Privacy policy
Last updated: 26 April 2026.
Who we are
The Commercial Heating Efficiency Programme (CHEP) is operated by [registered company name and number to be confirmed], a company registered in England and Wales. Registered office: [address]. ICO registration: [ICO number to be added]. We are the data controller for any personal data we hold about you.
What data we collect
When you submit our enquiry form we collect: company name, your role, number of sites, postcode, work email, optional direct phone, and the sector and spend information you provide. We do not collect special category data.
When you visit the site we collect technical data (IP address, user agent, referring URL) for security and performance monitoring. We use no analytics or marketing cookies until you accept them via the cookie banner.
Lawful basis
Inbound enquiry submissions: consent (UK GDPR Article 6(1)(a)) plus legitimate interest (Article 6(1)(f)) for follow-up about the assessment you have requested.
Cold outreach to corporate B2B contacts: legitimate interest (Article 6(1)(f)). The processing is necessary for our legitimate commercial interest in offering the programme to qualifying operators, balanced against the limited intrusion into a named work email or LinkedIn message. You can object at any time.
How we use your data
We use your data to respond to your enquiry, to schedule the assessment, to qualify fit against the programme criteria, and to send the resulting site report and proposal. We do not sell or rent personal data.
Who we share it with
Limited service providers process data on our behalf under written data processing agreements: our hosting provider, our CRM, our email service, and our calendar booking tool. Where any provider is outside the UK, transfers are protected by the UK International Data Transfer Addendum or an adequacy decision.
Retention
Enquiry records are kept for 24 months from the last contact, then deleted unless an EPC contract has been signed, in which case statutory and contractual retention periods apply. Cold outreach prospect data is reviewed every 12 months and removed if no engagement has occurred.
Your rights
Under the UK GDPR you have the right to access, rectification, erasure, restriction of processing, portability, and objection. To exercise any of these rights, emailhello@chep.co.uk. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use strictly necessary cookies to run the site. With your consent we also load analytics and marketing pixels (Google Analytics, Meta Pixel, LinkedIn Insight) to measure performance. The cookie banner records your choice in your browser's local storage. You can clear that storage at any time to be re-prompted.
Contact for data requests
Email hello@chep.co.uk with "Data request" in the subject line. We respond within one calendar month.