Trust & Security
How we protect your information
This page is maintained by MFC Roofing to answer common security and privacy questions about our customer site and internal tools. It describes the controls we have in place today and is not an independent audit or certification.
Access & authentication
Customer portal and staff accounts sign in over an encrypted connection. Staff accounts are scoped by role; sensitive records use row-level authorization so users only see records they own or have been granted access to.
Data in transit & at rest
Traffic to our site and APIs is served over HTTPS. Application data is stored with our managed cloud database and storage provider, which encrypts data at rest using industry-standard mechanisms.
What we collect
We collect the information you submit through quote forms, the chatbot, or the customer portal — typically name, contact details, property address, and details about the work you want done. We use this to contact you, prepare estimates, and deliver the service.
Hosting & subprocessors
The site runs on a managed cloud platform. Backend data, authentication, and file storage are handled by our managed database provider. We use a small number of additional services for email, mapping, and analytics; we do not sell your information.
Retention & deletion
We keep customer records as long as needed to provide service, honour warranties, and meet legal/accounting requirements. You can request a copy or deletion of your personal information by contacting us.
Security or privacy contact
To report a security concern, request your data, or ask a privacy question, email info@mfcr.ca or use our contact page. We aim to respond within a few business days.
Last reviewed: July 2026. This page is editable content owned by MFC Roofing. We are responsible for our own data-handling practices; our hosting and database vendors are responsible for their platform-level controls.