GDPR Policy

Our lawful bases

We rely on these lawful bases under Article 6 of UK GDPR:

• Consent — when you tick to receive marketing emails or ask to be introduced to an installer.
• Legitimate interests — for site analytics, security and improving our guides. Always balanced against your rights.
• Legal obligation — for tax records, regulatory enquiries and similar.

Your rights as a data subject

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct anything inaccurate
• Right to erasure — ask us to delete your data
• Right to restrict processing
• Right to data portability — receive your data in a portable format
• Right to object — to processing based on legitimate interests or for marketing
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

Making a request

Email privacy@everhome-energy.co.uk and we'll respond within 30 days — usually much sooner. There's no charge for reasonable requests.

Installer data sharing

When you ask to be matched, we share only the data necessary for one installer to prepare a quote. They become a separate data controller for that information and have their own GDPR obligations. We require all network installers to demonstrate UK GDPR compliance.

Data breaches

In the unlikely event of a personal data breach that's likely to result in a risk to your rights, we'll notify the ICO within 72 hours and, where required, notify you directly.

Complaints

If you're unhappy with how we've handled your data, please contact us first via our contact page. You also have the right to complain to the Information Commissioner's Office (ICO).