Privacy Policy

1. Who We Are

Kwest Contracting LLC is a limited liability company that designs, installs, repairs and maintains cedar shingle roofing and other exterior carpentry for homes and small commercial buildings. The business is managed by KWest Contracting and operates from a working shingle yard where stock is stacked, repairs are cut and the following day is planned.

The registered and postal address of the business is 2519 N Wildwood Ln, Heber City - 84032-6111, United States (US). The contact email address is estimates@kwestcontracting.lol and the contact telephone number is +12726425479. These details appear on every page of this website so that any person who needs to ask a privacy question can reach a real person at the yard without searching for a hidden footer link.

For the purposes of applicable privacy law, Kwest Contracting LLC is the controller of the personal information described in this policy. The business is small by design: the same people who answer the telephone also walk the roof, write the estimate and close the job at the end of the week. That means a request about personal information does not travel through an anonymous support queue.

2. Scope of This Policy

This policy covers personal information collected through the website at kwestcontracting.lol, through email sent to estimates@kwestcontracting.lol, through telephone calls to +12726425479, through written estimates and contracts, and through the practical conduct of roofing, gutter, deck, siding, ice dam and inspection work. It applies to information supplied by homeowners, tenants, property managers, real estate professionals, insurers, subcontractors, material suppliers and any other person who chooses to contact the business.

The policy does not cover information that is collected by other companies or by services that are not operated by Kwest Contracting LLC, even where this website links to them or mentions them. Where a third party handles information for its own purposes, that party is responsible for its own policy, and the visitor should review it separately.

Nothing in this policy limits the rights that a person holds under applicable law, and nothing in it creates an obligation for the business to collect information that it does not need. The policy is descriptive of ordinary practice rather than a promise to process data for purposes that are not described here.

3. Information We Collect

The business collects the minimum amount of information required to answer a question, prepare an estimate, carry out a job and keep lawful records. The categories below describe what may be collected, though not every category is collected from every person.

3.1 Identity and contact details

This includes a name, email address, telephone number, postal address of the property that is the subject of the enquiry, and the mailing address where an invoice should be sent. Where a person acts for a company, a partnership or a trust, the business may also record the name of the organisation, the role of the individual and any authority to approve work.

3.2 Enquiry and project details

This includes the subject of a message, a description of the roof or exterior problem, the age and type of the building, the material of the existing covering, the size of the areas to be worked, access notes, the presence of pets, and any preferences about timing or budget. Photographs supplied by a customer are treated as part of the project record. Photographs taken by the crew during an inspection or during the work are also treated as project records, and they normally show the building rather than identifiable persons.

3.3 Commercial and financial records

This includes written estimates, accepted scopes, change orders, invoices, payment status, the last four digits of a payment instrument where a receipt is issued, and correspondence about sums due. The business does not store full card numbers and does not ask customers to send card details by email or through the website.

3.4 Site and technical information

This includes the internet protocol address that requests a page, the type of browser and operating system, the pages viewed, the referring page and the time of the request, as recorded in ordinary server logs. Technical information is used to keep the website available and secure and to understand which pages are useful to visitors.

3.5 Correspondence and call notes

This includes emails, messages sent through the contact form, notes taken during telephone calls and messages left on voicemail. Call notes are kept short and factual, and they record what was agreed rather than personal opinions about a customer.

4. How We Collect Information

Most information is provided directly by the person who contacts the business. A visitor may fill in the contact form on the contact page, which prepares a message in the visitor email program and sends it to estimates@kwestcontracting.lol. A visitor may also telephone +12726425479, write an email, or speak to the crew when they visit a property for an estimate or a repair.

Some information is created during the job. A crew member may record measurements, note a product code, photograph a flashing detail, or write the date on which a course was completed. This information is part of the project record and is used to plan the next visit, to honour a warranty question, and to keep the building safe over time.

