Last updated: April 2026

Privacy Policy

Cucumber Eco Solutions Ltd. How we collect, use and protect your personal data.

Summary

We are Cucumber Eco Solutions Ltd, a free energy consultancy registered in England and Wales. We collect the personal information you give us when you ask about energy grants, EPC ratings, the Warm Homes Plan or related services. We use that information to assess your eligibility, introduce you to accredited installers, and respond to your enquiry. We do not sell your data. You can ask to see, correct or delete the data we hold at any time.

1. Who we are

1.1. This Privacy Policy is issued by Cucumber Eco Solutions Ltd (trading as Cucumber Eco), a company registered in England and Wales under company number 11438494, whose registered office is at Kimada House, 442 Flixton Road, Urmston, Manchester, M41 6QT (the "Company", "we", "us", "our").

1.2. The Company is the data controller in respect of personal data collected through cucumbereco.co.uk and through any direct enquiry made to the Company by telephone, email, post, social media or in person.

1.3. If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us at info@cucumbereco.co.uk or by post at the registered office above.

2. The personal data we collect

2.1. Depending on how you interact with us, we may collect the following categories of personal data:

  1. identification and contact data: name, postal address, email address, telephone number;
  2. property and tenure data: postcode, property type (house, flat, bungalow), tenure (owner-occupier, private tenant, social tenant, landlord), number of bedrooms, current heating system, current EPC rating where known;
  3. eligibility data: household income band, benefits received, energy supplier, where you have provided this so we can assess your eligibility for a grant or scheme;
  4. enquiry data: the content of any message, form submission, call, email or chat you send us;
  5. technical data: IP address, browser type and version, device type, operating system, time zone, and pages viewed on cucumbereco.co.uk; and
  6. marketing preferences: your choices about receiving communications from us.

2.2. We do not deliberately collect special category data (such as health information). If you choose to share such data with us in the body of an enquiry, we will treat it as confidential and only use it to respond to your specific request.

3. How we collect personal data

3.1. We collect personal data:

  1. directly from you, when you fill in a form on cucumbereco.co.uk, request a callback, ask for an eligibility assessment, send us an email, call us on 0333 038 8113, or contact us through social media;
  2. automatically, through cookies and similar technologies when you use cucumbereco.co.uk (see clause 9 below);
  3. from accredited installers and scheme administrators we work with, where they pass your details to us as part of completing or coordinating works at your property; and
  4. from publicly available sources, including the EPC Register operated by the Department for Levelling Up, Housing and Communities, HM Land Registry, and Companies House, where we use this data to verify property and eligibility information.

4. How we use personal data and our lawful bases

4.1. We use personal data only where we have a lawful basis to do so under the UK General Data Protection Regulation. The lawful bases we rely on are:

  1. Contract. Where we are taking steps to enter into, or to perform, a contract with you, for example assessing your eligibility for a scheme, introducing you to an installer, or coordinating an installation;
  2. Legitimate interests. Where it is in our legitimate interests to operate, secure and improve cucumbereco.co.uk, to respond to enquiries, to keep records of our advice, and to prevent fraud, provided your interests and fundamental rights do not override those interests;
  3. Consent. Where you have given us your consent, for example to send you marketing communications by email or to set non-essential cookies; and
  4. Legal obligation. Where we are required to process personal data to comply with a legal or regulatory obligation, including obligations under tax law, anti-money-laundering law, and scheme-specific record-keeping requirements.

4.2. Specifically, we use personal data for the following purposes:

  1. to assess your eligibility for the Warm Homes Plan, the Boiler Upgrade Scheme, the Great British Insulation Scheme and other current government or energy-supplier-funded schemes;
  2. to introduce you to accredited installers from our network, including passing your contact details, property details and a summary of your enquiry to those installers so they can quote and arrange works;
  3. to manage our relationship with you, including answering questions, providing updates on your application, sending appointment confirmations, and following up after an installation;
  4. to send you a request to leave a review after a completed installation;
  5. to comply with our legal and regulatory obligations and with the rules of the relevant scheme administrator;
  6. to keep our records accurate, to investigate complaints, and to defend or pursue legal claims; and
  7. where you have given us consent, to send you marketing emails about energy grants, schemes, and other services we think may interest you. You can withdraw consent at any time by clicking the unsubscribe link in any email or by emailing us at info@cucumbereco.co.uk.

