Legal
Privacy Policy
How we collect, use, and protect your personal information.
Last updated: September 2026
ABC EPC ('we', 'us', 'our') is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
Data Controller
The data controller is Phil Handsaker trading as ABC EPC, operating in Shropshire, England. For any data-related queries, contact us at [email protected].
What data we collect
- Name, email address, and phone number — submitted via our enquiry or contact forms.
- Property address and postcode — provided when requesting an EPC or related service.
- Message content — any details you include in your enquiry.
- Technical data — IP address, browser type, and pages visited, collected automatically via server logs.
Why we collect it
- To respond to your enquiry and arrange your EPC assessment.
- To send you your completed EPC certificate and any supporting documentation.
- To comply with legal obligations as a government-accredited energy assessor.
- To improve our website and services.
Legal basis for processing
- Contract performance — processing your enquiry and delivering the EPC service you requested.
- Legal obligation — lodging EPC data with the national register as required by law.
- Legitimate interests — responding to enquiries and maintaining service records.
Who we share data with
- Elmhurst Energy — our accreditation body, to whom EPC data is submitted as required by regulation.
- The national EPC register (MHCLG) — EPC certificates are lodged on the publicly accessible register by law.
- Email service providers — used solely to deliver your enquiry confirmation and EPC documentation.
- We do not sell, rent, or trade your personal data with third parties for marketing purposes.
How long we keep your data
- Enquiry records — retained for up to 2 years to handle any follow-up queries.
- EPC assessment records — retained for a minimum of 10 years as required by accreditation rules.
- Technical/server logs — retained for up to 90 days.
Your rights
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data where there is no legal obligation to retain it.
- Right to restrict processing — you can ask us to limit how we use your data.
- Right to object — you can object to processing based on legitimate interests.
- Right to complain — you have the right to lodge a complaint with the ICO (ico.org.uk) if you believe your data has been mishandled.
Cookies
- We use essential cookies to ensure the website functions correctly. No third-party tracking or advertising cookies are set without your consent.
- If you have consented to analytics, we may use Google Analytics (GA4) to understand how visitors use the site. You can withdraw consent at any time via the cookie banner.
Security
- All data is transmitted over HTTPS. We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.
Contact us about your data
To exercise any of your rights, or if you have questions about this policy, email us at [email protected]. We aim to respond within 30 days.
[email protected]Explore ABC EPC