A small amount of technical information is collected automatically by the web server when a page is requested. This is ordinary hosting practice and does not identify a person by name. The business does not attempt to combine server logs with customer records, and it does not use the logs to build profiles of individual visitors.

The business may receive information from a third party where a customer asks a property manager, an insurer or a real estate agent to arrange an estimate on their behalf. In that case the business records the source of the referral so that the enquiry can be traced and the right person can be kept informed.

5. Why We Use Personal Information

Personal information is used to answer enquiries, prepare written estimates, schedule site visits, order materials, carry out roofing and carpentry work, invoice for completed work, arrange delivery and removal, and provide follow up support where a customer reports a problem after the crew has left. Without a name, a telephone number and an address, the business could not conduct any of these activities.

Information is also used to keep the business running properly: to maintain accounting and tax records, to manage insurance claims and warranty questions, to resolve a complaint fairly, to protect the property and equipment of the business, and to meet legal obligations that apply to a construction trade. Where a customer has asked for a future inspection or for seasonal maintenance, the contact details are used to offer that service when the season arrives.

Information is not sold, rented or traded to data brokers, advertising networks or list brokers. It is not used to train third party artificial intelligence systems, and it is not combined with commercial databases to create a marketing profile. The business has no interest in knowing more about a customer than the job requires.

6. Legal Bases for Processing

Where the law requires a defined legal basis, the business relies on one or more of the following. Performance of a contract covers the planning and delivery of roofing or carpentry work and the handling of payment. Compliance with a legal obligation covers accounting records, tax filings and records that a trade must keep under local building and safety rules.

Legitimate interests covers the day to day running of a small business: answering an enquiry that has been sent voluntarily, protecting the website from abuse, keeping the yard and job sites safe, and resolving disputes with a complete record. Where the business relies on legitimate interests, it balances those interests against the rights of the person concerned and stops processing if a person objects and there is no overriding reason to continue.

Consent is used where the law requires it, for example where a person has asked to receive occasional seasonal maintenance reminders and where a photograph of a customer or a customer family is to be published. Consent can be withdrawn at any time by writing to estimates@kwestcontracting.lol, and withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

7. Cookies and Similar Technologies

This website is intentionally simple. It does not load third party advertising scripts, tracking pixels or behavioural analytics suites. Any cookies that are set by the hosting environment are limited to those needed to deliver the page and to keep the site secure, and they are not used to follow a visitor across other websites.

Where a function such as a contact form requires a small amount of browser storage, that storage is used only for the duration of the visit and is cleared when the browser is closed. The website does not place a persistent identifier on a device for marketing purposes, and it does not share identifiers with social media platforms.

A visitor can block or delete cookies through browser settings and can continue to use every page on this site. Blocking cookies may affect some functions of unrelated websites but does not prevent the contact page, the services page or the legal pages from being read. Any future change that introduces a cookie for a new purpose will be described in this policy before the change takes effect.

8. Sharing and Disclosure

Personal information is shared only where there is a practical reason connected to the job. The business may share a name, an address and an access note with a material supplier so that shingles, flashing or gutter stock can be delivered to the right property. It may share scope details with a trusted subcontractor who is helping with a particular trade, and it may share an invoice with an accountant or a bookkeeper who maintains the books.

The business may disclose information where the law requires it, where a court order or a lawful request from a public authority demands it, or where disclosure is needed to establish, exercise or defend a legal claim. It may also disclose information to an insurer or a loss adjuster where an insurance claim relates to the work, and to a mediator or arbitrator where a dispute is being resolved.

If the business is sold, merged or reorganised, customer records may be transferred as part of the business assets. In that case the receiving party would be bound to handle the information in line with this policy, and customers would be notified of any material change before their information was used for a different purpose.

9. Service Providers and Vendors

Like most small companies, the business relies on a handful of service providers. These may include a website host, an email provider, a telephone service, an accounting platform and a payment processor. Each provider receives only the information needed to perform its function, and each is expected to protect that information and to use it only for the service it has been asked to deliver.

