Privacy policy
Last updated 22 August 2026.
This is a one-person business and this is a short policy, because there is not much to say. I do not run an advertising operation and I do not have anything to gain from collecting more about you than I need to do the work.
There are no cookies, no third-party scripts, no advertising trackers and no cross-site tracking of any kind on this website. Nothing here is shared with an analytics company, because there is no analytics company involved.
There is one thing, and I would rather write it down than leave it implied: this page tells my own server that a page was viewed. What gets written down is the time, which page, and — if you arrived from a referral link — the referral code in the link. That is the whole record. It contains no IP address, no browser or device details, no location and nothing that names or numbers you.
So that one person reloading twice is not counted twice, my server briefly computes a one-way hash of your IP address and browser string mixed with a secret it keeps and with the current hour. The hash is stored on its own, as a tick mark with no information attached, and it is deleted within the hour. It is not reversible — not by an advertiser, not by anyone who obtained it, and not by me. It is never attached to the view it de-duplicated, so there is nothing to join it back to.
I count page views for one reason: to know whether anybody reads this page before I spend more time on it. If that stops being true, this section changes with it.
What I collect, and when
- Public business information. Before I email a roofing company I look at information that is already public about that business — its listing, its website if it has one, its public reviews, its published phone number. This is information about a business, gathered from places anyone can look.
- What you send me. If you email or reply to me, I have your email and whatever you wrote, in my mailbox, like any other correspondence.
- Payment details — handled by Stripe, not by me. If you subscribe, the card is entered on Stripe's own checkout. Card numbers never reach my systems and I never see them. I see what Stripe shows a merchant: that a payment succeeded, the business name and the billing email.
- Service data, if you become a customer. To run missed-call text-back I necessarily handle the phone numbers of people who call you and the messages they exchange with your business. That data is yours. I use it to deliver leads to you and for nothing else.
- A count of page views. When this page loads, my own server records the time, which page, and the referral code if you followed a referral link — and nothing else. See the box at the top for exactly what happens to the short-lived, one-way hash that stops a reload being counted twice.
What I do not do
- I do not sell, rent or share your data, or your callers' data, with anyone.
- I do not use your data or your callers' data to advertise to anybody.
- I do not build a profile of you across other websites. I could not — there is no cookie and no cross-site tracker here to do it with, and the page-view count keeps nothing that would let one view be linked to another.
- I do not use a third-party analytics service. The page-view count is my own server writing to my own store; no other company is handed the fact that you were here.
Your callers' privacy
When someone calls you and you miss it, they get one text message, in your business's name, in wording you approved before it went live. It tells them how to stop. If they reply STOP they are suppressed immediately and permanently, and you are told to call them back yourself so the lead is not lost. There is no follow-up sequence and no marketing list — their number is used to answer their own call and for nothing else.
Mobile information, and the SMS programme
One text message programme runs under this business: missed-call text-back. It has no sign-up form, because there is nothing to sign up to. A person becomes part of it by dialling a business's published phone number and not being answered — that call is the consent, and it is the only way in. Numbers are never uploaded, bought, imported or messaged because they appeared on a list somewhere.
This business's own published number is (972) 823-5419, shown on the home page. Calling it is how you join this programme, and it is the only way to.
- Message frequency. One message per missed call, and never more than one message to the same caller in any 12-hour period. There is no recurring campaign, no drip and no follow-up sequence — the system has nowhere to put one.
- Content. The message names the business, says the call was missed, and invites a reply. It carries no price, no offer and no link; the sending code refuses a message body containing a URL.
- Stopping it. Reply STOP and messages end immediately and permanently. Words people actually type are honoured too — STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, OPTOUT, OPT OUT, REMOVE, NO MORE and LEAVE ME ALONE. Reply START to resume. Reply HELP for help.
- Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
Mobile information, opt-in data and messaging consent are never shared, sold, rented or otherwise provided to third parties or affiliates for marketing or promotional purposes. No category of this data is shared with anyone for those purposes, ever.
The one place a caller's number necessarily goes is Twilio, the licensed carrier gateway that actually delivers the message, and the roofing business the caller rang — who is told the number so they can call back. Both are the delivery of the message the caller asked for by calling. Neither is marketing, and neither party is permitted to use the number for it.
Email, and how to stop it
Cold emails I send are commercial messages and they say so. Every one carries a real postal address, a working unsubscribe link, and a STOP instruction. Either route stops everything within 24 hours, permanently, with no reply required from you. Details are on the unsubscribe page.
Suppression is permanent by design: your address is kept on a do-not-contact list precisely so that nothing reaches you again. That is the one case where deleting your record entirely would be the wrong thing to do, because I would lose the record of your having asked.
Getting your data, or having it deleted
Email donny@recoverroofleads.com and ask. If you are a customer, you get an export of your leads and your data — on cancellation you get one automatically, and you keep your phone number. If you want your information deleted, say so and I will delete it, other than anything I am required to keep (payment records for tax purposes, and the suppression entry above).
Security, stated honestly
Payments run through Stripe, a PCI-compliant processor, so the most sensitive data in this business never touches my systems. Everything else lives in a small number of accounts with multi-factor authentication turned on. I am not going to claim a certification I do not have: this is a one-person operation, not an enterprise security programme, and you should weigh that like you would with any small supplier.
Changes
If this policy changes materially, the date at the top changes and current customers get an email about it. I will not change it quietly.
Contact
Donny Nguyen — donny@recoverroofleads.com