Privacy and data use
Privacy Policy
Effective 2026-08-23. Last updated 2026-08-23.
Who operates this site
Space Coast Metal Roofing is operated by Brian Higdon, sole proprietor. It publishes metal-roofing planning information and accepts requests for review by the site owner. It is not a contractor, does not perform or supervise construction, and does not automatically route requests to contractors. A response or introduction is not guaranteed.
Information collected
The owner-review form collects your name, email address, optional phone number, property city or ZIP code, selected project topic and message. It also records the exact consent version and wording, source page, submission time, request identifier and bounded notification outcome metadata. Please do not submit insurance policy numbers, payment information, government identifiers, medical information or other sensitive records.
The site uses no marketing analytics, advertising pixels, session recording, chat widget or cross-site tracking. Cloudflare Web Analytics automatic browser monitoring is disabled, and the site does not send form-start, button-click or submission-attempt telemetry. Cloudflare Bot Fight Mode is disabled and adds no separate browser challenge outside the owner-review form. The site sets no marketing cookie.
Persisted Cloudflare Workers Logs, invocation logs and traces are disabled for this Worker, so the application does not create a retained Worker log of request headers or visitor fields. Cloudflare still processes network addresses and security signals while hosting and protecting the site and providing Turnstile.
Cloudflare Turnstile verification
The form loads Cloudflare Turnstile to distinguish people from automated abuse. Turnstile processes browser and network security signals and returns a short-lived token. When you submit, this site's Worker sends that token and, when available, the network address observed by Cloudflare to Cloudflare Siteverify for server-side verification. The Worker requires a successful result for the exact production hostname and form action before it stores the request or attempts email. It does not send your name, email, optional phone, property location or project details to Siteverify.
The request and consent record
After server-side verification succeeds, the Worker writes an immutable request and consent receipt to this property's dedicated private Cloudflare R2 bucket before attempting email. The receipt contains the validated fields, exact consent wording and version, verification hostname and action, date and time, source page path and, when Cloudflare supplies a client address, a one-way salted hash of it. The application does not store the raw IP address or Turnstile token in R2, email or persisted Worker logs.
The salt belongs only to this property, so the hash is not designed for comparing visitors across properties. The receipt preserves the request and exact wording accepted if a question later arises.
How information is used and shared
The site owner receives a fixed notification sent only from noreply@spacecoastmetalroofing.com to this property's contact@spacecoastmetalroofing.com Microsoft 365 mailbox. Cloudflare's acceptance of that notification is not proof that it reached the inbox.
Cloudflare hosts the standalone site and Worker, performs Turnstile verification, stores the private R2 receipt and accepts the property notification for delivery. An independent contractor receives information only if the owner later reviews the request and chooses to offer a human introduction. Requests are not automatically forwarded or routed. Information is not sold or rented, combined with another property's leads, or placed into a general marketing list.
Storage, retention and delivery status
The R2 request and consent receipt, along with bounded notification outcome metadata, is immutable and object-locked for 1,825 days (five years), so it cannot be changed or deleted during that period, including in response to a deletion request. A lifecycle rule schedules expiration after 1,825 days. Cloudflare may complete physical deletion shortly after the expiration date rather than at the exact second. This R2 schedule is separate from Microsoft 365 mailbox retention.
Email, calls and texts
By ticking the consent box you agree that Space Coast Metal Roofing may email you about the request. If you voluntarily provide a phone number, you also agree that Space Coast Metal Roofing may use it for an ordinary person-to-person call or text about the request. Consent is not a condition of purchase. Reply STOP to a text or email contact@spacecoastmetalroofing.com to withdraw permission. If the owner already offered an introduction, contact that independent business separately about its records and communications.
Failure behavior
The confirmation page is shown only after the verified request has been stored and Cloudflare has accepted the owner notification for email delivery. That acceptance does not confirm inbox delivery. A secondary delivery-audit marker is best-effort; its failure does not ask you to submit a duplicate request. Automated spam submissions may receive the same generic success response without being stored, verified or delivered.
Your choices
To ask what is held, correct a request, withdraw consent or request deletion, email contact@spacecoastmetalroofing.com. Identity may need to be verified before records are disclosed or mailbox copies are deleted. A response will identify what was deleted and explain anything that must remain under a legal, contractual or technical retention control.
Children
This site is intended for property owners and is not directed to children under 18.
Changes and contact
This policy will be updated before collection or delivery behavior materially changes. The effective date above identifies the current version. Questions, consent withdrawals and deletion requests may be sent to Brian Higdon, sole proprietor at contact@spacecoastmetalroofing.com.