HomePrivacy Policy

Legal · Last Updated 1 June 2026

Privacy Policy — How Compliant Retrofits Ltd Protects Your Personal Data

This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it under UK GDPR — whether you contact us about retrofit compliance, ECO4 grants, training courses, or home energy upgrades.

The Data Controller

Who We Are

Compliant Retrofits Ltd is a UK-based retrofit compliance, training, and home energy upgrades business serving Manchester and surrounding areas.

ICO registration: we are registered with the Information Commissioner’s Office (ICO) as a data controller.

Privacy Contact Details

Website

compliantretrofits.co.uk

Address

Unit 26, Longsight Business Park,
69 Hamilton Road, Manchester,
England, M13 0PD

Data Collection

What Personal Data Do We Collect?

Contact Forms

When you use our contact form or consultation booking form, we collect:

  • Full name
  • Email address
  • Phone number (optional)
  • Information about your project or enquiry
  • Property type and location (if provided)
  • GDPR consent preference

Cookies

We use cookies to:

  • Understand how visitors use our website (Google Analytics)
  • Remember your cookie preferences

For more information, see our Cookie Policy.

Email Communications

When you email us, we retain your email address and the content of your email for as long as necessary to respond to your enquiry and for record-keeping purposes.

Encrypted in transit: information submitted through forms is encrypted using SSL/TLS technology.

Purpose

How Do We Use Your Personal Data?

We use your personal data to:

Respond to your enquiries about retrofit compliance, ECO4 grants, training courses, or home energy upgrades

Provide consultation services and fixed-price quotes

Process training course registrations and NVQ assessments

Send you information about your project (appointments, updates, completion)

Improve our website through anonymised analytics

Comply with legal obligations (HMRC, ECO4 scheme administrators)

We do not sell your data to third parties. We do not share your data for marketing purposes without your explicit consent.

Data Retention

How Long Do We Keep Your Personal Data?

Data Category Retention Period Why
Contact form submissions 6 months Responding to and following up your enquiry
Client project data 7 years In line with HMRC record-keeping requirements for tax records
Training course records 5 years Certification body requirements
Email marketing data Until you unsubscribe Consent-based — ends when you withdraw it
Consultation notes 12 months If no project proceeds

After these periods, your data is securely deleted or anonymised.

Your Rights

What Are Your Rights Under UK GDPR?

You have the following rights:

1

Right to Access

You can request a copy of the personal data we hold about you. We will respond within one month.

2

Right to Rectification

You can ask us to correct inaccurate or incomplete data.

3

Right to Erasure

Also known as the “right to be forgotten” — you can ask us to delete your data, subject to legal retention requirements (e.g., the HMRC 7-year rule).

4

Right to Restrict Processing

You can ask us to limit how we use your data.

5

Right to Data Portability

You can request your data in a structured, machine-readable format.

6

Right to Object

You can object to processing based on legitimate interests (e.g., analytics).

Cookies

What Cookies Do We Use?

Cookie Category Purpose Duration
cookie_consent Essential Remembers your cookie preferences 1 year
_ga Analytics Google Analytics — distinguishes users 2 years
_gid Analytics Google Analytics — distinguishes users 24 hours

You can control cookies through your browser settings or our cookie consent banner. Full details: see our Cookie Policy.

Security

How Do We Protect Your Personal Data?

We take data security seriously:

All data is stored on secure, password-protected systems

Access to personal data is restricted to authorised team members only

External partners sign data processing agreements

Regular security reviews are conducted

Data is encrypted during transmission (SSL/TLS)

While we strive to protect your data, no transmission over the internet is 100% secure. You provide data at your own risk.

Compliant Retrofits

How Can You Contact Us About Privacy?

If you have questions about this Privacy Policy, the data we hold about you, or how to exercise your UK GDPR rights, get in touch and our team will be happy to help.

You can also reach us through our contact page — or see how we use cookies in our Cookie Policy.