Privacy Policy

1. Introduction

Laravel ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, apply for government-funded energy efficiency grants, or use our services.

We operate as a service provider helping homeowners access energy efficiency improvements under government schemes including the Energy Company Obligation (ECO4) scheme. This policy outlines our practices regarding your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect information that you provide directly to us and information collected automatically when you use our services.

2.1 Information You Provide

• Personal Details: Name, address, email address, telephone number
• Property Information: Property address, property type, ownership status, EPC rating
• Eligibility Information: Benefits received, household income band, household composition
• Energy Usage: Current heating system, fuel type, energy supplier details
• Application Details: Requested improvements, additional notes, consent records
• Contact Enquiries: Messages submitted through our contact form

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent on pages, referring website
• Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Processing Grant Applications

• Assessing your eligibility for ECO4 and other government-funded schemes
• Verifying property details through the EPC Register
• Coordinating property surveys and installation appointments
• Managing your application through to completion
• Submitting required documentation to energy suppliers and scheme administrators

3.2 Service Delivery

• Arranging and scheduling installation works
• Providing customer support and responding to enquiries
• Issuing guarantees and warranty documentation
• Following up on completed installations

3.3 Legal and Regulatory Compliance

• Meeting obligations under PAS2030, TrustMark, and MCS certification
• Complying with Ofgem reporting requirements
• Maintaining records as required by law
• Responding to legal requests and preventing fraud

3.4 Communications

• Sending application status updates
• Providing appointment reminders and installation information
• Sending service-related notices
• Marketing communications (only with your consent)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform our services and fulfil your grant application
• Consent: Where you have given explicit consent for marketing communications
• Legal Obligation: Where we are required to process data by law or regulatory requirements
• Legitimate Interests: For business operations, fraud prevention, and service improvement

5. Who We Share Your Information With

To process your grant application and deliver energy efficiency improvements, we may share your information with:

5.1 ECO Scheme Partners

• Energy Suppliers: To verify eligibility and secure grant funding
• Scheme Administrators: For ECO4 scheme compliance and reporting
• TrustMark and PAS Certification Bodies: For quality assurance

5.2 Service Partners

• Installation Contractors: Gas Safe, MCS, and NAPIT registered installers
• Surveyors: For property assessments and retrofit assessments
• Product Manufacturers: For warranty registration

5.3 Regulatory Bodies

• Ofgem: The energy regulator, for scheme compliance
• Local Authorities: Where required for building regulations
• Department for Energy Security & Net Zero: For government reporting

We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including:

• Application Records: 7 years from completion or rejection
• Installation Records: Duration of guarantee period plus 7 years
• Contact Enquiries: 2 years from last contact
• Marketing Consents: Until consent is withdrawn

These retention periods may be extended where we have a legal obligation to retain data longer, or where data is required for legal claims.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data in certain circumstances
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

8. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

9. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):