and backing up delivered files.

​​​

11. Third‑Party Links

Our website may contain links to third‑party websites.
We are not responsible for their privacy practices.
We encourage you to review their privacy policies before providing personal information.

​​​

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically.
The “Last Updated” date reflects the most recent version.

Continued use of our website or services indicates acceptance of any changes.

​​​

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact:

Above the Roof Media
Email: chris@abovetheroofmedia.com