Last updated: March 2026
Breckland Energy is a domestic energy assessment and retrofit assessment partnership based in Attleborough, Norfolk NR17. When we refer to “we”, “us”, or “our” in this policy, we mean Breckland Energy. We are the data controller responsible for your personal data.
If you have any questions about this privacy policy or how we handle your data, please contact us at: info@brecklandenergy.co.uk
We collect and process the following types of personal data in the course of providing our services:
Contact information: Your name, email address, phone number, and postal address. We collect this when you enquire about our services, request a quote, or book an assessment.
Property information: The address, postcode, type, age, and physical characteristics of properties we assess. This data is required to produce Energy Performance Certificates and retrofit assessments.
Assessment data: Information gathered during on-site inspections, including details of heating systems, insulation, glazing, lighting, and renewable energy installations. This data is entered into government-approved software to generate your certificate.
Financial information: Invoice details, payment records, and bank transfer references. We do not store credit or debit card numbers.
Website usage data: If you visit our website, we may collect anonymised data about your visit, including pages viewed, time on site, and referring source. This is collected through standard analytics tools.
Communication records: Copies of emails, messages, and notes from phone calls related to your enquiry or assessment.
We process your personal data for the following purposes:
To provide our services: We need your contact details and property information to carry out energy assessments, produce EPCs and retrofit reports, and communicate with you about your booking and results.
To comply with legal obligations: EPC data must be lodged on the government’s official EPC register as required by law. We are also required to maintain records for tax and accounting purposes.
To manage our business: We use your data for invoicing, appointment scheduling, and responding to your enquiries.
To improve our services: We may use anonymised, aggregated data to understand how our services are used and to improve our offerings.
To communicate with you: With your consent, we may send you information about regulatory changes (such as the 2030 EPC C deadline), service updates, or offers that may be relevant to you. You can opt out of marketing communications at any time.
We process your personal data on the following legal bases under UK GDPR:
Contractual necessity: Processing required to fulfil our contract with you (i.e., carrying out the assessment you have booked and delivering your certificate).
Legal obligation: Processing required to comply with our legal obligations, including lodging EPCs on the government register, maintaining tax records, and complying with accreditation scheme requirements.
Legitimate interests: Processing necessary for our legitimate business interests, such as managing enquiries, improving our services, and maintaining business records, provided these interests do not override your rights and freedoms.
Consent: Where we send you marketing communications, we do so on the basis of your consent. You may withdraw consent at any time by contacting us or using the unsubscribe link in any marketing email.
We share your personal data only where necessary and with the following categories of recipients:
Government EPC register: Assessment data and property details are lodged on the official Energy Performance Certificate register as required by law. This data becomes publicly accessible via the register.
Our accreditation scheme: Your assessment data may be reviewed by our accreditation body (e.g., Elmhurst Energy, Stroma, or Quidos) as part of their quality assurance and auditing processes.
HMRC: Financial records, including invoices, are retained and may be shared with HMRC as required for tax purposes.
Software providers: We use RdSAP software to produce EPCs. Your property data is processed through this software. Our software providers are required to handle data in accordance with UK GDPR.
We do not sell, rent, or trade your personal data to any third parties for marketing or commercial purposes.
Assessment records and EPC data: We retain assessment records for a minimum of 15 years from the date of the assessment, in line with professional record-keeping requirements and the 10-year validity period of EPCs.
Financial records: Invoices and payment records are retained for a minimum of 6 years in accordance with HMRC requirements.
Enquiry and communication records: Records of enquiries that do not result in a booking are retained for up to 2 years, after which they are securely deleted.
Marketing consent records: If you opt in to marketing communications, we retain your consent record until you withdraw it.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include password-protected devices and software, secure cloud storage for business records, and limiting access to personal data to only those who need it to perform their role.
Under UK GDPR, you have the following rights regarding your personal data:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data.
Right to erasure: You can ask us to delete your data, subject to our legal obligations to retain certain records.
Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
Right to data portability: You can request your data in a structured, commonly used format.
Right to object: You can object to our processing of your data where we rely on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at info@brecklandenergy.co.uk. We will respond within one month of receiving your request.
Our website uses only essential cookies required for the site to function correctly. We do not use tracking cookies or third-party advertising cookies. If we implement analytics tools in the future, we will update this policy and obtain your consent where required.
Our website may contain links to external websites (e.g., the government EPC register, accreditation scheme websites). We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies before providing any personal data.
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or services. The “last updated” date at the top of this page indicates when the policy was most recently revised. We encourage you to review this policy periodically.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:
Breckland Energy
Attleborough, Norfolk NR17
Email: info@brecklandenergy.co.uk
Phone: [Your Phone Number]