Legal
Privacy policy.
What we collect, why we collect it, and how to make us delete it. Written in plain English, because a privacy policy nobody can read is not a privacy policy.
Last updated: August 8, 2026
This policy covers tinroofdigital.com, operated by Tin Roof Digital, Three Rivers, Michigan. If you have a question about anything here, email sam@tinroofdigital.com or call 574-350-9712 and you will reach Sam directly.
What we collect
There are only two ways we get information from you.
You give it to us. When you request a Website Report Card or send a message through the contact form, we collect your name, email address, phone number, business name, website address, and whatever you type into the message field. On the Report Card form we also ask for an approximate annual revenue range. All of it is optional in the sense that you are choosing to send it. None of it is required to browse the site.
Your browser sends it automatically. Like almost every website, ours records standard analytics: pages viewed, how long you stayed, what you clicked, the referring site, approximate location at the city level, device type, and browser. This is collected through Google Analytics, loaded by Google Tag Manager. It is not tied to your name unless you have also submitted a form.
What we do with it
- Answer you. If you request a Report Card, we use your website address and business details to actually perform the review, and your email to send it back.
- Follow up. If you have given us your contact details, we may email or call you about your request. You can tell us to stop at any time and we will.
- Improve the site. Analytics tell us which pages are useful and which are not.
We do not sell your information. We do not rent it, trade it, or hand it to a data broker.
Who else sees it
We use a small number of established vendors to run the business. Each one only receives what it needs to do its job.
| Service | What it handles | What it receives |
|---|---|---|
| Shopify | Website hosting and infrastructure | Standard server logs and traffic data |
| HubSpot | Contact records and form submissions | Everything you type into a form on this site |
| Google Analytics and Google Tag Manager | Traffic measurement | Anonymous usage data, no form contents |
| Email provider | Sending and receiving our email | Your email address and our correspondence |
We may also disclose information if we are legally required to, for example in response to a valid subpoena or court order. If that ever happens and we are permitted to tell you, we will.
Cookies
This site uses cookies for two purposes: keeping the site working correctly, and measuring traffic through Google Analytics. HubSpot also sets a cookie so that if you submit a form we can connect it to the pages you visited beforehand.
You can block or delete cookies in your browser settings. The site will still work. Our analytics will simply not count you, which is fine.
How long we keep it
Contact records stay in our system until you ask us to remove them, or until they have been inactive for three years, whichever comes first. Analytics data is retained on Google's standard schedule. If you asked for a Report Card and never became a client, and you would rather we did not keep your details, just say so and we will delete them.
Your rights
Regardless of where you live, you can ask us to do any of the following and we will do it within 30 days at no cost.
If you are a California resident, the California Consumer Privacy Act gives you these rights formally, plus the right not to be discriminated against for exercising them. We do not sell personal information, so there is nothing for you to opt out of on that front. If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation gives you equivalent rights, and our lawful basis for processing your information is your consent, given when you submit a form, and our legitimate interest in operating and measuring a website.
To exercise any of these, email sam@tinroofdigital.com with the subject line "Privacy request". We do not require you to create an account or jump through a portal.
Children
This site is for business owners. It is not directed at anyone under 16 and we do not knowingly collect information from children. If you believe a child has submitted information to us, contact us and we will delete it.
Security
Your form submissions travel over an encrypted connection and are stored with the vendors listed above, all of whom maintain their own security programs. No system is perfectly secure and we will not pretend otherwise. We keep the amount of information we hold deliberately small, which is the most effective protection available to a business our size.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top. Material changes will be described here rather than quietly swapped in.
Contact
Looking for something else? Start with what we actually do, read how working together works, or just get in touch.