Privacy Policy

1. About this Privacy Policy

This policy applies to all personal information processed through the Eco Home Check website at ecohomecheck.co.uk, including our eligibility checker, contact forms, editorial content, and any email communications we send. It was last updated in May 2026 and supersedes all previous versions.

We review this policy at least annually and whenever a material change to our services affects how we handle personal data. The “Last reviewed” date at the top of this page reflects the most recent update. We encourage you to check back periodically. If you are a returning visitor and the date has changed, we recommend reading the updated sections before continuing to use the service.

2. Information we collect

When you use our eligibility checker, we collect the answers you provide — including your property type, heating system, ownership status, and postcode prefix. We deliberately collect only the outward part of your postcode (for example “SW1A”) and never the full postcode, so your responses cannot be used to identify your home. If you submit a contact form or email us directly, we receive your email address and the content of your message. If you have opted in to receive updates, we hold your email address on a mailing list.

We use Plausible Analytics, a cookieless, privacy-first analytics platform. Plausible collects no personal identifiers — no IP addresses are stored, no cookies are set, and no cross-site tracking occurs. The aggregate statistics we receive (page views, referral sources, browser types) cannot be used to identify any individual. We also collect anonymous affiliate click data — when you click an affiliate link, we log which partner and content type generated the click, but not who clicked it.

3. How we collect your information

We collect information directly from you when you interact with our eligibility checker, fill in a contact form, send us an email, or subscribe to our updates. In each case, you decide what to share with us; the only mandatory field in the eligibility checker is your postcode prefix, which is needed to match you to regionally available schemes.

We also collect information automatically as you use the website. Our Plausible analytics integration records page views and navigation patterns without using cookies or fingerprinting. Standard server logs may temporarily record your IP address for security and performance purposes; these logs are not retained beyond 30 days. We do not currently receive personal data from third parties, though we reserve the right to do so in future — for example, if we integrate with a government grant eligibility API. Any such integration will be reflected in an updated version of this policy.

4. How we use your information

We use the information from our eligibility checker to match you to grant schemes and energy-efficiency measures that are available in your area and suited to your property. The postcode prefix tells us which local authority schemes may apply; the property and heating system answers allow us to surface the most relevant grants, guides, and installer recommendations. We also use aggregated, anonymised checker data to understand which regions and property types are most in need, so we can improve the service over time.

If you contact us, we use your email address and message solely to respond to your enquiry. We do not add you to a mailing list without your explicit opt-in. If you subscribe to updates, we use your email address to send you information about new guides, grant scheme changes, or service improvements. You can unsubscribe at any time via the link in any email we send.

5. Lawful basis for processing under UK GDPR

For analytics and service improvement, we rely on legitimate interests (UK GDPR Article 6(1)(f)). Our legitimate interest is understanding how our service is used so we can maintain and improve it. Because Plausible collects no personal data and sets no cookies, the privacy impact on you is negligible, and we consider this basis appropriate without requiring your consent. For marketing emails, we rely on consent (Article 6(1)(a)): you must actively opt in before we send you any marketing communication, and you may withdraw that consent at any time.

Where you ask us to refer you to an installer or quote provider through our service, we process your information on the basis of contract (Article 6(1)(b)) — specifically, to take steps at your request prior to entering into an arrangement with a third party. If you contact us by email for support or information, we process your correspondence under legitimate interests (responding to reasonable service enquiries). We do not engage in automated decision-making or profiling as defined by UK GDPR.

6. Cookies and tracking technologies

Eco Home Check does not use advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not use Google Analytics, Facebook Pixel, or any other cookie-based analytics platform. Our analytics provider, Plausible, is cookieless by design: it does not place any cookie on your device, does not store your IP address, and does not track you across websites. Because no personal data is collected through analytics, we do not require a cookie consent banner.

Affiliate links on our site include referral parameters (such as a source tag or campaign identifier) that are passed to our partner's website when you click through. These parameters allow our partners to attribute any subsequent enquiry or purchase to our referral, which is how we earn a commission. The parameters contain no personal data about you — they identify the referring page, not the referring individual. Once you reach a partner's website, their own cookie and tracking policies apply.

7. Sharing your information with third parties

We do not sell, rent, or trade your personal data. Where you submit a request for quotes through our site, the information you provide in that form — such as your contact details and property specifications — is shared with the relevant affiliate partner so they can contact you with a quote. This sharing occurs only with your knowledge and at your direction; you will have seen that partner's name before submitting your details. Each partner operates under their own privacy policy, and we encourage you to read it before submitting your information.

We use Vercel for hosting and content delivery. Vercel processes request data (including temporarily logging IP addresses) in the course of delivering the website to you. We use Supabase as our database provider; any personal data you submit that is stored (such as checker responses or contact enquiries) resides in Supabase. Both Vercel and Supabase act as data processors on our behalf and are contractually required to process your data only on our instructions. We do not share data with any other third parties.

8. International data transfers

Supabase hosts our database in the EU West region (AWS eu-west-1, Ireland). Personal data stored in Supabase therefore remains within the European Economic Area (EEA), which the UK recognises as providing adequate protection under the UK GDPR adequacy framework. Vercel operates a global edge network to deliver web pages quickly, but our primary compute and database processing occurs in EU/EEA regions.

