Privacy Policy

Last updated: 2026-05-19

This Privacy Notice explains how UK Heat Pump Guide ("we", "us") collects and uses personal data when you visit ukheatpumpguide.co.uk. It is written to satisfy the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

Who we are

The data controller for this site is UK Heat Pump Guide. Contact: [email protected].

What we collect

• Analytics data — pages viewed, approximate location (city level), device type, referrer. Collected via Google Analytics 4 only after you accept cookies. IP addresses are anonymised by GA4 by default.
• Quote-form submissions — if you submit your name, email, postcode and property details via our quote form, we pass these to MCS-certified installer partners to provide quotations. The form clearly states which fields are forwarded and which are optional.
• Newsletter subscriptions — if you subscribe, we store your email address until you unsubscribe.
• Server logs — Cloudflare hosts this site and retains IP-level access logs for up to 30 days for security and abuse prevention. These logs are not shared with us in identifiable form.

Lawful basis

We rely on the following UK GDPR lawful bases:

• Consent (Art. 6(1)(a)) — for analytics cookies and newsletter signup.
• Legitimate interests (Art. 6(1)(f)) — for security logs and to operate the site.
• Contract (Art. 6(1)(b)) — when you ask us to forward a quote request to installers.

Cookies

We use a cookie banner that defaults to declined. No analytics cookies are set until you click "Accept". A small functional cookie remembers your consent choice. You can change your mind at any time by clearing cookies for this site or via the banner reset link in the footer.

How long we keep data

• Analytics: 14 months (Google Analytics 4 default for European data).
• Quote forms: 24 months, after which the entry is deleted from our records (installer partners apply their own retention).
• Newsletter: until you unsubscribe.
• Server logs: 30 days.

Sharing

We share data only with: (a) MCS-certified installer partners when you submit a quote form; (b) our analytics provider (Google) under standard contractual clauses; (c) our hosting provider (Cloudflare); (d) where required by UK law. We do not sell personal data.

Your rights under UK GDPR

You have the right to:

• Request access to the data we hold about you (subject access request)
• Request correction of inaccurate data
• Request deletion ("right to be forgotten") subject to overriding legal obligations
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent at any time
• Lodge a complaint with the Information Commissioner's Office (ico.org.uk · 0303 123 1113)

To exercise any of these rights, email [email protected]. We respond within one month, as required by UK GDPR Article 12.

International transfers

Some of our processors (Google) are based in the United States. Transfers rely on the UK addendum to the EU Standard Contractual Clauses plus the UK-US Data Bridge where applicable.

Children

This site is aimed at UK adult homeowners. We do not knowingly collect data from children under 13. If you believe we have done so in error, contact us and we will delete the data.

Changes to this notice

We will update this notice when our practices change. Material changes are flagged in the footer for at least 30 days. The "last updated" date at the top of this page reflects the most recent revision.