Privacy Policy
How Reliant Energy Solutions Ltd, which runs ApplyFreeBoiler.uk, collects, uses and shares your personal information.
Quick Summary
What We Collect
Your contact details, address, home and boiler details, benefits, and how you use our website.
Why We Need It
To check whether you may qualify, contact you, survey your home and carry out the work ourselves.
Who Sees It
Our team and the service providers named below. We do not sell your details or pass them to other installers.
Your Rights
Ask for a copy, a correction or deletion, object, or complain to the ICO.
Contents
1. Who We Are
ApplyFreeBoiler.uk is run by Reliant Energy Solutions Ltd, an ECO4 heating and insulation installer. We are the data controller for the personal information collected through this website, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We use your details to check your eligibility and to survey and install in your home ourselves. We do not sell your details or pass them to other installers.
Our details
Reliant Energy Solutions Ltd, company number 16100301, registered in England
2. Information We Collect
Most of what we hold comes from you through our forms. We also look up your property on the public EPC register and record how our website is used.
Eligibility checker
- The service you want, whether you own or rent your home, your boiler's age and any benefits you receive
- If you receive no benefits, the circumstances you select, which can include disability or long-term illness
- Your full name, email address, phone number, address and postcode
- Any comment you add, and the address of the page you submitted the form from
LA Flex form
- Your first and last name, email address, phone number and address
- The circumstances you select, which can include disability or long-term illness
Contact form
- Your name, email address and phone number
- Your subject, message, type of enquiry, preferred contact method and urgency
- Whether you ticked the box asking for updates
Refer-a-friend form
- Your name, email address and phone number
- The name, phone number, address and (optionally) email address of the person you recommend, plus any notes you add
Your property's Energy Performance Certificate (EPC)
- When you submit the eligibility checker, we use your building number and postcode to look up your property on the government's public EPC register
- If a certificate is found, we record details such as the energy rating, certificate number, assessment date, property type, floor area, estimated energy costs, the assessor's name and whether a boiler upgrade is recommended
Grant checker searches
- The postcode you search, and the addresses the public EPC register returns for it, with a count of how often each is searched
- The first time a postcode is searched, we also store the IP address and browser details (user agent) of that search
Website use
- Pages you visit, clicks, device and browser details, recorded by PostHog and Google Analytics, only if you allow analytics cookies. After you submit the eligibility checker, PostHog links this activity to your email address and name
- Requests to our website (including your IP address) and server logs, which can include details you submit in a form, processed by Cloudflare, which hosts the site
Health information. Disability or long-term illness is special category data. Only select it if you are happy for us to use it to assess your eligibility. If you tell us about someone else, such as a person you recommend, please make sure they are happy for you to share their details.
3. How We Use It and Why
Each use of your information has a lawful basis under UK GDPR:
| What we use it for | Lawful basis |
|---|---|
| Checking whether you may qualify, contacting you, booking a survey, carrying out the installation and submitting the work under ECO4 or LA Flex | Taking steps at your request before entering into a contract, and performing that contract (UK GDPR Article 6(1)(b)) |
| Using health information you choose to give us (disability or long-term illness) to assess your eligibility | Your explicit consent (Article 9(2)(a)). You can withdraw it at any time; it will not affect processing already carried out |
| Sending you a confirmation email and notifying our team of your enquiry by email and in our private Telegram group, and recording it in our enquiry spreadsheet | Taking steps at your request (Article 6(1)(b)) and our legitimate interest in handling enquiries promptly (Article 6(1)(f)) |
| Looking up your property on the public EPC register | Our legitimate interest in checking eligibility quickly without asking you for information that is already public (Article 6(1)(f)) |
| Contacting a person recommended to us through the refer-a-friend form | Our legitimate interest in contacting people who may qualify (Article 6(1)(f)). We tell them where we got their details when we first contact them and stop if they ask |
| Meeting scheme, building regulations and record-keeping requirements, and responding to lawful requests | Legal obligation (Article 6(1)(c)) and our legitimate interest in being able to show the work was done correctly (Article 6(1)(f)) |
| Keeping postcode search statistics and protecting the site from abuse | Our legitimate interests (Article 6(1)(f)) |
| Understanding how the website is used and fixing problems (PostHog and Google Analytics) | Your consent, given through our cookie preferences |
A member of our team reviews every enquiry. We do not make decisions about you by automated means alone. We do not send you marketing unless you ask for updates on the contact form.
