Privacy Policy

1. Who we are

EnergyAdvise.co.uk (“EnergyAdvise”, “we”, “us” or “our”) is a UK home-energy advice and installer-referral service. We connect homeowners with installer partners; we do not install products ourselves.

For this draft, EnergyAdvise.co.uk is the name of the organisation responsible for the personal information it collects for its enquiry and matching service. The exact registered legal entity and any applicable registration details must be confirmed before final publication.

Postal address: 71-75 Shelton Street, London, WC2H 9JQ.
Email: support@energyadvise.co.uk.

This notice is intended to address the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended.

2. Information we collect

When you make a home-energy enquiry, the planned service collects:

• your name;
• your email address;
• your telephone number; and
• your energy interests, such as the technologies or services you are considering.

We may also receive information you choose to include in correspondence with us. Please do not send sensitive personal information unless it is necessary and we have explained why it is required.

Providing enquiry information is your choice. If information needed to respond or make an introduction is missing, we may be unable to arrange that introduction. The enquiry form must clearly identify any required fields when it is launched.

Website delivery can involve technical information such as your IP address, browser information and requested pages. The current page loads fonts from Google Fonts, so your browser makes requests to Google which can disclose technical request information. See section 6 and our Cookie Policy.

3. How we use information and our lawful bases

We use enquiry details to understand your interests, respond to you, identify relevant installer partners and pass your enquiry to those partners so that they can contact you about your requested service.

Quote enquiries and referrals: the proposed purpose is to carry out the matching and introduction you request. Before the enquiry form goes live, we must confirm and document the appropriate UK GDPR Article 6 lawful basis for this processing and sharing, and display that basis at collection. It may be steps taken at your request before a contract, or another appropriate basis depending on the final service arrangements; a privacy notice does not establish a basis by itself.

Marketing: we intend to use contact details for marketing relevant home-energy services. For email, text and other electronic marketing to individuals, we must obtain appropriate consent or meet all conditions of an applicable PECR exception. A quote request is not automatically consent to unrelated marketing. Marketing choices must be separate and clear, and installer marketing permissions must not be assumed to cover every partner.

Advertising and measurement: Meta and Google tools are planned, but exact products and configurations are not yet confirmed or installed in this site's code. Any associated personal-data processing needs its own appropriate lawful basis, and device storage or access requires consent unless a specific PECR exception applies. We will update this notice and the Cookie Policy before activating those tools.

Legal and administrative purposes: we may need limited records to deal with complaints, respect marketing objections or meet a legal obligation. The final record of processing must identify the applicable basis and retention period for each purpose.

4. Who receives enquiry information

Your name, email address, telephone number and energy interests are available to EnergyAdvise and are shared with our installer partners for relevant referrals. Those installers can use the details to contact you about the service you have requested.

Before referral, the enquiry journey must explain who will receive the information, what contact to expect and any required permission. The recipient installer or category of installers should be made clear at the point of collection or referral; we do not promise a particular number of quotes.

An installer may be a separate data controller for information it receives. Its privacy notice will explain its own use, retention and marketing practices. The controller roles and data-sharing arrangements must be confirmed with each partner before sharing begins. You can contact us if you need help identifying an installer that received your enquiry.

Service providers involved in hosting, communications or running the service may also process information on our behalf. [Confirm the full list of hosting, enquiry-storage, email and other processing providers before launch.] We may disclose information where we are legally required to do so.

5. Marketing choices

You have an absolute right to object to direct marketing at any time. To stop EnergyAdvise marketing, use an unsubscribe option supplied in the message or email support@energyadvise.co.uk. You can make an objection verbally or in writing; you do not have to give a reason.

Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. We may retain a minimal suppression record so that we do not contact you again for marketing.

Stopping marketing is different from stopping contact needed to deal with an enquiry you have asked us or an installer to handle. To stop installer marketing or exercise rights over an installer's own records, contact that installer as well. Tell us if you need help doing so.

6. Google Fonts, Meta and Google services

Google Fonts is currently loaded: font files are requested from Google to display the site’s typefaces. These requests can disclose your IP address and browser/request information to Google. See Google’s Privacy Policy for its handling of information.

Meta and Google advertising or analytics tools are planned: the exact products, information sent, purposes, recipients, cookie names and durations must be confirmed before installation. Depending on their configuration, such services may process online identifiers, device information and page or advertising interactions. No Meta or Google analytics/advertising tag is currently embedded in this website.

We do not assume that a provider's privacy policy replaces our own duties to explain our use of a service. Our Cookie Policy sets out the current position and items that need to be completed before tracking is enabled.

7. International transfers

Some technology providers, including Google and planned Meta services, may process information outside the UK. Before using a service or transferring personal data, we must verify the countries involved and the applicable UK transfer arrangements, such as an adequacy regulation or approved safeguards where required.

[Confirm relevant transfer destinations, recipient entities and safeguards for the actual services before final publication.] You can ask us for information about an applicable transfer and the safeguards used.

8. How long we keep information

Our current proposed approach is to keep enquiry details until you request removal. This is not a final retention schedule and does not by itself justify indefinite retention. UK GDPR requires information to be kept no longer than necessary for the purposes for which it is held.

Before the enquiry service is launched, we must set and publish need-based periods or clear criteria for active enquiries, closed or unsuccessful enquiries, marketing records and complaint or legal records. We must review information and delete or anonymise it when it is no longer needed, even if no deletion request has been made.

[Retention periods and review frequency to be confirmed before launch.]

You may ask for deletion at any time. The right to erasure is subject to legal conditions; for example, limited records may need to be retained for a legal obligation or the establishment, exercise or defence of legal claims. A marketing suppression record may be needed to honour your objection.

9. Your data protection rights

Depending on the circumstances and the lawful basis used, you may have rights to:

• receive information about how your personal data is used and request access to it;
• correct inaccurate or incomplete information;
• request erasure or restrict processing;
• object to certain processing, including an unconditional objection to direct marketing;
• receive certain data in a portable format;
• withdraw consent where we rely on it; and
• exercise applicable rights concerning significant decisions based solely on automated processing.

The current website does not include a quote-decision or profiling system. Any future automated matching or profiling must be assessed and explained before it is introduced, including any significant automated decisions and applicable safeguards.

Contact support@energyadvise.co.uk to make a request. We may need proportionate information to verify your identity. We will deal with requests under the applicable legal timescales, usually within one month, and explain any lawful extension or refusal.

10. Security and complaints

We must use appropriate technical and organisational measures for the risks involved in processing your information. No website or method of transmitting information can guarantee complete security. The final service needs documented access, sharing, deletion and incident-handling controls.

If you have a concern, please contact us using the email or postal address above. You also have the right to complain to the UK Information Commissioner’s Office (ICO). Visit ico.org.uk/make-a-complaint for information; you do not have to give up that right by contacting us first.

11. Updates to this notice

We will update this page when our practices change. The date at the top identifies the latest version. We must tell you about material new uses before processing information for those purposes and obtain any new consent that is required.