Home › Privacy Policy
This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it under UK GDPR — whether you contact us about retrofit compliance, ECO4 grants, training courses, or home energy upgrades.
The Data Controller
Compliant Retrofits Ltd is a UK-based retrofit compliance, training, and home energy upgrades business serving Manchester and surrounding areas.
ICO registration: we are registered with the Information Commissioner’s Office (ICO) as a data controller.
Privacy Contact Details
Website
compliantretrofits.co.uk
Address
Unit 26, Longsight Business Park,
69 Hamilton Road, Manchester,
England, M13 0PD
Data Collection
When you use our contact form or consultation booking form, we collect:
We use cookies to:
For more information, see our Cookie Policy.
When you email us, we retain your email address and the content of your email for as long as necessary to respond to your enquiry and for record-keeping purposes.
Encrypted in transit: information submitted through forms is encrypted using SSL/TLS technology.
Purpose
We use your personal data to:
Respond to your enquiries about retrofit compliance, ECO4 grants, training courses, or home energy upgrades
Provide consultation services and fixed-price quotes
Process training course registrations and NVQ assessments
Send you information about your project (appointments, updates, completion)
Improve our website through anonymised analytics
Comply with legal obligations (HMRC, ECO4 scheme administrators)
We do not sell your data to third parties. We do not share your data for marketing purposes without your explicit consent.
UK GDPR
Under UK GDPR, we rely on the following legal bases:
Data Retention
| Data Category | Retention Period | Why |
|---|---|---|
| Contact form submissions | 6 months | Responding to and following up your enquiry |
| Client project data | 7 years | In line with HMRC record-keeping requirements for tax records |
| Training course records | 5 years | Certification body requirements |
| Email marketing data | Until you unsubscribe | Consent-based — ends when you withdraw it |
| Consultation notes | 12 months | If no project proceeds |
After these periods, your data is securely deleted or anonymised.
Data Sharing
We do not sell your data. We share data only when necessary:
Data shared: name, email, project details
Purpose: service delivery (white-label)
Legal basis: contract performance
All external partners sign NDAs and data processing agreements.
Data shared: email address
Purpose: send newsletters (if opted in)
Legal basis: consent
Data shared: as required by law
Purpose: compliance with legal obligations
Legal basis: legal obligation
Data shared: name, address, property details, eligibility evidence
Purpose: grant application submission
Legal basis: contract performance
How we protect shared data: we use SSL encryption, role-based access controls, secure cloud storage and regular security reviews to protect personal information.
Your Rights
You have the following rights:
You can request a copy of the personal data we hold about you. We will respond within one month.
You can ask us to correct inaccurate or incomplete data.
Also known as the “right to be forgotten” — you can ask us to delete your data, subject to legal retention requirements (e.g., the HMRC 7-year rule).
You can ask us to limit how we use your data.
You can request your data in a structured, machine-readable format.
You can object to processing based on legitimate interests (e.g., analytics).
To exercise these rights, contact us at info@compliantretrofits-sprint7-hhdhfcdkaqemgraw.uksouth-01.azurewebsites.net
Cookies
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
cookie_consent |
Essential | Remembers your cookie preferences | 1 year |
_ga |
Analytics | Google Analytics — distinguishes users | 2 years |
_gid |
Analytics | Google Analytics — distinguishes users | 24 hours |
You can control cookies through your browser settings or our cookie consent banner. Full details: see our Cookie Policy.
Security
We take data security seriously:
All data is stored on secure, password-protected systems
Access to personal data is restricted to authorised team members only
External partners sign data processing agreements
Regular security reviews are conducted
Data is encrypted during transmission (SSL/TLS)
While we strive to protect your data, no transmission over the internet is 100% secure. You provide data at your own risk.
Complaints & Updates
If you are not satisfied with our response, you have the right to lodge a complaint with the ICO:
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Address: Information Commissioner’s Office,
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would appreciate the opportunity to resolve your concerns first. Please contact us at info@compliantretrofits-sprint7-hhdhfcdkaqemgraw.uksouth-01.azurewebsites.net before escalating to the ICO.
We may update this Privacy Policy from time to time to reflect changes in the law or our data processing practices. The latest version will always be published on this page with an updated effective date.
Effective Date
1 June 2026
Last Updated
1 June 2026
We encourage you to review this Privacy Policy periodically.
Compliant Retrofits
If you have questions about this Privacy Policy, the data we hold about you, or how to exercise your UK GDPR rights, get in touch and our team will be happy to help.
You can also reach us through our contact page — or see how we use cookies in our Cookie Policy.