4. Who We Share It With
These service providers process your information for us:
| Provider | What it does for us | Information involved |
|---|---|---|
| Cloudflare, Inc. | Hosts the website and runs the code that processes form submissions; keeps server logs | Everything sent to the website, including form details and your IP address |
| Resend (Plus Five Five, Inc.) | Sends our emails | Your form details in the notification to our team, and your confirmation email |
| Google Sheets (our enquiry spreadsheet), Gmail (our team's inboxes), Google Analytics (with your consent) and, once approved, Google AdSense (adverts) | Your form details and EPC results; website usage data | |
| Telegram Messenger Inc. | Our team's private Telegram group, where each enquiry is posted so we can respond and track its status | Name, email, phone, postcode, address, ownership, benefits, boiler age, eligibility status and the page you applied from |
| PostHog | Website analytics, only with your consent | Pages visited, clicks and device details; your email address and name after you submit the eligibility checker; the service, ownership and boiler age you selected |
| Supabase | Database for our grant checker | Postcodes searched, the IP address and browser details of the first search of each postcode, and addresses returned by the EPC register |
We also share information:
- With the government EPC register: we send your building number and postcode to the government's Find an energy certificate service to look up your property.
- If you go ahead with a survey or installation: with the energy supplier that funds your work, Ofgem as the scheme administrator, the bodies that check and record ECO4 installations, your local council if you apply under LA Flex, and Gas Safe Register to notify a new gas boiler as building regulations require.
- When the law requires it: with the police, courts or regulators.
- If our business is sold: with the buyer, who would have to use it in line with this policy.
5. International Transfers
Some of our providers are based or store data outside the UK. This is what each one publishes about it:
- Cloudflare (United States): certified under the EU-US Data Privacy Framework and its UK Extension, with standard contractual clauses as a fallback.
- Google LLC (United States): certified under the EU-US Data Privacy Framework, including the UK Extension.
- Resend (United States): its privacy policy states that it transfers data to the United States and processes it there.
- Telegram Messenger Inc. (outside the UK and EEA): states that data for accounts registered from the UK or EEA is stored in data centres in the Netherlands.
- PostHog: we use its EU Cloud, which PostHog states is hosted in Frankfurt, Germany.
- Supabase (Singapore): stores data in the region chosen for our project and states that its transfers are covered by standard contractual clauses approved by the European Commission or the UK Information Commissioner.
The UK treats countries in the European Economic Area as providing adequate protection. Contact us for more detail about the safeguards for any transfer.
6. How Long We Keep It
We keep information only for as long as we need it for the purposes above:
| Information | How long |
|---|---|
| Enquiries that do not go ahead (spreadsheet, Telegram group, email) | As long as we need to deal with your enquiry and any follow-up questions or complaints about it. We delete it sooner if you ask, unless we must keep it for a legal reason |
| Customer records where a survey or installation goes ahead | 7 years, for scheme and regulatory requirements |
| Postcode search records with IP address and browser details | There is no fixed deletion date for these records at present. You can ask us to delete them |
| Server logs | A short period set by Cloudflare's log retention |
| Cookie choice cookie (afc_cookie_consent_v1) | 365 days |
| PostHog cookie | Up to 365 days |
7. Keeping It Secure
Every page and form on this website uses HTTPS encryption. Access to enquiry records is limited to the members of our team who handle them and to the providers listed above. No website is completely secure, so please do not send us information we have not asked for, such as bank details.
8. Your Rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use it
- object to us using it on the basis of legitimate interests, including being contacted after someone recommended you
- receive information you gave us in a portable format
- withdraw your consent at any time, for health information or analytics cookies
Some rights depend on the lawful basis we rely on. They are free to use in most cases.
To use your rights: email info@applyfreeboiler.uk or call +44 7943 111370. We may ask you to confirm your identity, and we will reply within one month.
9. Cookies and Analytics
- PostHog only starts if you allow analytics cookies. It then stores a cookie and browser storage to recognise your device.
- Google Analytics only sets cookies if you allow analytics cookies.
- Google AdSense: we have applied to show Google adverts on some of our guides. No adverts run yet. When they do, we will tell Google not to use advertising storage or to personalise adverts unless you agree.
Advertising cookies
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this website and/or other websites on the internet.
- You can opt out of personalised advertising in Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at youronlinechoices.com or aboutads.info.
- Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites.
Full details, including how to change your choice, are in our Cookie Policy.
10. Complaints
Please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:
11. Changes to This Policy
We update this policy when the way we handle personal information changes. The date at the top shows when it was last changed. If a change significantly affects how we use information you have already given us, we will tell you before it applies.
12. Contact Us
For any question about this policy or your information: