Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you complete our eligibility checker or request a quote, we collect:

• Contact Information: Name, email address, phone number, postcode
• Property Information: Property ownership status, EPC rating, heating type
• Financial Information: Benefits status, approximate household income
• Preferences: Preferred contact times, areas of interest (solar, insulation, heat pumps, boilers)

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Usage Data: Pages visited, time spent, clicks, navigation paths
• Device Information: Browser type, device type, operating system, IP address
• Cookies and Tracking Technologies: See Section 5 for details

2. How We Use Your Information

We use the information we collect to:

• Connect You with Installers: Match you with certified, local installers who can help with your energy improvements
• Determine Eligibility: Assess which government grants and schemes you may qualify for
• Communicate with You: Respond to inquiries, provide updates, send relevant information about grants and schemes
• Improve Our Services: Analyze usage patterns to enhance website functionality and user experience
• Comply with Legal Obligations: Fulfill regulatory requirements and protect our legal rights
• Marketing (with consent): Send newsletters, updates about new grants, and energy-saving tips

3. How We Share Your Information

We Share Your Information With:

• Certified Installers: TrustMark, MCS, and Gas Safe registered installers who can provide quotes and services
• Service Providers: Third-party services that help operate our website (hosting, email, analytics)
• Legal Compliance: Government authorities, law enforcement, or regulators when required by law
• Business Transfers: In the event of a merger, acquisition, or sale of assets

We Do NOT:

• Sell your personal information to third parties for their marketing purposes
• Share your information with unvetted or non-certified installers
• Use your information for purposes other than those stated in this policy without your consent

4. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill the purposes outlined in this policy
• Comply with legal, regulatory, or contractual obligations
• Resolve disputes and enforce our agreements

Typically, we retain lead information for 24 months unless you request deletion sooner. After this period, data is securely deleted or anonymized.

5. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device that help us improve your experience on our website.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality (e.g., form submissions, navigation)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Track conversions and ad performance (Google Tag Manager)

Third-Party Services:

• Google Analytics: Website traffic and behavior analysis
• Google Tag Manager: Marketing and conversion tracking
• Firebase: Database and authentication services

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

6. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: SSL/TLS encryption for data transmission
• Secure Storage: Firebase Cloud Firestore with access controls
• Access Controls: Restricted access to personal information on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing

While we take security seriously, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

8. Third-Party Links

Our website may contain links to third-party websites (e.g., government grant information, installer websites). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing personal information.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification (for material changes)

We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Legal Basis for Processing (UK GDPR)

We process your personal information under the following legal bases:

• Consent: When you submit a quote request or sign up for marketing communications
• Contractual Necessity: To provide our lead generation services
• Legitimate Interests: To improve our services, prevent fraud, and ensure website security
• Legal Obligations: To comply with UK laws and regulations