To the extent that any personal data is processed outside the UK or EEA — for example, if a Vercel edge node in a non-adequate country serves a cached page — the transfer is covered by Standard Contractual Clauses (SCCs) incorporated into our agreements with Vercel and Supabase. We do not knowingly transfer personal data to countries that lack adequate legal protections without ensuring an appropriate safeguard is in place.

9. How long we keep your information

Eligibility checker responses are anonymised after 90 days. After that point, no information capable of identifying you (including postcode prefix combined with other answers) is retained in an identifiable form; the aggregated statistical data may be kept indefinitely for service improvement purposes. If you have subscribed to email updates, we hold your email address until you unsubscribe. After unsubscribing, your address is removed from our active mailing list within 30 days.

Quote enquiries submitted through our affiliate partners (where you have provided your personal details directly to a partner via a form on our site) are retained for up to two years from the date of submission. This retention period reflects reasonable requirements for tax record-keeping and audit purposes. If you contact us by email, we retain correspondence for 12 months from the date of the last message in that thread, after which it is deleted.

10. Your rights under UK GDPR

You have the following rights in respect of the personal data we hold about you. To exercise any of them, please see Section 11.

• Right of access. You may request a copy of the personal data we hold about you. We will provide this in a commonly used electronic format within one calendar month of your request.
• Right to rectification. If any data we hold about you is inaccurate or incomplete, you may ask us to correct it. We will act on your request without undue delay.
• Right to erasure. You may ask us to delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw consent and there is no other lawful basis for processing.
• Right to restriction. You may ask us to pause our processing of your data while a dispute about its accuracy or our right to use it is resolved.
• Right to data portability. Where we process your data on the basis of consent or contract, and processing is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object. You may object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent. Where processing is based on your consent — for example, marketing emails — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• Right to complain to the ICO. If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). See Section 16 for contact details.

11. How to exercise your rights

To exercise any of the rights described in Section 10, please send an email to hello@ecohomecheck.co.uk with the subject line “Data request.” Please include enough information for us to identify your records — typically the email address you used when interacting with our service. We may ask you to verify your identity before proceeding.

We will respond to all data rights requests within one calendar month. If your request is complex or we have received a large number of requests, we may extend this period by a further two months, in which case we will notify you within the first month and explain the reason for the extension. We do not charge a fee for reasonable requests, though we reserve the right to charge a reasonable fee or refuse manifestly unfounded or excessive requests.

12. Children's privacy

Eco Home Check is not directed at children under the age of 18. Our services are designed for homeowners, tenants, and householders making decisions about energy-efficiency improvements to their properties — decisions that are typically made by adults. We do not knowingly collect personal data from anyone under 18.

If you are a parent or guardian and believe that someone under 18 has submitted personal data through our service, please contact us at hello@ecohomecheck.co.uk and we will delete the relevant data promptly. We will not intentionally retain any personal data relating to a minor once we become aware of it.

13. Security

All data transmitted between your browser and our service is encrypted using TLS (HTTPS). Data stored in our Supabase database is encrypted at rest. We use Supabase Row-Level Security (RLS) policies to ensure that data is accessible only to authorised processes and users — no public-facing API route has access to personal data beyond what is strictly necessary to service your request. We do not store any payment card data on our own infrastructure; any payment processing (if applicable in future) would be handled by a PCI-DSS compliant third-party provider.

We regularly review our security practices and access controls. Administrative access to our systems is restricted to authorised personnel and protected by strong authentication. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach, and we will notify affected individuals without undue delay where required.

14. Links to other websites

Our site contains links to external websites — including affiliate partners, GOV.UK grant information pages, and MCS installer directories. When you follow a link to an external site, you leave ecohomecheck.co.uk and that site's own privacy policy governs how your data is handled from that point. We are not responsible for the privacy practices of third-party websites, even those we recommend or link to frequently.

We select our affiliate partners carefully and only partner with companies we believe to be reputable. However, we cannot guarantee the privacy practices of any external site. We recommend reviewing the privacy policy of any website you visit before submitting personal information. This is especially important before requesting quotes from installers or energy companies, as those interactions involve your contact details and property information.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. When we do, we will update the “Last reviewed” date at the top of this page. We encourage you to check this page periodically, particularly if you use our service regularly.

If we make a material change — one that significantly affects how we collect or use your personal data — we will notify subscribers by email at the address you have provided, if applicable. Non-material changes (such as clarifications or corrections that do not alter your rights or our obligations) will be made without separate notification. Your continued use of Eco Home Check after any update constitutes acceptance of the revised policy.

16. Complaints

If you have concerns about how we handle your personal data, we ask that you contact us first at hello@ecohomecheck.co.uk so that we have an opportunity to address your concern. We take all privacy complaints seriously and will respond promptly.

You also have the right to lodge a complaint directly with the UK Information Commissioner's Office (ICO) at any time, without first contacting us. The ICO is the UK's independent supervisory authority for data protection. You can contact the ICO at ico.org.uk or by telephone on 0303 123 1113 (Monday to Friday, 9am to 5pm).

Related pages

• Terms of Service
• How We Earn
• Legal Information