Privacy Policy
 

At Eco Grants Wales, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Eco Grants Wales is a company based in the United Kingdom that helps individuals access government-funded energy efficiency improvements through the ECO4 scheme.
Data Controller: Eco Grants Wales
Email: info@ecograntswales.wales
Phone: 07442015412

2. What Information We Collect

We may collect and process the following personal data:

Identification data: Name, date of birth

Contact details: Address, email address, phone number

Property data: Home ownership status, energy performance, property type

Eligibility data: Financial or benefit-related information, including proof of income or qualification for government schemes

Technical data: IP address, browser type, device type (via cookies — see Section 9)

3. How We Collect Your Data

We collect your personal data:

When you complete our eligibility forms

When you contact us via phone, email, or website

Through partner installers or assessors (with your consent)

Automatically via cookies and similar technologies when you use our website

4. How We Use Your Information

We use your information for the following purposes:

To assess your eligibility for ECO4 or related energy-efficiency schemes

To process applications and arrange home assessments or installations

To comply with legal or regulatory obligations

To respond to enquiries and provide customer service

For internal analysis and service improvement

With your consent, for direct marketing about relevant grants or services

5. Lawful Bases for Processing

We rely on the following lawful bases under the UK GDPR:

Consent – when you voluntarily submit your information or opt into marketing communications

Contract – where processing is necessary to perform our agreement with you

Legal obligation – to comply with regulatory or funding body requirements

Legitimate interests – to improve our services and operate effectively (we always balance this against your rights)

6. Who We Share Your Data With

Your data may be shared with:

Accredited and TrustMark-registered installers or assessors

Government departments and ECO scheme administrators (e.g., Ofgem)

IT service providers and secure data processors (for hosting, form handling, CRM)

Law enforcement or regulatory bodies if required by law

We ensure that all third parties respect your data and process it lawfully, securely, and under data processing agreements where required.

7. How Long We Keep Your Data

We will only keep your personal data for as long as is necessary to fulfill the purposes we collected it for, including for satisfying legal, regulatory, and reporting requirements.

Typically, this is:

Up to 2 years from the completion of work for compliance with ECO scheme regulations

Shorter periods for enquiry-only or marketing data, unless you opt in for further contact

8. Your Rights Under UK GDPR

You have the following rights:

Right to access – You can request a copy of the personal data we hold about you

Right to rectification – You can ask us to correct incomplete or inaccurate information

Right to erasure – You may request we delete your data, under certain conditions

Right to restrict processing – You can request limits on how we use your data

Right to data portability – You can request your data in a structured, machine-readable format

Right to object – You can object to processing based on legitimate interests or for direct marketing

Right to withdraw consent – If we rely on consent, you can withdraw it at any time

9. Cookies and Tracking

We use cookies and similar tracking technologies to improve your browsing experience and analyze website traffic. You can manage your cookie preferences through your browser settings. For full details, please see our Cookie Policy.

10. Data Security

We use a variety of technical and organizational measures to protect your personal data, including:

Encrypted web connections (SSL)

Secure cloud data storage

Access control and staff training

Regular data backups and security audits

11. International Data Transfers

We do not routinely transfer your personal data outside of the UK. If international transfers become necessary (e.g., for cloud hosting), we will ensure adequate safeguards are in place under UK GDPR (such as Standard Contractual Clauses).

12. Complaints

If you have concerns about how we handle your data, you can contact us directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
📍 Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
🌐 https://ico.org.uk

13. Changes to This Policy

We may update this Privacy Policy from time to time. We encourage you to review this page regularly. Updates will be posted with a new “Effective Date” at the top.