Privacy policy

Last updated: 31 October 2026. Version 1.0.

This policy explains how we collect and use personal data when you use warmhomeloans.org, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who is responsible for your data

The data controller is Blue Electrics Solar Limited, trading as Warm Home Loans.

Registered company number

16171092

Registered office

Blue HQ, Brunel Way, Baglan Energy Park, Briton Ferry, Neath, SA11 2FP

Data protection contact

privacy@warmhomeloans.org

2. What personal data we collect

We only collect what we need to answer your enquiry and quote for work.

Data you give us through the enquiry form

• Your name
• Your email address and, if you provide it, your telephone number
• Your property address or postcode
• Information about your property, your energy use and what you are considering installing
• Anything else you choose to tell us in a free-text field

Please do not send us special category data (for example health information) unless it is genuinely relevant — such as telling us you depend on medical equipment and therefore need backup power. If you do, we treat it as necessary to provide the service you have asked for.

Data collected automatically

This site sets no analytics, advertising or tracking cookies of its own. We do not run Google Analytics, pixels or similar. Our hosting provider processes standard server and security logs (including IP addresses) in order to deliver the site and protect it from abuse. The embedded enquiry form is hosted by Typeform, which sets its own cookies when the form loads — see our cookie notice.

If you arrive via a marketing link, campaign parameters in the URL (for example utm_source) are passed into the enquiry form so we can see which campaign prompted your enquiry. These are not used to build a profile of you and are not shared with advertisers.

3. Why we use it, and our lawful basis

4. Who we share it with

We do not sell your data. We share it only where necessary:

• Typeform — processes your enquiry form submission on our behalf as a data processor.
• Our hosting and CDN provider (Cloudflare) — serves this website and protects it from attack.
• Our email and business software providers — so we can receive and respond to your enquiry.
• MCS — we lodge completed installations in the MCS Installation Database, which generates the certificate your lender needs.
• Your chosen lender — only if you ask us to send documentation to them, or you provide our quote to them yourself.
• Subcontractors we use to deliver part of an installation, bound by confidentiality.
• Professional advisers, insurers and authorities where we are legally required to disclose, or need to establish or defend legal claims.

We do not pass your details to lenders, brokers or other installers as sales leads. We are not a lead-generation business.

5. International transfers

Some of our processors, including Typeform and Cloudflare, may process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement / the UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary safeguards. You can ask us for details of the safeguards in place.

6. How long we keep it

Where the law requires us to keep a record for longer, such as accounting records, we keep it only for that purpose and for as long as the law requires.

7. Your rights

Under the UK GDPR you have the right to:

• be informed about how we use your data — that is this policy;
• request a copy of the personal data we hold about you (a subject access request);
• have inaccurate data corrected;
• have your data erased, where there is no overriding reason for us to keep it;
• restrict how we use your data while a concern is resolved;
• object to processing based on our legitimate interests;
• object to direct marketing at any time — this one is absolute;
• data portability, where processing is based on consent or contract and carried out by automated means;
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email privacy@warmhomeloans.org. We will respond within one month. We may ask you to verify your identity first. There is normally no charge.

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects for you. Our eligibility checker runs entirely in your own browser: your answers are not transmitted to us or to anyone else, and nothing is stored. Any credit decision is made by your chosen lender under its own privacy policy, not by us.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), access controls, and limiting access to staff who need it. No system is perfectly secure, but if a breach occurs that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and tell you where required.

10. Children

This site and our services are aimed at property owners and are not directed at children. We do not knowingly collect data from anyone under 18.

11. Complaints

Please raise any concern with us first at privacy@warmhomeloans.org — we would rather fix it. You also have the right to complain to the UK regulator:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk/make-a-complaint

12. Changes to this policy

We may update this policy as our services or the law change. The version number and date at the top will change when we do. If a change materially affects how we use data you have already given us, we will tell you directly where we can.

13. Other sites

We link to GOV.UK and to lenders' websites for your convenience. Those organisations are separate controllers with their own privacy policies, and we are not responsible for how they handle your data.