Privacy Notice

Effective date: 2026-02-20
Status: Active

This Privacy Notice explains how Energy Leads South West processes personal data when you submit an enquiry or engage with us as an installer partner. We comply with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Data controller: Energy Leads South West (trading name).
Contact: use the contact details published on our website.
To exercise a data protection right, contact us with the subject line: “Data request”.

2. What data we collect

·       Customers: name, contact details, address/area, boiler details, enquiry details, timeline/urgency, and communications.

·       Installers: business name, contact details, service areas, capacity preferences, Gas Safe number (where applicable), billing details, and communications.

·       Technical data: IP address, device/browser data, and basic website analytics/cookies (if enabled).

3. How we use your data (purposes)

·       To process and validate boiler replacement enquiries.

·       To route enquiries to appropriate installers based on area and capacity.

·       To communicate with you about your enquiry or partnership.

·       To manage billing (installers) and maintain audit logs of accepted/invalid leads.

·       To improve quality and prevent fraud/spam.

·       To comply with legal obligations and enforce our terms.

4. Legal bases

·       Performance of a contract / steps prior to entering a contract (processing an enquiry; managing installer relationship).

·       Legitimate interests (routing leads, fraud prevention, quality control, system security).

·       Consent (where required for marketing; cookies where applicable).

·       Legal obligation (tax and accounting; lawful requests).

5. Who we share data with

·       Installers: customer enquiry data is shared with installers for quoting and providing boiler replacement services.

·       Service providers (processors): GoHighLevel (CRM/SMS/email), Stripe (payments), Google (Ads/Analytics where enabled), email/domain providers.

·       Authorities/professional advisers: where required by law or to protect rights and safety.

6. International transfers

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards such as adequacy regulations or standard contractual clauses and equivalent protections.

7. Data retention

·       Customer enquiry records: typically up to 24 months for audit, disputes, and improvement (unless longer retention is required by law).

·       Installer records and billing: at least 6 years to meet tax/accounting obligations.

·       Cookie preferences: retained according to the relevant system settings.

8. Your rights

·       Access, rectification, erasure, restriction, objection, portability (where applicable), and the right to withdraw consent (where consent applies).

·       You can also complain to the UK Information Commissioner’s Office (ICO).

9. Marketing

We do not sell personal data. Where we send marketing, we do so only where permitted by law. You can opt out at any time.

10. Security

We use reasonable technical and organisational measures to protect data, including access controls and audit logs.

11. Cookies

Our website may use cookies or similar technologies. Where required, we will request consent. You can control cookies in your browser settings.

12. Changes

We may update this notice by publishing a new version on our website.

-End-