Get a Quote

Privacy Policy

Energy Performance Consultants Ltd Last updated: 11/08/2026

1. Introduction

Energy Performance Consultants Ltd (“EPC Ltd”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you visit energyperformanceconsultants.com (the “Site”) or otherwise interact with us, and explains your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Site, you confirm that you have read and understood this policy.

2. Who we are (Data Controller)

Energy Performance Consultants Ltd is the data controller responsible for your personal data.

  • Company name: Energy Performance Consultants Ltd
  • Company number: SC706537
  • Registered address: EcoT House, Plean Industrial Estate, Plean, Stirling, Scotland, FK78BJ
  • Contact email: info@energyperformanceconsul
  • tants.com
 

Any questions about this policy or how we handle your data should be sent to the contact email above.

3. What Personal Data We Collect

We collect the following categories of personal data:

Data you give us directly (e.g. via our contact form):

  • Name
  • Email address
  • Phone number
  • Property address (for EPC assessments, airtightness testing, or heat pump service enquiries)
  • Details of your enquiry or the message content you submit
  • Any other information you choose to include in your message
 

Data collected automatically:

  • IP address
  • Browser type and version
  • Device information
  • Pages visited, time spent on pages, and referral source
  • Approximate location (derived from IP address)
 

We do not collect any special category data (e.g. health, religion, ethnicity) through this Site, and we ask that you do not include such information in any form submission.

4. How We Collect Your Data

  • Directly from you — when you complete our contact/booking form to request an EPC assessment, airtightness test, heat pump service, or general enquiry.
  • Automatically — through cookies and similar technologies via Google Analytics when you browse the Site (see Section 7).

5. Legal Basis for Processing

We process your personal data under the following lawful bases (Article 6 UK GDPR):

Purpose Legal Basis
Responding to your enquiry / booking request Contract (steps prior to entering a contract) / Legitimate interests
Providing EPC, airtightness, or heat pump assessment services Performance of a contract
Website analytics (Google Analytics) Consent (via cookie banner)
Complying with legal or regulatory obligations Legal obligation

Where we rely on consent (e.g. analytics cookies), you may withdraw that consent at any time — see Section 7.

6. How We Use Your Data

We use your personal data to:

  • Respond to enquiries and process booking requests
  • Arrange and carry out EPC assessments, airtightness testing, and heat pump service visits
  • Communicate with you about your booking or enquiry
  • Maintain records required for regulatory or accreditation purposes
  • Understand how visitors use our Site, so we can improve it (via Google Analytics)
  • Comply with our legal obligations

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

7. Cookies and Google Analytics

Our Site uses cookies to improve functionality and to understand how visitors use the Site.

Google Analytics: We use Google Analytics to collect anonymised/pseudonymised statistics about Site usage (e.g. page views, session duration, general location, device type). This helps us understand how the Site is used and improve it. Google Analytics uses cookies to do this. Data collected may be processed by Google in accordance with Google’s Privacy Policy.

We only set non-essential cookies (including Google Analytics cookies) with your consent, obtained via a cookie banner/consent tool on first visiting the Site. You can withdraw or change your consent at any time via the cookie settings link on our Site, or by adjusting your browser settings to block or delete cookies.

Essential cookies necessary for the Site to function do not require consent.

8. Who We Share Your Data With

We do not sell your personal data. We may share your data with:

  • Service providers who support our website and business operations (e.g. our website host, form/email provider, Google Analytics), acting as processors under contract
  • Regulatory or accreditation bodies, where required for EPC assessments to be lodged on the relevant national register
  • Professional advisers (e.g. accountants, legal advisers) where necessary
  • Authorities, where required by law (e.g. HMRC, law enforcement)
 

All third parties are required to respect the security of your data and to treat it in accordance with the law.

9. International Transfers

Some of our service providers (e.g. Google Analytics) may transfer data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement (IDTA) or an adequacy decision, so your data remains protected to UK standards.

10. Data Retention

We retain personal data only for as long as necessary for the purposes it was collected, including to satisfy any legal, accounting, or reporting requirements. As a general guide:

  • Enquiry/contact form data: retained for [Insert period, e.g. 12 months] unless a booking proceeds
  • Client and assessment records: retained for [Insert period, e.g. 6 years] in line with regulatory/accreditation requirements
  • Analytics data: retained per Google Analytics’ default retention settings, or as configured by us
 

11. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erasure (“right to be forgotten”), in certain circumstances
  • Restrict processing, in certain circumstances
  • Object to processing based on legitimate interests or for direct marketing
  • Data portability, where processing is based on consent or contract and carried out by automated means
  • Withdraw consent at any time, where processing is based on consent
 

To exercise any of these rights, contact us at [Insert contact email]. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

 

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

13. Children’s Data

Our Site is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Energy Performance Consultants:

Ltd EcoT House, Plean Industrial Estate, Plean, Stirling, Scotland, FK78BJ 

info@energyperformanceconsulta

nts.com