Legal
Privacy policy.
What we collect, why we collect it, and how to make us delete it. Written in plain English, because a privacy policy nobody can read is not a privacy policy.
Last updated: October 24, 2026
This policy covers tinroofdigital.com, operated by Tin Roof Digital, Three Rivers, Michigan. If you have a question about anything here, email sam@tinroofdigital.com or call 574.350.9712 and you will reach Sam directly.
What we collect
There are only two ways we get information from you.
You give it to us. When you request an X-Ray or send a message through the contact form, we collect your business name, email address, website address if supplied, your mobile number if you choose to give it, and whatever you type into the message field. Business name and email are required to send an inquiry; your town is also required for the X-Ray. You choose whether to submit a form. None of it is required to browse the site.
Your browser sends it automatically. Like almost every website, ours records standard analytics: pages viewed, how long you stayed, what you clicked, the referring site, approximate location at the city level, device type, and browser. This is collected through Google Analytics, loaded by Google Tag Manager. Our form conversion events do not include your email, business name, website address, or message.
What we do with it
- Answer you. If you request an X-Ray, we use your business name and town to actually perform the review, and your email to send it back.
- Follow up. We use the details you provide to reply about your request. Submitting a form does not add you to a mailing list. You can tell us to stop contacting you at any time.
- Improve the site. Analytics tell us which pages are useful and which are not.
Text messages
Some of our forms have a box that says "Text me when it's ready." If you check it and give us your mobile number, you agree to receive text messages from Tin Roof Digital at that number, including updates about your request, tips and occasional offers. Checking the box is optional and is never a condition of any purchase.
- Message frequency varies, up to 8 messages per month.
- Message and data rates may apply.
- Reply STOP to any text and we will stop texting you.
- Reply HELP for help, or contact Sam at sam@tinroofdigital.com or 574.350.9712.
- Carriers are not liable for delayed or undelivered messages.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party, and are excluded from every other kind of sharing described in this policy. The only outside company that handles your number is our texting provider, and only to deliver our messages to you.
We do not sell your information. We do not rent it, trade it, or hand it to a data broker.
Who else sees it
We use a small number of established vendors to run the business. Each one only receives what it needs to do its job.
| Service | What it handles | What it receives |
|---|---|---|
| Netlify | Website hosting, spam filtering, form storage, and submission notifications | Standard server logs, submitted form fields, and campaign attribution details when available |
| Google Analytics and Google Tag Manager | Traffic measurement | Usage and conversion-event data, no form contents |
| Google Ads | Measure whether advertising results in a successful inquiry | Advertising click identifiers when available, browser and page information, a generated submission ID, and non-personal form/service categories. No submitted contact details or message contents. |
| Email provider | Sending and receiving our email | Your email address and our correspondence |
| Quo | Sending and receiving our text messages, only if you opted in | Your mobile number and our text conversation. Never used or shared for anyone else's marketing. |
We may also disclose information if we are legally required to, for example in response to a valid subpoena or court order. If that ever happens and we are permitted to tell you, we will.
Cookies
Google Analytics and Google Ads may use cookies to measure site usage and advertising conversions. Google Ads conversion linking may store advertising click information in first-party cookies. The site also uses browser session storage to remember campaign parameters and advertising click identifiers when present, so a submitted inquiry can retain its campaign source. A new tagged campaign visit replaces the previously stored campaign bundle. Form submissions include available attribution and the page path, but our conversion events do not include form contents. We do not enable enhanced conversions that send hashed contact details.
You can block or delete cookies in your browser settings. The site will still work. Our analytics will simply not count you, which is fine.
How long we keep it
Contact records stay in our system until you ask us to remove them, or until they have been inactive for three years, whichever comes first. Analytics data is retained on Google's standard schedule. If you asked for an X-Ray and never became a client, and you would rather we did not keep your details, just say so and we will delete them.
Your rights
Regardless of where you live, you can ask us to do any of the following and we will do it within 30 days at no cost.
If you are a California resident, the California Consumer Privacy Act gives you these rights formally, plus the right not to be discriminated against for exercising them. We do not sell personal information, so there is nothing for you to opt out of on that front. If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you equivalent rights, and our lawful basis for processing your information is your consent, given when you submit a form, and our legitimate interest in operating and measuring a website.
To exercise any of these, email sam@tinroofdigital.com with the subject line "Privacy request". We do not require you to create an account or jump through a portal.
Children
This site is for business owners. It is not directed at anyone under 16 and we do not knowingly collect information from children. If you believe a child has submitted information to us, contact us and we will delete it.
Security
Your form submissions travel over an encrypted connection and are stored with the vendors listed above, all of whom maintain their own security programs. No system is perfectly secure and we will not pretend otherwise. We keep the amount of information we hold deliberately small, which is the most effective protection available to a business our size.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top. Material changes will be described here rather than quietly swapped in.
Contact
Looking for something else? Start with what we actually do, read how working together works, or just get in touch.