Privacy Policy

Controller

Carbon Legacy Ltd (Company No. 06836023)
Registered office: Greenstone, Woodgate Farm, Rempstone Road, East Leake, Leicestershire, LE12 6PW, UK
Email: info@carbonlegacy.co.uk
Tel: 01664 822499

---

1) What we collect

• Identity and contact data (name, email, phone, address, company)
• Project data (site/survey details, property photos, energy usage you provide, drawings, grant/finance preferences)
• Technical data (IP address, device, browser, pages viewed, cookies/analytics IDs)
• Communications (emails, messages, call notes)
• Transactional data (quotes, contracts, invoices, warranty registrations)
• Referral data (details received from trusted partners when you request a quote)

---

2) How we collect it

• Directly from you via forms, email, phone, events, or surveys on our site
• Automatically via cookies/analytics when you use the website
• From referral partners you engage with to reach us

---

3) Why we use it (lawful bases)

• Pre-sales and contracts (assessing suitability, surveys, quotes, installs, aftercare) – Contract / pre-contract steps
• Grant schemes and compliance (e.g., Boiler Upgrade Scheme to Ofgem; MCS/DNO notifications G98/G99 where applicable) – Legal obligation / public task (for scheme admins) / legitimate interests
• Warranties and product registration – Contract / legitimate interests
• Customer service – Legitimate interests
• Analytics and site security – Legitimate interests
• Marketing – Legitimate interests (“soft opt-in”) or consent where required
• Non-essential cookies – Consent

---

4) Schemes and grid notifications

If you ask us to manage a Boiler Upgrade Scheme (BUS) application, relevant personal data will be sent to Ofgem (scheme administrator) to issue and redeem vouchers. If your installation requires DNO notification/approval (G98/G99), we may submit forms that include your details to your Distribution Network Operator.

For certifications and standards context, see MCS.

---

5) Sharing your data

We share only what’s needed with:

• Service providers (hosting, IT/CRM, email, analytics, survey tools, printers)
• Sub-contractors/engineers needed to deliver your project
• Manufacturers/warranty providers (to register your system where requested/required)
• Scheme administrators/regulators (e.g., Ofgem for BUS), certification bodies (e.g., MCS as applicable), and DNOs for grid notifications
• Professional advisers (accountants, insurers, lawyers)
• Authorities where required by law or to protect rights/security/prevent fraud)

We do not sell your data.

---

6) International transfers

Some providers may process data outside the UK/EEA. Where they do, we use recognised safeguards (UK IDTA/International Data Transfer Addendum or UK-approved Standard Contractual Clauses) and require appropriate security.

---

7) How long we keep it

• Prospects/enquiries: up to 24 months from last contact
• Customers and projects: typically 7 years after last invoice for tax/audit
• Install/warranty records: for the life of the system warranty (often 10–25 years) plus a reasonable buffer for safety, warranty and compliance
• Cookies/analytics: per cookie type—see Cookie Notice

We delete or anonymise when no longer needed.

---

8) Cookies and analytics

We use essential cookies (to run the site) and, with consent, optional cookies (analytics/marketing). Manage preferences via our cookie banner or your browser. See our Cookie Notice for details.

---

9) Your rights

• Access, rectify, erase, restrict, and portability
• Object to processing, including direct marketing
• Withdraw consent at any time (where used), without affecting prior processing
  
  

To exercise rights, email info@carbonlegacy.co.uk or write to our registered office above.
You can also complain to the Information Commissioner’s Office (ICO): Make a complaint to the ICO or call 0303 123 1113.

---

10) Security

We use appropriate technical and organisational measures (access controls, encryption where appropriate, backups, staff confidentiality). No method is 100% secure, but we aim to reduce risk proportionately.

---

11) Marketing

We may send emails about similar products/services if you’re an existing customer (you can unsubscribe anytime). For anyone else, we’ll ask for consent where required. Opt-out links are in every marketing email, or contact us.

---

12) Third-party links

Our site may link to third-party websites (e.g., manufacturers, partners). They have their own privacy policies.

---

13) Children

Our services are aimed at adults. We don’t knowingly collect data from children.

---

14) Changes to this notice

We’ll update this page when needed. Significant changes will be highlighted on the site.

---

15) Contact

Questions or requests about this policy:
Email: info@carbonlegacy.co.uk
Tel: 01664 822499
Post: Carbon Legacy Ltd, Greenstone, Woodgate Farm, Rempstone Road, East Leake, Leicestershire, LE12 6PW, UK