Privacy Policy

1. Who we are

UK Energy Efficiency Report ("we", "us", "our") operates the website at ukenergyefficiency.report. We are a commercial lead generation service that provides information about government heat pump grants and connects eligible homeowners with MCS-certified heat pump installers.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), we are the data controller for personal data collected through this website.

2. What data we collect

When you complete the eligibility check form on our website, we collect the following personal data:

• Full name
• Email address
• Telephone number
• Postcode
• Property details — type, heating fuel, EPC status, ownership status
• Timeline preference — how soon you are considering upgrading your heating
• Region — derived from your postcode or selected in the form

We also automatically collect the following technical data:

• IP address (anonymised after processing)
• Page URL at time of form submission
• UTM campaign parameters (where present in the URL)
• Submission timestamp

3. How we use your data

Primary purpose — installer referral

The primary purpose for which we collect your personal data is to pass your contact details and property information to one or more MCS-certified heat pump installers in your region, so that they can contact you to arrange a free, no-obligation property survey and confirm your eligibility for the Boiler Upgrade Scheme.

This is the purpose you consented to when you checked the consent checkbox in our form.

Analytics and site improvement

We use Google Analytics 4 to understand how visitors use this website. This data is aggregated and anonymised — it does not identify individual visitors. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

Lead scoring

We calculate an internal lead score (1–10) based on your form answers. This score is shared with the installer alongside your contact details to help them prioritise follow-up. It is based entirely on objective property characteristics — it does not use protected characteristics or make automated decisions about you.

4. Legal basis for processing

• Consent (Article 6(1)(a) UK GDPR) — your personal data is processed on the basis of the explicit consent you gave when completing the eligibility check form.
• Legitimate interests (Article 6(1)(f) UK GDPR) — for analytics and site improvement purposes, where our legitimate interest in operating and improving the service does not override your rights.

5. Who we share your data with

We share your contact details and property information with MCS-certified heat pump installers in your region, for the purpose of arranging your free grant survey. This is the sole commercial purpose for which your data is shared.

We do not sell your data to third-party marketers, data brokers, advertisers, or any parties other than our verified installer partners.

We may also share data with:

• Form endpoint processors (such as Formspree or Google) — to receive and store form submissions securely
• Google Analytics — for anonymised website analytics
• Law enforcement or regulatory bodies — if required by law

6. How long we keep your data

• Lead data (name, contact details, property information) — retained for up to 24 months from submission, or until you request deletion, whichever is sooner.
• Analytics data — retained by Google Analytics in line with Google's data retention settings (default 14 months for event-level data).

7. Your rights

Under UK GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your personal data ("right to be forgotten").
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to withdraw consent — you can withdraw your consent at any time. This does not affect the lawfulness of processing before withdrawal. To withdraw consent, email privacy@ukenergyefficiency.report.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@ukenergyefficiency.report. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

This website uses the following cookies:

• Session storage — we use browser session storage (not persistent cookies) to temporarily store your postcode and detected region during your visit. This data is not sent to our servers and is cleared when you close your browser tab.
• Google Analytics cookies — _ga, _ga_[ID] — persistent cookies used for analytics. These expire after 2 years and 1 year respectively.

We do not use advertising cookies, tracking pixels, or third-party remarketing tags.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Form submissions are transmitted over HTTPS. Our hosting provider (Netlify or Cloudflare Pages) operates secure, UK/EU infrastructure.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact us

For any data protection queries, requests, or complaints:

Email: privacy@ukenergyefficiency.report

Website: ukenergyefficiency.report/about