Privacy notice

This notice explains how Rewarm Ltd (“Rewarm”, “we”) handles your personal data. Rewarm Ltd is the data controller (company no. 0000, ICO registration 0000). Contact us at hello@rewarm.co.uk.

What we collect

• Your postcode, and the public Energy Performance Certificate we look up from it.
• Your answers in the Warmth Check: fuel type, whether you own your home, and your timeframe.
• The contact details you choose to give us to save your report: your first name and a mobile number or email.
• A record of your consent decisions, including the exact wording shown, with a timestamp and technical details (IP address, browser) for audit.

Why we use it, and our lawful basis

• To show your eligibility result — legitimate interests, before you give any contact details.
• To save your Warmth Report and send you a secure link — to take steps at your request (contract) and consent.
• To introduce you to one named installer — only on your explicit consent, recorded each time.
• To meet our legal and regulatory obligations, including keeping consent records.

Who we share it with

We never sell your details and never pass them to any company without naming that company to you first and getting your explicit consent. When you consent to an introduction, we share your name, contact number and Warmth Report with that one named installer. We use processors (for example, our hosting, SMS and email providers) under contract.

How long we keep it

We keep your lead and report while your enquiry is active and for a reasonable period afterwards. Consent records are kept as long as needed to evidence the introduction. You can ask us to delete your data at any time.

Your rights

You have the right to access, correct, delete, restrict, and port your data, and to object to processing. To get a copy of your data or ask us to delete it, email hello@rewarm.co.uk — we verify your identity first. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Analytics and cookies

We use privacy-friendly, cookie-less analytics by default, so no consent banner is needed unless we add marketing cookies later. See our cookies notice.