1. Introduction & Controller Information

Mel's Roofing Inc. ("we," "us," "our," or the "Company") operates the website melssroofing.com (the "Website"). We are committed to protecting your privacy and ensuring that your personal data is collected, handled, and safeguarded in strict accordance with all applicable privacy regulations. Mel's Roofing Inc. acts as the primary data controller for any personal information collected through our online operations.

This Privacy Policy outlines how we process personal data collected from visitors to our website, ensuring full transparency under the California Invasion of Privacy Act (CIPA), the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"), and the European Union General Data Protection Regulation ("GDPR") for any international visitors.

• Business Entity: Mel's Roofing Inc.

• Location: Livermore, California

• Contact Email: privacy@melssroofing.com

​

2. Strict Prior Consent (Opt-In) for Tracking

We strictly adhere to a zero-tracking default architecture to safeguard your privacy rights and prevent unlawful interception or monitoring of communications under California and European frameworks.

Mandatory Consent Disclosure (Usercentrics): Our Website utilizes the Usercentrics Consent Management Platform (CMP) to govern cookie and tracking script execution. Absolutely no marketing, analytics, conversion pixel, optimization, or third-party tracking scripts or cookies are deployed, executed, or read upon initial page load (first-load).

All such data-gathering scripts remain permanently blocked and disabled by default until you affirmatively grant your explicit, unambiguous opt-in consent through our Cookie Banner. We do not engage in "passive consent" models; continuing to browse, scroll, or navigate our Website does not constitute approval or activate tracking.

​

3. Third-Party Services & Trackers Disclosed

Subject to your explicit prior opt-in consent, our Website may deploy the following specific third-party analytics and marketing tools. Each platform handles your data strictly under the parameters described below:

• Meta (Facebook) Pixel: Used for marketing, conversion tracking, and custom audience building. It fires strictly after explicit marketing cookie consent is granted. In full compliance with data minimization practices, Automatic Advanced Matching is completely disabled by default to prevent unauthorized sharing of unhashed identifiers or off-site personal data.

• Google Analytics 4: Used for behavioral analysis, traffic performance, and interaction metrics. It collects anonymized website interaction data for statistical reporting. IP addresses are masked automatically, and individual demographic identifiers are restricted to ensure generalized statistical utility without identifying specific users.

• WhatConverts: Used for marketing attribution and inbound lead capture. This platform tracks traffic source URLs, specific referrers, and form submissions to help us map our advertising return on investment. This processing is strictly gated behind your affirmative consent; no tracking identifiers are processed on first load.

• Ahrefs Web Analytics: Used for Search Engine Optimization (SEO) performance analysis and traffic measurement. It measures aggregated traffic levels, keyword trends, and navigation performance to enhance Website technical efficiency. No persistent user profiling is established without your deliberate selection.

​

4. User Interaction & Click Tracking

To measure the efficiency of our digital customer service channels, our Website embeds telemetry scripts that monitor specific interaction and click events on our public contact interfaces. This includes clicking on:

• Telephone links (e.g., clickable "tel:" phone numbers)

• Direct email hyperlinks (e.g., "mailto:" references)

• WhatsApp dynamic routing and chat initiation buttons

This event tracking registers micro-conversions (verifying that a user attempted to contact us) and transmits the interaction state to our analytics suites. Crucially, this interaction monitoring is fully bound to the user's explicit marketing and performance cookie preferences. If you decline consent or do not interact with the Usercentrics banner, click tracking functionality remains entirely suppressed, and no off-site transmission occurs.

​

5. California Privacy Rights (CCPA/CPRA & CIPA)

This section applies traffic-exclusively to residents of the State of California. Under the CCPA/CPRA and CIPA frameworks, consumers possess specific structural rights regarding their personal data.

​

Summary of Consumer Rights

• Right to Know / Access: You have the right to request disclosure of the specific categories and pieces of personal information we have collected about you, the sources from which they were obtained, and the business purposes behind the collection.

• Right to Delete: You have the right to request the deletion of your personal information collected or maintained by us, subject to specific legal exceptions (e.g., maintaining data to fulfill service obligations, legal defenses, or regulatory compliance).

• Right to Correct: You have the right to request that we correct any inaccurate personal information that we maintain about you.

• Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary profit. However, cross-context behavioral tracking may qualify as "sharing" under California law. Because we utilize an opt-in architecture, we never share your data unless you specifically enable tracking. You retain the right to withdraw that consent at any time.

• Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a lower quality of service should you choose to exercise your statutory privacy rights.

​​

Global Privacy Control (GPC) & Automated Signals

We respect automated, browser-level privacy signals. If our systems detect that your browser transmits a recognized Global Privacy Control (GPC) or "Do Not Track" signal, our underlying integration with the Usercentrics CMP interprets this as a definitive refusal of tracking. We will completely suppress marketing and analytics trackers automatically for that session, treating the signal as a valid CCPA/CPRA opt-out/non-consent command.

​

Exercising Your Rights

To submit a verified CCPA/CPRA request to know, delete, or correct, please contact our privacy compliance team using the verification channels detailed in Section 6 below. We will acknowledge your request within 10 business days and provide a substantive response within 45 calendar days, verifying your identity through comparative data match mechanisms prior to fulfilling any data access or erasure request.

​

6. Data Retention and Contact Information

Mel's Roofing Inc. retains collected personal information only for the minimum duration necessary to satisfy the business or operational purposes for which it was gathered (such as scheduling roofing estimates, following up on customer service inquiries, or defending legal claims), or as mandated by statutory California record retention requirements.

If you have any questions about this Privacy Policy, your rights under California or international data protection laws, or wish to exercise your right to access, correction, or deletion, please submit your request to our designated privacy representative:

Mel's Roofing Inc.

Attn: Privacy Compliance Department

Livermore, California

Email: privacy@melssroofing.com