The business does not authorise a provider to sell information or to use it for its own marketing. Where a provider is based outside the United States, the transfer is described in the transfer section below. Where a provider suffers a security incident that affects customer information, the business will act on notices received from that provider and will inform affected persons where the law requires it.

Providers are reviewed from time to time. A provider that cannot explain its security practices or that asks for more information than the task requires is not retained. The size of the business makes this review practical, and the owner of the yard is the person who signs off on a new provider.

10. Retention of Records

Records are kept for as long as they are needed for the purpose for which they were created, and then for as long as the law requires. Estimates that do not proceed are normally kept for two years so that a returning customer can be helped without a fresh survey. Project records, including photographs and material notes, are kept for the life of the installation and for a further period so that a warranty question can be answered honestly.

Accounting records, invoices and tax documents are kept for the period required by tax and company law, which is currently seven years for the records that support a return. Correspondence about a complaint is kept until the matter is closed and for a further period in case the complaint is reopened. Server logs are kept for a short period, normally no more than ninety days, unless a security incident requires a longer review.

When a retention period ends, records are deleted or destroyed in a way that prevents reconstruction. Paper records are shredded, and electronic records are removed from active systems and from backups within the ordinary backup cycle. A customer who asks for earlier deletion will be helped where the law allows it, as described in the deletion section below.

11. Security of Information

The business protects information with a set of practical measures suited to a small trade. Access to customer records is limited to the people who need them to quote or deliver work. Devices are protected with passwords and automatic locking, and the accounting platform and email account are protected with strong authentication. Paper records are kept in a locked cabinet at the yard rather than left on a bench.

Staff and crew are briefed on handling addresses, access codes and payment details. A customer gate code is recorded only where it is needed to reach the property and is removed from the active job sheet once the work is complete. Photographs are stored in a project folder rather than on a personal phone gallery, and they are not sent to third parties except as part of that project record.

No system is perfectly secure, and the business does not claim otherwise. If a security incident occurs, the business will contain it, assess the risk to affected persons, notify those persons and any regulator where the law requires it, and record what was learned so that the same weakness is not repeated. Customers are encouraged to report a suspicious email that appears to come from the business, especially one that asks for payment to a new account.

12. Your Privacy Rights

Depending on where a person lives, the law may grant a set of privacy rights. The business extends the same practical treatment to every customer, regardless of residence, because it is easier to do the right thing consistently than to maintain separate processes. The rights described in this section can be exercised by writing to estimates@kwestcontracting.lol or by calling +12726425479.

The rights include the right to be told what information is held, the right to receive a copy, the right to correct an error, the right to ask for deletion where there is no legal reason to keep the record, the right to object to a particular use, and the right not to be treated unfairly for exercising a right. A person may also ask how a decision about them was made where an automated process was involved, though the business does not currently make automated decisions about customers.

A request will be acknowledged promptly and answered within the period required by applicable law, normally within thirty days. Where a request is complex, the business will explain the reason for any extension. To protect customer records, the business may ask for proof of identity before acting on a request, and it will not use the identity check for any other purpose.

13. Access and Correction

A person may ask for a copy of the personal information that the business holds about them. The reply is normally a written summary with the supporting documents attached, and it is provided free of charge for the first request in a twelve month period. A small administrative fee may be charged for a further copy where the law allows it, and the fee will be explained before any work is done.

A person may also ask for an error to be corrected. Common examples include a misspelled name, an old telephone number, a property address that was recorded incorrectly, or a completion date that does not match the invoice. Simple corrections are made within a few days. Where the record is a legal document such as a signed contract, the correction is recorded as a note rather than by altering the original, so that the history remains clear.

If the business cannot correct a record because it is accurate and complete, it will explain why. A person who disagrees may ask for a statement of disagreement to be attached to the record, and that statement will be taken into account the next time the record is used.

