Privacy Policy

Who we are

ECOFUTURESGB LTD (“we”, “us”, “our”) is the data controller responsible for your personal data. This policy explains what we collect, why we collect it, and the rights you have under UK data protection law — the UK GDPR and the Data Protection Act 2018.

You can contact us about privacy at any time:
Email: info@ecofutures.uk
Phone: 07359 069886
ECOFUTURESGB LTD, registered in England & Wales (company no. 15782816). Registered office: 49 Whitegate Drive, Blackpool, England, FY3 9DG.

The personal data we collect

• Enquiry details — when you use our contact form, email or call us: your name, email address, property address or postcode, and the content of your message.
• Order details — when you book an EPC online: your name, email address, phone number, the property address and postcode, and the appointment dates you choose. Card details are entered on Stripe’s payment page and never reach our systems.
• Survey & service data — if you go on to engage us, the information needed to carry out your survey, plan and any installation work.
• Assessment photographs and site notes — when we carry out an EPC at your property: measurements, site notes and photographs of the things that determine the rating, such as the boiler and its controls, meters, glazing, insulation, ventilation and the outside of the building. The assessment standard requires these to be date-stamped and location-stamped, and requires us to keep them so that an auditor can check the certificate was produced correctly. We photograph the building, its fixtures and its services — not you, and not your belongings. If you would rather a particular room or item was not photographed, tell the assessor on the day.
• Usage data — if you consent to analytics cookies, Google Analytics collects information about how you use the site (pages viewed, approximate location, device and browser). See our Cookie Policy.
• Technical data — our hosting provider automatically processes limited technical data such as your IP address and request logs to serve and secure the site.

How and why we use your data

We only use your personal data where we have a lawful basis to do so:

Providing your details is not a statutory requirement. If you don’t give us the information we need to arrange or deliver a survey or installation, we won’t be able to provide that service. We don’t make decisions about you based solely on automated processing, and we don’t carry out profiling.

Who we share your data with

We do not sell your personal data. We share it only with:

• Stripe Payments UK Ltd — takes payment for EPC bookings and holds the order details we need to arrange the visit.
• postcodes.io — an open UK postcode database. When you enter a postcode on the EPC page, our server sends only its outward part (for example “BL1”) to check the property is within the area we cover. Nothing else is sent.
• EmailJS — delivers your contact-form message to our inbox.
• Google (Google Analytics and Google Ads measurement) — only if you accept analytics and advertising cookies.
• Vercel Inc. — hosts and serves the website, and provides Vercel Web Analytics, which counts page views and visitors. Unlike Google Analytics it sets no cookies, stores nothing on your device and builds no profile of you, so it runs whatever you choose in the cookie banner. It cannot identify you.
• Elmhurst Energy Systems Ltd — our accreditation scheme. Your assessment data, site notes and photographs are provided to them if your certificate is selected for audit. Auditing is how the scheme checks that certificates are accurate, and every assessor is subject to it.
• The national register of energy certificates — your finished EPC is lodged on the government’s register, where it is published and can be found by anyone searching your property’s address. That is a legal requirement of producing an EPC rather than something we choose to do. The photographs and site notes are not published there.
• Accredited assessors, installers and scheme administrators — where needed to deliver a survey, plan or installation you have requested, or to process grant funding.
• Professional advisers and authorities — where we are required to by law.

These providers act as our processors under contract, or as independent controllers where they set their own purposes (for example Google).

International transfers

Some of these providers (including Google, EmailJS and Stripe) may process data outside the UK, including in the United States. Where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, Standard Contractual Clauses, or an adequacy decision (for example the UK Extension to the EU–US Data Privacy Framework). Our web fonts are served by Google Fonts, which may receive your IP address when a page loads.

How long we keep your data

• Enquiries that don’t become work — typically up to 12 months.
• Client, contract and financial records — as required for legal and tax purposes (generally 6 years).
• Assessment photographs, site notes and survey data — 15 years. That is the period our accreditation scheme requires us to keep the evidence behind a certificate available for audit. We hold it for that reason alone, we do not use it for anything else, and we delete it at the end of that period.
• Analytics data — in line with Google Analytics’ retention settings.

We keep personal data only for as long as we need it for the purposes above.

Your rights

Under UK data protection law you have the right to:

• be informed about how we use your data (this policy);
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing;
• data portability; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at info@ecofutures.uk. We will respond within one month.

Complaints

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first, so please do contact us.

Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

Your order details are held by Stripe and in our email, both reached over an encrypted connection. Assessment photographs and site notes are kept offline on our own storage: they are never uploaded to this website, never published, and are shared with nobody other than our accreditation scheme if one of your certificates is audited.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last changed.