Privacy Policy

Last updated:

Who We Are

North Wales Energy Certs is a sole trader business operating as an independent energy assessor, based in Deganwy, North Wales. We carry out domestic and commercial energy performance certificate (EPC) assessments.

For the purposes of UK data protection law, North Wales Energy Certs is the data controller for the personal data described in this policy.

Contact: info@northwalesenergycerts.co.uk | Tel: 07575 115656

What Data We Collect

Enquiry and Booking Form Submissions

When you submit an enquiry via the website contact or booking forms, we collect:

  • Full name
  • Email address
  • Phone number
  • Property address
  • Any additional notes you include in the message field
  • Service type selected
  • Date and time of submission

We also collect your IP address at the point of submission as a security measure to help detect and prevent spam and fraudulent submissions.

Click Tracking

When you click a phone number link or WhatsApp button on the website, a Google Analytics 4 event is fired (see below). This records that a click occurred along with approximate time and device type. No personally identifiable information is captured via click tracking alone.

Server Logs

Our hosting server automatically records access logs for each request made to the website. These logs contain: IP address, browser type, the page requested, date and time of access, and HTTP response code. These logs exist for security and technical diagnostic purposes.

Analytics — Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use the site. GA4 collects anonymised usage data including: pages viewed, session duration, approximate location (country/region level), device type, and referral source. GA4 uses cookies to enable this tracking — see our Cookie Policy for details.

Why We Collect It — Legal Basis

Responding to Enquiries and Booking Requests

We collect and process your contact and property details in order to respond to your enquiry, provide a quote and arrange an assessment. The legal basis for this processing is legitimate interests — it is necessary for us to process this information in order to carry out the service you have requested or are asking about.

Lead Management

We keep records of enquiries received so that we can follow up on incomplete bookings and manage our workload. The legal basis is again legitimate interests. We do not use your data for unsolicited marketing.

Security and Fraud Prevention

IP address data and server logs are collected to protect the website from spam and malicious activity. This is in our legitimate interests as a website operator.

Analytics

GA4 analytics data is collected to help us understand how the website is used and improve it. Analytics data is anonymised and does not identify individuals. This is processed under legitimate interests.

How Long We Keep Your Data

  • Enquiry and booking data (name, email, phone, property address, notes): retained for 2 years from the date of enquiry, after which it is deleted.
  • Server access logs: retained for 90 days on a rolling basis, then automatically deleted.
  • Analytics data: subject to Google's data retention settings, set to 14 months within our GA4 property.

Who We Share Your Data With

We do not sell, rent or trade your personal data. We share data with the following third parties solely to operate the service:

Brevo (formerly Sendinblue)

We use Brevo to send and receive email. When you submit a form, your details are sent to us via Brevo's transactional email infrastructure. Brevo is GDPR compliant and processes data within the EU. Their privacy policy is available at brevo.com.

Google Analytics

Anonymised usage data is shared with Google via GA4. Google's data processing terms are available at policies.google.com.

Web Hosting

The website is hosted on a server within the EU/UK. Your data may transit through the server's infrastructure as part of normal web operations. No personal data is stored in a jurisdiction that lacks adequate data protection.

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights regarding your personal data:

  • Right of access — you can ask us to confirm what personal data we hold about you and receive a copy of it.
  • Right to rectification — if any data we hold is inaccurate, you can ask us to correct it.
  • Right to erasure — you can ask us to delete personal data we hold about you, subject to any legal obligation to retain it.
  • Right to restrict processing — you can ask us to limit how we process your data in certain circumstances.
  • Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, email us at info@northwalesenergycerts.co.uk with your request. We will respond within one month.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

Changes to This Policy

We may update this privacy policy from time to time. When we do, the "last updated" date at the top of this page will be revised. We recommend checking this page periodically if you have submitted data to us.