Privacy Policy

This policy explains what personal data EPC Checker (“we”, “us”) collects, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). If you have any questions, contact us at george.ecofuturesgb@gmail.com.

Who we are

EPC Checker is a public tool that brings together publicly available information about UK properties for assessors, owners, buyers and the general public. You can search and view properties without an account. For the purposes of UK GDPR we are the data controller for the personal data described below.

What we collect

• Account data: the email/username and role of accounts created by an administrator. There is no public sign-up.
• Your activity: the properties you view (recent searches) and any properties you save, stored against your account so we can show them back to you.
• Technical data: standard server logs (e.g. IP address, browser type, timestamps) used for security and diagnostics. IP addresses used for rate-limiting are held only transiently and are not stored.
• Search logs: we record the postcode searched and whether a match was found, to understand usage. We do not store the free-text address you type.
• Cookies:see the Cookies & advertising section below.

The property information shown (EPC certificates, fabric, heating, price history, planning constraints, maps) is drawn live from official public registers — see Data sources.

How we use your data & legal bases

• To make publicly-available property/EPC information accessible to visitors — legitimate interests.
• To provide accounts and saved properties to signed-in users — performance of a contract.
• To keep the service secure and prevent abuse (including processing IP addresses for rate-limiting) — legitimate interests.
• To meet legal and record-keeping obligations — legal obligation.

We do not sell your personal data, and we do not use it for profiling.

Cookies & advertising

Today we use only strictly necessary cookies needed to run the site (e.g. to keep you signed in). These don’t require consent. We intend to show third-party advertising (Google AdSense) in future. Advertising and analytics cookies are not strictly necessary, so before any are set we will ask for your consent through a cookie-consent banner, and this section will be updated to describe them and your choices.

Data sources & third parties

Property data comes from official public sources, used under the Open Government Licence:

• Energy Performance of Buildings Register (EPB Data API) — © Crown copyright.
• planning.data.gov.uk (conservation areas, listed buildings) — © Crown copyright.
• HM Land Registry Price Paid Data.
• postcodes.io (postcode coordinates).
• Google Maps (satellite / Street View), where enabled.

We use the following processors to run the service: Supabase (database & authentication) and Vercel (hosting). They process data on our instructions under their own data-protection terms.

Where your data is held

Our hosting and database are configured to use UK/EU regions where possible. Where any provider transfers data outside the UK, they rely on appropriate safeguards (such as the UK International Data Transfer Agreement / Addendum).

How long we keep it

Account and saved-property data is kept while your account is active and removed on request or when the account is deleted. Server logs are kept only as long as needed for security and diagnostics.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these, contact george.ecofuturesgb@gmail.com. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we’d ask you to contact us first.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed.