Privacy notice

Who we are

Grenie Ltd is the data controller responsible for the personal information you submit through this website. That means we decide how your details are used and are responsible for looking after them properly.

• Data controller: Grenie Ltd
• Company number: 16892553
• Registered office: Valley House, Seventh Avenue, Team Valley Trading Estate, Gateshead, NE11 0JW
• ICO registration: ICO registration pending
• Contact: admin@grenie.co.uk

The independent installation partners we may introduce you to are separate data controllers for any information they receive about you. They are responsible for their own privacy notices and for how they handle your details once you are in contact with them.

What personal information we collect

We collect the following categories of personal information:

• Home-energy review enquiries. When you complete our enquiry form we collect your first and last name, email address, contact number, postcode, whether you own the property, what you are interested in, your current heating fuel if you tell us, your preferred contact method, and anything you write in the message box.
• Offers interest registrations. When you register interest in verified offers, we collect your email address and the categories you tell us you care about.
• Installer partnership enquiries. When an installer contacts us about working with Grenie, we collect the company details, certifications, service areas and capacity information they provide.
• Cookie preference. We store a single preference in your browser recording whether you accepted or declined cookies on this site.
• Affiliate tracking. If you allow it, Awin's publisher tag may collect information about your visit, offer-link clicks and resulting purchases to attribute referrals. This may include online identifiers and device information.
• Technical information. Our hosting platform records standard technical data such as IP address, browser type and the date and time of visits, as part of operating and securing the website.

We do not knowingly collect special category data (such as health information) through this website. If you include anything sensitive in a message, please tell us so we can remove it.

How we use your information

We use your personal information to:

• respond to your enquiry and answer your questions;
• assess in broad terms whether your property may be suitable for a heat pump, solar, battery storage or EV charging;
• with your permission, introduce you to an appropriate independent installation partner so they can arrange a survey and proposal;
• let you know when verified household offers go live, where you have registered interest;
• assess and respond to installer partnership enquiries and manage our relationships with installation partners;
• operate, secure and improve this website; and
• meet our legal and record-keeping obligations.

Our lawful bases for using your information

Under UK GDPR we must have a lawful basis for processing your personal information. We rely on the following:

• Consent (Article 6(1)(a)) — for sharing your details with a suitable installation partner, for contacting you using your preferred method, and for letting you know about verified offers where you have registered interest. You give this consent through the checkboxes on our forms, and you can withdraw it at any time. We also rely on your separate cookie choice before loading Awin affiliate tracking.
• Contract (Article 6(1)(b)) — where processing is necessary to take steps before entering into an agreement with you or an installation partner, or to perform such an agreement.
• Legitimate interests (Article 6(1)(f)) — for responding to your enquiry, assessing property suitability in broad terms, operating and securing the website, and managing installer partnerships. We have balanced our interests against your rights and freedoms and believe this processing is fair and proportionate.
• Legal obligation (Article 6(1)(c)) — where we are required to keep records for legal or regulatory reasons.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share your information with

We share your information as follows:

• Installation partners. With your consent, we share your enquiry details with an appropriate independent installation partner so they can contact you about a survey and proposal. Once shared, that partner is a separate data controller for your information.
• Service providers. We use Lovable Cloud, our website platform, which hosts the site and its managed database on our behalf. Lovable Cloud and its infrastructure providers act as data processors and only handle your information under our instructions to operate and secure the website.
• Affiliate network. If you allow affiliate tracking, the Awin publisher tag loads from dwin2.com. Awin may use cookies and similar technologies to attribute visits and purchases following offer links. See Awin's own privacy information for how it handles data it collects.
• Professional advisers and authorities. Where required by law, or to protect our legal rights, we may share information with regulators, law-enforcement bodies, or our professional advisers.

We do not sell your personal information. We do not share it for marketing with any organisation outside what is described above.

International transfers

Your information is processed in the United Kingdom and may be processed by our platform and its infrastructure providers in other countries, including the European Economic Area or the United States. Where personal information is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or that the destination is recognised by the UK as providing an adequate level of protection.

If you would like a copy of the safeguards we rely on, please contact us at admin@grenie.co.uk.

How long we keep your information

We keep your personal information only as long as we need it:

• Enquiry data (home-energy reviews and installer partnership enquiries) is kept for 24 months from your last meaningful contact with us, after which it is deleted or anonymised.
• Offers interest registrations are kept until you ask us to remove them, or for 24 months from your last registration, whichever is sooner.
• Cookie preference is kept in your browser until you clear your browser data or choose again.
• Technical and security logs are kept for as long as needed to operate and secure the website, in line with our hosting provider's standard retention.

Where we are required to keep information for longer to meet a legal obligation, resolve a dispute, or enforce our terms, we will keep it securely and only for that purpose.

How we keep your information safe

We use technical and organisational measures to protect your personal information against unauthorised access, loss, misuse or alteration. These include access controls, encryption in transit, and secure hosting on a managed cloud platform. We limit access to your information to the people who need it to respond to your enquiry or operate the website.

No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security, but we work to protect your information using measures appropriate to the sensitivity of the data.

Cookies

This website stores a preference in your browser to remember your choice. If you choose "Allow affiliate tracking", we load Awin's publisher tag, which may use cookies or similar technologies to measure offer-link visits and purchases. It does not load if you choose "Essential only" or have not made a choice. You can change your choice at any time using "Cookie preferences" in the footer. If you withdraw permission, the page reloads to stop the tag; you can also clear existing third-party cookies in your browser settings.

Your rights

Under UK GDPR you have the following rights over your personal information:

• Right of access — to ask what personal information we hold about you and for a copy of it.
• Right to rectification — to ask us to correct information that is inaccurate or incomplete.
• Right to erasure — to ask us to delete your personal information in certain circumstances.
• Right to restriction — to ask us to limit how we use your information in certain circumstances.
• Right to object — to object to us using your information, including where we rely on legitimate interests.
• Right to data portability — to receive certain information in a structured, machine-readable format, or to have it transferred to another provider.
• Rights relating to automated decision-making — not currently used by Grenie, but available to you under UK GDPR.
• Right to withdraw consent — where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect any processing we have already done with it.

To use any of these rights, contact us at admin@grenie.co.uk. We will respond within one month, and we will not charge a fee unless your request is clearly unfounded or excessive.

How to complain

If you have a concern about how we have handled your personal information, please contact us first at admin@grenie.co.uk and we will do our best to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. You can contact the ICO at:

• Information Commissioner's Office
• Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Website: www.ico.org.uk

Changes to this notice

We may update this notice from time to time to reflect changes in how we work or in the law. The date at the bottom of this page shows when it was last reviewed. We will not reduce your rights under this notice without telling you.