14. Deletion and Objection

A person may ask for personal information to be deleted where it is no longer needed for the purpose for which it was collected, where consent has been withdrawn and there is no other legal basis, or where the information has been processed unlawfully. A deletion request is honoured where the law allows it, and the person is told plainly when a record must be kept and why.

Some records cannot be deleted immediately. An invoice that supports a tax return, a contract that is still within its warranty period, and a record of a workplace incident are all examples of information that must be retained for a defined period. Where that applies, the business will delete the record as soon as the retention period ends rather than keeping it indefinitely.

A person may object to processing that relies on legitimate interests, for example processing used for a seasonal maintenance reminder. The business will stop the processing unless it can show compelling grounds that override the objection, and the reasons will be given in writing. Objection to a processing activity that is necessary to deliver a contracted job may mean that the job cannot continue, and the customer will be told before that point is reached.

15. Marketing Choices

The business does not run a bulk marketing programme. A customer may be contacted about a scheduled inspection, a seasonal reminder or a follow up on a completed job, and that contact is limited to the reason it was made. A person who does not want to receive a reminder can say so at any time, and the note is placed on the customer record so that the request is respected.

Any email sent by the business will identify the sender and will include a way to stop future reminders. A request to stop is acted on promptly and without asking for a reason. Opting out of reminders does not affect messages that are necessary to deliver a job, such as a change to a scheduled arrival time or an invoice query.

The business does not buy contact lists, does not send unsolicited commercial email to addresses scraped from other websites, and does not pass customer addresses to a marketing partner. Where a customer is also a supplier or a trade contact, routine business correspondence with that person is not treated as marketing.

16. Privacy for Children

This website is intended for adults who own or manage a property or who are arranging work for someone else. It is not directed at children, and the business does not knowingly collect personal information from a child under the age of sixteen. The contact form does not ask for a date of birth, and no part of the site invites a child to submit information.

Where a parent or guardian believes that a child has sent personal information to the business, they should contact estimates@kwestcontracting.lol or call +12726425479. The information will be checked and deleted promptly unless there is a legal reason to keep it. A parent or guardian may also ask what information is held before deciding whether to request deletion.

Photographs taken at a property occasionally show a child in the background of a garden or a driveway. The business does not publish such photographs, and any image that shows an identifiable child is cropped or discarded when the project record is filed.

17. Third Party Links

This website may link to a supplier, a manufacturer or a public resource where the link is useful to a customer who is choosing a shingle grade or a gutter profile. A link is provided for convenience and does not mean that the business controls the destination or endorses every practice of the operator.

When a visitor follows a link to another website, that website may collect information under its own policy. The visitor should review the policy of the destination before sending personal information. The business is not responsible for the privacy practices of a website it does not operate, and it does not receive information from the destination simply because a link was followed.

Where the business embeds a map or a video from a third party, the embed is configured with the most privacy protective setting that the provider offers. A visitor who prefers not to load the embed can open the same address or title directly in a browser tab.

18. Social Media and Photography

Crew photographs are normally of roofs, flashings and joinery rather than of people. From time to time a customer may offer to let the business show a finished roof on a social media account or on this website. Such a photograph is published only with written permission, and the permission can be withdrawn later by writing to estimates@kwestcontracting.lol.

Where a photograph is published, the business avoids showing a house number, a vehicle plate or any detail that identifies the occupants unless the customer has explicitly agreed. A published photograph is kept in a separate folder so that it can be removed quickly if permission is withdrawn. Removal from the website is normally completed within a few days.

The business does not run a social media pixel on this website, does not embed a tracking button that reports a visitor to a social platform, and does not ask a customer to like or share a post as a condition of service.

19. Site Visits and Property Access

A site visit requires the crew to record a property address, an access arrangement and a contact number for the day of the visit. Where a gate code, a lockbox code or an alarm code is shared, it is recorded on the job sheet, used only to enter the property on the agreed day, and removed when the work is complete. Codes are never written on an estimate or sent in a group message.

