Privacy Policy

EC Eco Energy ("we", "us", "our") is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, store, and protect your personal data when you use our website, contact us, or engage our services.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is T5 Allan House, The Maltings, Sawbridgeworth, Hertfordshire, CM21 9JX. Company Registration No. 14648818.

If you have any questions about this policy or how we handle your personal data, please contact us at info@ececoenergy.com or call 01279 295630.

We may collect and process the following categories of personal data:

• Identity data: your name, job title, and company name.
• Contact data: your email address, telephone number, and postal address.
• Property data: details about your commercial property relevant to a site survey or quotation, including address, roof type, energy consumption data, and photographs.
• Technical data: your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology identifiers on the devices you use to access our website.
• Usage data: information about how you use our website, including pages visited, time spent on pages, and navigation paths.
• Communication data: records of correspondence with us via email, telephone, contact forms, or other channels.
• Financial data: payment details provided in connection with our services, such as bank account information for direct debit or invoice payments.

We use your personal data for the following purposes:

• To respond to your enquiries and provide quotations for our services.
• To carry out site surveys, system design, and installation work you have commissioned.
• To manage our contractual relationship with you, including invoicing and payment processing.
• To register warranties and certification documentation (including MCS certificates) on your behalf.
• To send you service updates, maintenance reminders, and important safety notices related to your installation.
• To improve our website, services, and customer experience through analytics.
• To comply with legal and regulatory obligations, including Building Regulations, health and safety requirements, and tax legislation.
• To send you marketing communications where you have provided your consent, or where we have a legitimate interest in doing so (business-to-business communications).

We rely on the following lawful bases under UK GDPR to process your personal data:

• Contract: processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract (e.g., providing quotations and carrying out installations).
• Legitimate interests: processing is necessary for our legitimate business interests, provided these are not overridden by your rights. This includes improving our services, business administration, and direct marketing to existing business customers.
• Legal obligation: processing is necessary to comply with a legal obligation (e.g., retaining financial records for HMRC, meeting Building Regulations requirements).
• Consent: where you have given us clear consent to process your personal data for a specific purpose, such as subscribing to our newsletter or opting in to marketing communications.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

• Enquiry data: retained for 24 months from the date of your last interaction, unless you become a customer.
• Customer contract data: retained for 7 years following the completion of a contract, in line with HMRC requirements.
• Installation and warranty records: retained for the duration of the warranty period (up to 25 years) to support warranty claims and aftercare.
• Marketing consent records: retained until you withdraw your consent.
• Website analytics data: retained for 26 months in anonymised or pseudonymised form.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request that we correct any inaccurate or incomplete personal data.
• Right to erasure: you may request that we delete your personal data in certain circumstances.
• Right to restrict processing: you may request that we limit the way we use your data.
• Right to data portability: you may request that we transfer your data to another organisation in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where we rely on your consent to process data, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at info@ececoenergy.com. We will respond to your request within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses cookies to distinguish you from other users and to provide you with a better browsing experience. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies: required for the operation of our website, such as session management. These cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website by collecting anonymised usage data. We use this information to improve our website and services.
• Functional cookies: enable enhanced functionality and personalisation, such as remembering your preferences.
• Marketing cookies: used to deliver relevant advertisements and track the effectiveness of our marketing campaigns. These are only set with your explicit consent.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

We may share your personal data with the following categories of third parties where necessary:

• MCS and certification bodies: to register your installation and issue certification documentation.
• Distribution Network Operator (DNO): to process grid connection applications (e.g., G99 applications) on your behalf.
• Product manufacturers: to register product warranties for equipment installed at your property.
• Finance providers: where you have elected to finance your installation through a third-party provider.
• IT service providers: who host our website, manage our email systems, and provide CRM and project management tools.
• Analytics providers: who process anonymised website usage data on our behalf.
• Professional advisers: including accountants, lawyers, and insurers where necessary for business operations.
• Regulatory authorities: including HMRC, the HSE, and local building control where required by law.

We require all third parties to respect the security of your personal data and to treat it in accordance with UK GDPR. We do not permit our third-party service providers to use your personal data for their own purposes and only allow them to process it for specified purposes and in accordance with our instructions.

We do not transfer your personal data outside the United Kingdom unless adequate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

If you wish to exercise any of your data protection rights, have questions about this privacy policy, or wish to make a complaint about how we handle your personal data, please contact us:

We aim to respond to all data protection enquiries within one calendar month. In exceptional circumstances, where a request is particularly complex, we may extend this period by a further two months, but we will inform you of any such extension within the initial one-month period.