Privacy
Not yet complete. ICO registration and the company details below are filled in from the environment. No enquiry form may go live until they are.
Who we are
The operator of this site.
What we collect, and why
- Your answers to the Checker covers premises type, building age, employee numbers, what is on site, and your postcode. These decide which duties apply to you and which providers cover your area.
- Your contact details means your name, your email and, if you give it, your phone number. Used to send your results and, where you have consented, to introduce you to providers.
- Server logs are written automatically by the web server for every page it serves. Each line records the IP address the request came from, the time, the page asked for, the browser's own description of itself, and the page you arrived from. We rely on legitimate interests here: keeping the site up and defending it from attack, and knowing which questions people actually have.
Cookies, and what we do not use
There is no analytics cookie, no advertising cookie, and no tracking pixel on this site. We do not use Google Analytics and we do not embed anything that reports your visit to a third party. That is why there is no cookie banner: there is nothing here to ask you about.
One cookie is set, ours, on every page you open. It holds nothing but a reference number. Everything that reference points at stays on our own server, not on your machine.
It does three jobs: it carries your answers from one step of the Checker to the next, it secures every form on the site against being submitted from somewhere else, and it lets us tell a real browser from an automated one before we hand anyone on to a provider.
It expires after two hours, cannot be read by any script in your browser, and is never sent to another website. It carries no name, no identifier that follows you between visits, and nothing about who you are.
Because they exist to run the service and keep it secure rather than to watch you, they are strictly necessary cookies and the law does not require us to ask permission for them. That is why there is no banner. If we ever add anything that is not strictly necessary, analytics included, we will ask first.
We measure traffic by reading the server logs described above, which the server writes whether or not anyone is counting.
Who we share it with
Only the providers you consent to be introduced to, and never more than three. We tell you who they are. If you do not tick the consent box, we send you your results and nobody contacts you.
How long we keep it
Enquiry records are kept for six years, because that is the period in which a referral could be disputed. Ask us to delete yours earlier and we will, unless we are required to keep it.
Server logs are kept for 180 days and then deleted. An IP address is personal data, so we hold it for a stated period rather than indefinitely.
Where your data is held
In the United Kingdom. The server, the database and the enquiry records are all in London. Nothing you give us is transferred outside the UK, so none of the international transfer machinery applies and there is no third country in the picture at all.
We say this plainly because a lot of UK websites are hosted abroad without mentioning it. If a site collects your name, your email and your postcode and does not tell you which country that ends up in, that is worth noticing.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw consent at any time. You can also complain to the Information Commissioner's Office at ico.org.uk .