Privacy notice

Last updated 17 September 2026. [Controller name, address and ICO registration to be added once the business is registered.]

The checker

Your answers are processed in your browser and kept in your browser's session storage so you can go back a step. They are not sent to us unless you enter your email at the end. Closing the tab clears them.

When you enter your email

We store your email address, the date, and a short summary of your checker result (your role, customer type, how heat is charged, and how many data points and flags applied). For the founding offer we also store your organisation type, the number of networks and your pledge. We do not store your individual answers.

Purpose: to send you the template, deadline reminders before each Ofgem submission window, and updates about HeatReturn. Lawful basis: consent, which you give by submitting the form and can withdraw by unsubscribing from any email or emailing us.

Business contacts we email

We sometimes email managing agents, block managers and property factors about HeatReturn without being asked. We only do this to organisations, not to individuals: firms confirmed on Companies House as a company or LLP, or Scottish partnerships confirmed from the firm's own website. We take the details from the firm's own website (its published business address and, where the site names them, the person who looks after block management) and from Companies House. We never use personal email addresses, bought lists or directory-scraped addresses, and nothing is sent automatically.

Purpose: to tell firms that run communal heating that Ofgem's heat network rules may apply to them, and about HeatReturn. Lawful basis: our legitimate interests in telling relevant businesses about a relevant service, balanced against the minimal intrusion of a short, identified email. What we keep: the firm's name, Companies House number, website, business email address, the name and job title of the block management contact if published, the date of each email and any reply. Opting out: reply "no thanks" to any email, or email [email protected], and we add the address to a suppression list and never contact it again. Retention: contacts who have not replied are deleted 12 months after the last email; opt-outs are kept so we do not email again.

Where it's held

Contact data is held in Brevo (Sendinblue SAS, Paris), whose servers are in the European Union. This website is served by Cloudflare; the form is passed through Cloudflare's network to Brevo and not stored by Cloudflare. We use Cloudflare Web Analytics, which does not use cookies or track individuals. The business-contact list is a spreadsheet held on the founder's own computer in the UK, not in any online service; emails to business contacts are sent from our ordinary mailbox.

Retention

Until you unsubscribe or ask us to delete it, or 24 months after your last interaction, whichever is sooner.

Your rights

Under UK GDPR you can ask for a copy of your data, have it corrected or deleted, or object to how we use it. Email [email protected]. You can also complain to the Information Commissioner's Office.

Cookies

None. Session storage is used only for the checker and stays on your device.