Privacy Policy

1. Information We Collect

When you use our ECO4 & GBIS Grant Eligibility service, we collect:

• Personal details: Name, title, phone number, email address
• Property information: Full address, postcode, EPC rating, council tax band
• Eligibility information: Benefits status, household details
• Technical data: IP address, browser type, usage statistics

2. How We Use Your Information

Your information is used to:

• Assess your eligibility for ECO4 and GBIS government grants
• Send confirmation emails with preliminary results
• Connect you with approved energy efficiency installers
• Comply with government grant scheme requirements
• Improve our service and user experience

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: For marketing communications and optional services
• Legitimate Interests: For fraud prevention and service improvement
• Contract Performance: To fulfill our service obligations
• Legal Obligation: To comply with government requirements

4. Data Sharing

We may share your information with:

• Approved energy efficiency installers and contractors
• Government agencies administering grant schemes
• Third-party services for address verification and council tax band lookup
• Our email service providers for sending confirmations

Important: We never sell your personal data to third parties for marketing purposes.

5. Your GDPR Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to processing
• Data portability
• Lodge a complaint with the ICO

6. Data Security

We implement appropriate security measures including:

• Encrypted data transmission and storage
• Regular security audits and updates
• Limited access to personal information
• Secure backup and recovery procedures

7. Data Retention

We retain your information for:

• Grant applications: Up to 7 years for compliance purposes
• Marketing preferences: Until you unsubscribe
• Technical logs: Up to 12 months

8. International Data Transfers

Your data is primarily processed within the UK. If we transfer data outside the UK/EEA, we ensure adequate protection through:

• Adequacy decisions by the UK government
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable

9. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Supervisory Authority

You have the right to lodge a complaint with the UK's supervisory authority:

← Back to Grant Application