Privacy Policy

1. Introduction

Scottish Energy Efficiency is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with our website, request a quote, or use our services.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We act as the data controller for all personal data described in this policy.

2. Data We Collect

We may collect the following categories of personal data:

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide quotes, arrange surveys, and deliver installation services
• To process grant and funding applications on your behalf
• To communicate with you about your enquiry, order, or installation
• To send relevant marketing communications where you have opted in
• To improve our website, services, and customer experience
• To analyse website traffic and user behaviour through analytics tools
• To comply with legal obligations including MCS certification requirements
• To manage warranty claims and after-sales support

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Contract: Processing necessary for the performance of a contract, such as providing a quote or carrying out an installation
• Consent: Where you have given clear consent for us to process your data for a specific purpose, such as marketing emails
• Legitimate interest: Where processing is necessary for our legitimate business interests, such as improving our services and website analytics
• Legal obligation: Where processing is necessary to comply with legal requirements, such as MCS certification records and tax obligations

5. Data Sharing

We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Installation partners and subcontractors directly involved in delivering your project
• Grant and funding bodies such as Home Energy Scotland and the Boiler Upgrade Scheme
• Distribution Network Operators (DNOs) for grid connection applications
• MCS and certification bodies for compliance and registration purposes
• Finance providers where you have applied for finance
• Our technology partners as detailed in section 10 of this policy
• Legal and regulatory authorities where required by law

6. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. For full details on the cookies we use and how to manage them, please refer to our Cookie Policy.

You can control cookie preferences through your browser settings or through our cookie consent mechanism on the website.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data where there is no compelling reason for continued processing
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances
• Right to data portability: Request a copy of your data in a structured, commonly used, machine-readable format
• Right to object: Object to the processing of your personal data for direct marketing or based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@scottishenergyefficiency.co.uk. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our standard retention periods are:

• Quote enquiries (not converted): 24 months from last contact
• Customer installation records: Duration of warranty period plus 2 years
• MCS and certification records: 25 years (regulatory requirement)
• Financial records: 7 years (legal obligation)
• Marketing consent records: Until consent is withdrawn
• Website analytics data: 26 months

After the relevant retention period, data is securely deleted or anonymised.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete it.

10. Third-Party Services

We use the following third-party services that may process your data:

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated through our website. We encourage you to review this policy periodically. The date at the top of this page indicates when the policy was last revised.