The Energy Company Obligation (ECO) scheme requires large energy suppliers to fund energy efficiency improvements in residential properties. To facilitate the installation of these measures in your home under the ECO scheme, we need to collect and share certain personal information. This data will be handled responsibly, in line with our legal obligations and your rights.

The Personal Data We Collect

We gather your personal data directly, which may include:

• Name, address, and date of birth: This information helps us verify your eligibility for the scheme and allows us to contact you about the installation.
• Proof of identity: Collected to confirm your eligibility for the scheme or to support a related component.
• Benefit and income documentation: Limited to information proving your eligibility, provided by the Department for Work and Pensions and HMRC.
• Contact details: Your phone number and email address are used for necessary communication related to the scheme.
• Optional financial contribution: Information about any personal contribution towards installation costs, to assist the Department for Business, Energy and Industrial Strategy in designing future schemes.

Providing Your Personal Data

You will be informed if providing certain personal data is optional. However, without the required data, we cannot proceed with the installation under the ECO scheme.

Use of Your Personal Data (Legal Basis and Purpose)

We will process your personal data:

• To fulfill our contract with you: This includes managing and executing the installation of the energy efficiency measure in your property.
• To pursue our legitimate interests: For instance, verifying your eligibility for the ECO scheme and sharing your data with third parties involved in the scheme’s administration.
• To comply with legal obligations: For example, responding to data protection requests you may make.

In some cases, we may need to process sensitive data (such as health-related information) to confirm your eligibility. In these instances, we will provide you with detailed information on how and why this data is being processed.

Sharing Your Personal Data

We may share your personal data with:

• The Department for Work and Pensions: To verify benefit eligibility through a YES/NO response provided by the Energy Saving Trust.
• The Office of Gas and Electricity Markets (Ofgem): To fulfill its regulatory duties, and if necessary, share data with auditors or the measure installer to ensure compliance.
• The Department for Business, Energy and Industrial Strategy: For research and statistical purposes, which may involve linking your data with other sources.
• Energy suppliers: Obligated energy companies that contribute towards the measure’s cost will process your data as necessary, following legal requirements and their privacy policies.
• Installation and support companies: This includes the installer, certification bodies, monitoring agents, managing agents, auditors, building control inspectors, and warranty providers, among others.
• Third parties outside the European Union: If required for the purposes outlined, with appropriate safeguards in place to protect your data.

Your data will only be used for purposes related to the ECO scheme unless you have given specific consent for other uses.

Data Retention Periods

• Measures with a 25-year guarantee: Your data may be retained for up to 25 years, matching the guarantee’s duration.
• Other measures: Data may be retained for up to seven years after the scheme’s conclusion, in line with HMRC’s record management policies.
• Statistical purposes: The Department for Business, Energy and Industrial Strategy may keep your address (but not your name or other personal information) for up to 25 years for statistical analysis.

Your Rights Regarding Your Data

You have certain rights concerning the data we hold about you, which include:

• Accessing your personal data.
• Being informed about how we process your data.
• Correcting any inaccuracies.
• Moving, copying, or transferring your data.
• Requesting the deletion of your data.
• Restricting or objecting to the processing of your data.
• Filing a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

For more information on your rights, visit the ICO’s website at https://ico.org.uk/concerns/.