Inside a home, the crew may see personal belongings while moving through a hallway to reach an attic hatch. Crew members are instructed to keep attention on the work, to avoid photographing personal spaces, and to report any damage immediately so that it can be recorded honestly. The business does not use body cameras and does not record audio during a visit.

Where a tenant occupies the property and the work has been arranged by a landlord or a property manager, the business relies on the arranging party to obtain any necessary access permission and to inform the tenant of the visit. Contact details for the occupant are used only to arrange the visit and are not added to a marketing list.

20. Data Transfers

The business operates from Heber City, Utah, and customer records are normally stored in the United States. Where a service provider stores data in another country, the transfer is made under a lawful mechanism such as a standard contractual clause or an equivalent arrangement recognised by applicable law.

Before a provider that stores data abroad is adopted, the business checks that the provider offers an appropriate level of protection and that the transfer is limited to what the service requires. A customer who wants to know where a record is stored may ask, and the answer will describe the provider and the country in ordinary language.

Where a transfer would create a risk that cannot be mitigated, the business will use a provider that keeps data in the United States instead. The volume of data held by a roofing business is modest, and a simpler storage arrangement is usually available.

21. State Privacy Notices

Residents of states with a comprehensive privacy law, including California, Colorado, Connecticut, Utah and Virginia, may hold additional rights such as the right to know the categories of information collected, the right to know the categories of sources and recipients, and the right to opt out of a sale or a share. The business does not sell personal information and does not share it for cross context behavioural advertising, so there is no sale or share to opt out of.

A resident may exercise a right by writing to estimates@kwestcontracting.lol with the words Privacy Request in the subject line, or by calling +12726425479. The business will verify the request using information already on file, will respond within the time allowed by the relevant law, and will not discriminate against a person for making a request. Where an authorised agent submits a request, the business may ask for written authority from the person concerned.

Utah residents should note that the business is based in their state and that a request can also be made in person at 2519 N Wildwood Ln, Heber City - 84032-6111, United States (US) during business hours. No fee is charged for a first request, and the response will be provided in a portable format where that is practical.

22. Changes to This Policy

This policy may be updated when a practice changes, when a new service provider is adopted, or when the law requires a different disclosure. The effective date at the top of the page is changed whenever the policy is revised, and a material change is summarised at the start of the revised text so that a returning reader can see what is different.

Where a change affects how information collected in the past will be used, the business will contact affected customers before the new use begins unless the change is required by law. A customer who does not agree with the new use may ask for the information to be deleted where there is no legal reason to keep it.

Previous versions of this policy are kept with the company records for as long as the records are required, so that a person can ask which version applied at the time their information was collected. The business does not rewrite an old version to match new practice.

23. Complaints and Escalation

A person who is unhappy with how information has been handled should raise the matter with the business first. A clear description of the concern, with any relevant dates and documents, allows the matter to be investigated quickly. The business will acknowledge the complaint, explain what it has found, and say what it will do to put things right.

Where a complaint cannot be resolved directly, a person may have the right to complain to a privacy regulator in their state or country. The business will cooperate with a regulator and will provide the records needed to answer a lawful request. Raising a complaint does not affect any other right that a person may hold.

The business keeps a short log of privacy complaints and the action taken. The log is reviewed each year so that a repeated issue, such as an unclear form field or an overlong retention period, can be corrected before it affects another customer.

24. How to Contact Us

Questions about this policy, requests to access or correct information, and notices about a security concern should be sent to the shingle yard. Written requests are preferred because they create a clear record, but a telephone call is welcome where that is easier.

The business aims to reply to a privacy question within five working days and to complete a formal request within the period required by law. If a request arrives during a storm response week, the acknowledgement may be slower, but the request will not be forgotten.

This policy is published for KWest Contracting and for Kwest Contracting LLC, and it is reviewed each year alongside the written scopes and the safety briefing that the crew receives before the season begins. Thank you for taking the time to read it.