Who we are
Great British Energy ("we", "us", "our") operates the website greatbritishenergy.com. We are an independent energy information service that helps UK homeowners access government grants, compare quotes, and save money on energy. We are not affiliated with Great British Energy (gbe.gov.uk) or any government body.
What data we collect
When you use our eligibility checker or contact forms, we may collect the following personal information:
- Name — your full name
- Email address — to send your eligibility results and follow-up information
- Phone number — so a local assessor can contact you about your free survey
- Postcode — to determine which schemes and installers are available in your area
- Property details — property type, ownership status, EPC rating, and current heating system
- Benefits information — which qualifying benefits you receive (used solely to assess grant eligibility)
- Improvement preferences — which energy efficiency measures you're interested in
How we use your data
We use your personal data for the following purposes:
- Eligibility assessment — to determine which government energy schemes (ECO4, GBIS, Boiler Upgrade Scheme) you may qualify for
- Connecting you with installers — to share your details with approved local installers who can arrange a free home survey
- Communication — to send you your eligibility results and relevant follow-up information about energy grants
- Service improvement — to improve our eligibility checker and the information we provide (using anonymised, aggregated data)
We will never sell your personal data to third parties for marketing purposes unrelated to the energy services you enquired about.
Legal basis for processing
We process your personal data based on:
- Consent — you explicitly consent to data processing when submitting the eligibility checker form
- Legitimate interests — to provide the energy grant information service you requested
Data storage
Your data is stored securely using Cloudflare infrastructure, including Cloudflare Workers and Cloudflare KV (key-value storage). Cloudflare operates data centres globally with industry-standard security measures including:
- Encryption in transit (TLS/SSL)
- Encryption at rest
- SOC 2 Type II, ISO 27001, and PCI DSS compliance
- Regular security audits and penetration testing
We retain your personal data for no longer than 24 months from the date of collection, unless you request earlier deletion. Anonymised, aggregated data may be retained indefinitely for analytical purposes.
Third parties
We may share your personal data with the following categories of third parties:
- Approved energy installers — local, vetted installers who can arrange your free home survey and deliver government-funded improvements. Only installers relevant to your area and eligible schemes receive your data.
- Cloudflare — our hosting and data storage provider (as a data processor acting on our instructions)
We do not share your data with any other third parties without your explicit consent.
Cookies
Our website uses minimal cookies:
- Essential cookies — required for the website to function correctly (e.g., form state). These do not require consent.
- Analytics cookies — we may use privacy-respecting analytics to understand how visitors use our site. No personally identifiable information is collected through analytics.
We do not use advertising cookies or tracking pixels. We do not participate in any advertising networks.
Your rights under GDPR
Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:
- Right of access — you can request a copy of all personal data we hold about you
- Right to rectification — you can ask us to correct any inaccurate or incomplete data
- Right to erasure — you can request that we delete all your personal data ("right to be forgotten")
- Right to restrict processing — you can ask us to temporarily stop processing your data
- Right to data portability — you can request your data in a structured, machine-readable format
- Right to object — you can object to our processing of your data based on legitimate interests
- Right to withdraw consent — you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, contact us using the details below. We will respond to all requests within 30 days.
Children's privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. Any significant changes will be reflected in the "last updated" date at the top of this page. We encourage you to review this page periodically.
Contact us
If you have any questions about this privacy policy, wish to exercise your data rights, or have a complaint about how we handle your data, please contact us:
- Email: [email protected]
- Website: greatbritishenergy.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113