Data Protection Notice

In compliance with the Data Privacy Act of 2012, CJ Roofing (the “Company”) issues this Personal Data Protection Notice (“Notice”). This Notice outlines our practices and procedures in collecting, processing, and storing personal data about you when you engage with our services, including but not limited to requesting a quote, entering into a contract, accessing our website, or participating in company-related activities. This Notice may be updated from time to time without prior notice to reflect changes in regulations or business practices.

1. Collection of Personal Data

In the normal course of business, the Company may request that you provide certain personal information so that we can deliver services or fulfill transactions with you. The information we may collect includes, but is not limited to:

• Full name

• Mailing address and contact details (email address, phone number)

• Occupation, employer or business information

• Other relevant details needed to fulfill service requests or provide a better customer experience

We may also collect information about authorized representatives, co-applicants, or other persons you permit to transact with us on your behalf.

2. Use and Processing of Personal Data

The Company may use and process your personal data to:

• Provide products, services, or quotations requested by you

• Process service agreements, contracts, and project requirements

• Communicate updates, promotions, discounts, or offers related to our services

• Invite you to participate in events, marketing activities, or surveys

• Comply with applicable laws, regulations, and reporting obligations

Your personal data will never be used or processed for purposes contrary to law, morals, or public policy.

3. Sharing of Personal Data

The Company may share personal data with:

• Subsidiaries, affiliates, or business partners to provide you with seamless service

• Contractors, vendors, consultants, and marketing partners who require such information to perform tasks on our behalf

• Government agencies or regulators, where disclosure is required by law

Any sharing of personal data will be governed by appropriate agreements to ensure your data is protected.

4. Storage and Protection of Personal Data

The Company employs reasonable safeguards to protect the personal data it collects. These include:

• Secure storage of documents containing personal data

• Limited access to systems, restricted only to authorized personnel

• Use of data encryption and Secure Socket Layer (SSL) technology for sensitive transactions

• Regular system checks and malware scanning to protect against vulnerabilities

While no system is entirely immune to unauthorized access, the Company is committed to continuously improving its safeguards in line with best practices and legal requirements.

5. Use of Cookies

When you visit our website, cookies may be used to improve your browsing experience. Cookies are small files placed on your device that allow us to recognize your browser and remember certain preferences. We use cookies to:

• Understand your usage of our website and improve site functionality

• Save your preferences for future visits

• Collect aggregate data on site traffic and interactions to enhance user experience

You may manage cookie preferences through your browser settings. However, disabling cookies may affect certain features of our site.

6. Your Rights under the Data Privacy Act

As a data subject, you are entitled to the following rights under the law:

• Right to be Informed – To know how your data is collected, processed, and used

• Right to Object – To refuse processing of your data for certain purposes

• Right to Access – To request reasonable access to your personal data

• Right to Rectification – To correct or update inaccuracies in your personal data

• Right to Erasure or Blocking – To request the suspension, withdrawal, or removal of your personal data, subject to legal and contractual obligations

• Right to Data Portability – To obtain a copy of your data in a structured and commonly used format

• Right to Damages – To be indemnified if you suffer harm due to inaccurate, unlawfully obtained, or unauthorized use of your personal data