5. Who we share personal data with

5.1. We share personal data only where it is necessary for the purposes set out above, and only with the following categories of recipient:

  1. Accredited installers. Independent third-party installation businesses we introduce you to, holding accreditations such as MCS, PAS 2030, TrustMark and CHAS where applicable. Each installer is a separate data controller in respect of the data we share with them and will have its own privacy policy;
  2. Scheme administrators and energy suppliers. Bodies that administer government or energy-supplier-funded schemes, including Ofgem and obligated energy suppliers, where required to apply for or evidence funding;
  3. Service providers. Carefully selected suppliers who help us run our business, including hosting providers, customer relationship management systems, email and SMS providers, telephony providers, accountancy and legal advisers, who act as our data processors and only process personal data on our written instructions;
  4. Regulators and law enforcement. Where we are required to disclose personal data to comply with a legal obligation, a court order, or a request from a regulator or law enforcement body; and
  5. Successors in title. If we sell, restructure or transfer all or part of our business, we may share personal data with the buyer or successor under appropriate confidentiality terms.

5.2. We do not sell, rent or trade your personal data to any third party for that party's own marketing purposes.

6. International transfers

6.1. We aim to keep personal data within the United Kingdom and the European Economic Area. Where a service provider hosts data outside those regions, we ensure that an appropriate transfer mechanism is in place, including the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to a country covered by a UK adequacy decision.

7. How long we keep personal data

7.1. We keep personal data only for as long as is necessary for the purposes for which it was collected, including any periods required to satisfy our legal, accounting, regulatory or scheme-related obligations. Typical retention periods are:

  1. enquiry records where no installation proceeds: up to 24 months from the date of last contact;
  2. records of completed installations and grant applications: up to 7 years from the date of completion, in line with HMRC and scheme record-keeping requirements;
  3. marketing preferences: until you withdraw consent, plus a short suppression record so we can honour your unsubscribe; and
  4. website analytics data: up to 26 months in aggregated form.

7.2. When we no longer need personal data, we securely delete or anonymise it.

8. Your rights

8.1. Under UK data protection law you have the following rights, which you can exercise free of charge in most cases:

  1. the right to be informed about how we use your personal data, which is the purpose of this Privacy Policy;
  2. the right of access to a copy of the personal data we hold about you;
  3. the right to rectification of inaccurate or incomplete personal data;
  4. the right to erasure of personal data in certain circumstances, sometimes called the "right to be forgotten";
  5. the right to restrict processing of personal data in certain circumstances;
  6. the right to data portability, allowing you to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller;
  7. the right to object to processing carried out on the basis of legitimate interests or for direct marketing; and
  8. the right to withdraw consent at any time, where we are relying on consent to process your personal data.

8.2. To exercise any of these rights, please email info@cucumbereco.co.uk or write to us at the registered office. We may need to verify your identity before we can act on a request. We will respond within one calendar month, although that period may be extended by up to two further months for complex or numerous requests.

8.3. If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or by calling 0303 123 1113. We would, however, ask that you contact us first so we have the opportunity to put things right.

9. Cookies and similar technologies

9.1. cucumbereco.co.uk uses a small number of cookies. Strictly necessary cookies are used to operate the site and to remember your cookie preferences. With your consent, we also use analytics cookies to understand how visitors use the site so we can improve it.

9.2. You can change your cookie preferences at any time using the cookie settings on the site, or by clearing the cookies in your browser. Most browsers also allow you to refuse cookies entirely, although some parts of the site may not work as expected if you do so.

10. Security

10.1. We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or destruction. These measures include encryption in transit, access controls, staff training, and regular review of our suppliers. No system is perfectly secure, but we work to maintain a level of security appropriate to the risk.

10.2. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where the risk is high, will inform you without undue delay.

11. Children

11.1. Our services are aimed at adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

12. Changes to this Privacy Policy

12.1. We may update this Privacy Policy from time to time. The version in force is always available at cucumbereco.co.uk/privacy and the "Last updated" date at the top of the page tells you when it last changed. Where the change is significant, we will take reasonable steps to draw it to your attention before it takes effect.

13. How to contact us

13.1. If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us:

  1. by email at info@cucumbereco.co.uk;
  2. by telephone on 0333 038 8113; or
  3. by post to Cucumber Eco Solutions Ltd, Kimada House, 442 Flixton Road, Urmston, Manchester, M41 6QT.

Cucumber Eco Solutions Ltd. Registered in England and Wales. Company Registration Number: 11438494. Registered office: Kimada House, 442 Flixton Road, Urmston, Manchester, M41 6QT.

Part of the Cucumber Group.