Simple EPC
Privacy Policy
This policy explains how Garden One Ltd ("we", "us") — operator of simple-epc.uk and controller of your personal data — collects and uses your data. Privacy contact: privacy@simple-epc.uk.
1. What we collect
From you (quote request / booking): email address, property postcode, property details (type, bedrooms), name and phone number.
Automatically: a pseudonymised identifier derived from your IP address (we do not store the IP itself), pages requested, referring site, and — if you arrive from a Google advert — the Google click identifier ("gclid").
2. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Prepare and send your quote | Steps at your request before a contract |
| Deliver your booking, incl. instructing our assessment provider | Performance of a contract |
| Obtain the underlying assessment quote from our provider | Legitimate interests / pre-contract steps |
| Protect the Website from spam and abuse | Legitimate interests |
| Measure traffic and advertising effectiveness | Legitimate interests |
3. Who we share your data with
Our assessment providers. To obtain your quote and deliver your booking, we share your contact details, property postcode and property details with the accredited assessor or assessment company we appoint to carry out your assessment. Depending on the job this may be an assessment company such as Easy EPC, or an accredited domestic energy assessor engaged directly from the national register. The accredited assessor lodges your EPC on the national EPC register as required by law, and to that extent handles your data as a separate controller under their own privacy policy.
Service providers acting for us: Google Cloud (hosting), SMTP2GO (email delivery).
Google (advertising measurement): where you arrived via a Google ad, we share the click identifier and limited conversion data to attribute the booking to the advert.
Legal recipients where disclosure is required by law. We do not sell your personal data.
4. Where your data is processed
Your booking details are hosted in the United Kingdom (Google Cloud, London region). Our email provider, SMTP2GO, processes email within the EU (Netherlands), which is covered by UK adequacy regulations. Where we use Google for advertising measurement, limited data is processed outside the UK under appropriate safeguards such as the UK International Data Transfer Agreement. We keep your data within these arrangements and do not transfer it elsewhere without an appropriate safeguard in place.
5. Retention
Quote-only enquiries: 1 year. Bookings and related records: 6 years. Pseudonymised analytics: 5 years.
6. Cookies
We do not use non-essential cookies or similar tracking technologies. Our analytics run on our own server using a pseudonymised identifier; nothing is stored on or read from your device for tracking, so we do not show a cookie banner.
7. Your rights
You may request access, correction, erasure, restriction, portability, object to processing, and withdraw any consent, via privacy@simple-epc.uk. We respond within one month. Where relevant we will pass requests to the assessment provider engaged for your booking.
8. Complaints
Contact us first at complaints@simple-epc.uk; we will respond under our complaints procedure within 2 weeks. You may also complain to the Information Commissioner's Office: ico.org.uk / 0303 123 1113.
9. Automated decision-making
We do not make solely automated decisions with legal or similarly significant effects about you.
10. Changes
We may update this policy; the current version and date always appear here.