Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Quick Summary
What We Collect
Personal details, property information, and eligibility data for grant applications.
How We Protect It
Industry-standard encryption, secure servers, and strict access controls.
Why We Need It
To process grant applications and connect you with approved installers.
Your Rights
Access, correct, delete, or port your data at any time.
Contents
1. Data Controller
ApplyFreeBoiler.co.uk is the data controller for the personal information we collect and process. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details:
2. Information We Collect
We collect information that you provide directly to us and information that is automatically collected when you use our website.
Personal Information
- Name, address, and contact details
- Date of birth and household composition
- Property information (type, age, ownership status)
- Current heating system details
- Income and benefit information
- Energy supplier details
Technical Information
- IP address and browser information
- Device type and operating system
- Pages visited and time spent on site
- Referral source and search terms
- Cookies and similar tracking technologies
3. How We Use Your Data
We use your personal information for the following purposes:
Grant Applications
- • Assess eligibility for schemes
- • Process applications
- • Arrange surveys and installations
- • Communicate with installers
Service Improvement
- • Improve website functionality
- • Analyze user behavior
- • Provide customer support
- • Send service updates
Legal Compliance
- • Meet regulatory requirements
- • Prevent fraud and abuse
- • Respond to legal requests
- • Maintain records
Marketing (Optional)
- • Send relevant offers
- • Share energy-saving tips
- • Notify about new schemes
- • Conduct surveys
4. Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
Contract Performance
Processing necessary to provide our services and fulfill grant applications.
Legitimate Interest
Improving our services, preventing fraud, and ensuring website security.
Legal Obligation
Complying with government scheme requirements and regulatory obligations.
Consent
Marketing communications and non-essential cookies (where consent is given).
5. Data Sharing
We may share your personal information with the following parties:
Approved Installers
We share necessary information with certified installers to arrange surveys and installations.
- Government Bodies: Ofgem, local authorities, and scheme administrators for compliance and verification
- Service Providers: IT support, payment processors, and communication platforms
- Legal Requirements: Law enforcement, courts, or regulatory bodies when legally required
- Business Transfers: In the event of a merger, acquisition, or sale of assets
6. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
| Data Type | Retention Period | Reason |
|---|---|---|
| Application Data | 7 years | Regulatory requirements |
| Marketing Data | Until consent withdrawn | Consent-based processing |
| Website Analytics | 26 months | Google Analytics default |
| Support Records | 3 years | Service improvement |
7. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
Technical Measures
- • SSL/TLS encryption for data transmission
- • Encrypted data storage
- • Regular security updates and patches
- • Firewall and intrusion detection systems
- • Regular security audits and testing
Organizational Measures
- • Staff training on data protection
- • Access controls and user permissions
- • Data processing agreements with suppliers
- • Incident response procedures
- • Regular policy reviews and updates
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data
Right to Restrict Processing
Limit how we use your data
Right to Data Portability
Receive your data in a portable format
Right to Object
Object to certain types of processing
Withdraw Consent
Withdraw consent for marketing
Right to Complain
Contact the ICO if unsatisfied
To exercise your rights: Contact us at info@applyfreeboiler.co.uk or call +44 7943 111370. We will respond within one month of receiving your request.
9. Cookies and Tracking
We use cookies and similar technologies to improve your experience on our website:
Essential Cookies
Required for the website to function properly. These cannot be disabled.
- • Session management and security
- • Form submission and validation
- • Load balancing and performance
Analytics Cookies
Help us understand how visitors use our website.
- • Google Analytics (anonymized)
- • Page views and user journeys
- • Performance monitoring
Marketing Cookies
Used to deliver relevant advertisements (with your consent).
- • Conversion tracking
- • Retargeting campaigns
- • Social media integration
You can manage your cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect website functionality.
10. Third-Party Services
Our website integrates with the following third-party services:
Email Service Provider
Secure email delivery and communication
Industry-standard encryption and security
Payment Processors
Secure payment processing (if applicable)
PCI DSS compliant providers
Social Media Platforms
Social sharing and integration features
Subject to platform privacy policies
11. International Data Transfers
Some of our service providers may be located outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place:
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will:
- Post the updated policy on our website
- Update the "Last Updated" date at the top of this page
- Notify you by email if you have provided your email address
- Display a prominent notice on our website
We encourage you to review this policy periodically to stay informed about how we protect your information.
13. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Data Protection Officer
OL9 9SB
Information Commissioner's Office
If you're not satisfied with our response, you can complain to the ICO: