In short: Home Energy Quotes is an information website with one optional service: you can ask for installer quotes, or check whether your home may qualify for the Warm Homes: Local Grant, by filling in a form. Those forms are the only place we ask for your name and contact details. What you give us goes to Lead Magnet Group Ltd, our sister company that handles enquiries, and to no more than three installers you have agreed to hear from — nobody else. Nothing optional runs in your browser until you accept it on the cookie banner, and we never sell personal data.
Who we are
Home Energy Quotes Ltd (“we”, “us”, “our”) operates the website homeenergyquotes.co.uk and is the data controller for the personal data described in this policy. We are a company registered in England and Wales, company number 17436245, with our registered office at 20 Wenlock Road, London N1 7GU. We are registered with the Information Commissioner’s Office (ICO) as a data controller under reference ZC240812.
Quote requests and grant eligibility checks are handled together with Lead Magnet Group Ltd, a company under common ownership with us (company number 17435391, registered office 20 Wenlock Road, London N1 7GU, ICO registration ZC240800). For that processing the two companies are joint controllers, and the section “Quote requests and grant eligibility checks” below explains who does what. The contact point for both companies is the same.
For anything to do with your personal data, email sales@homeenergyquotes.co.uk or call 0333 344 1115. We are not required to appoint a data protection officer; the same address reaches the people responsible for this policy.
Legal framework
This policy is provided under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR). Where we rely on “legitimate interests” we have considered whether our interest is outweighed by your rights and freedoms, and concluded it is not; you can ask us for a summary of that assessment.
What we collect, why, and on what basis
We collect only what each activity needs. Each one below lists the data involved, why we process it, the lawful basis under Article 6 of the UK GDPR, and how long we keep it.
1. Visiting the website
Data: your IP address, the page you requested, the date and time, the referring page, and your browser and device type. This is recorded automatically in our web server logs and by the security software that protects the site. An IP address is personal data.
Purpose: to deliver the pages you ask for, keep the site secure, block attacks and find faults.
Basis: legitimate interests (running a secure, working website).
Kept: server logs are rotated monthly and retained for no more than 12 months; we do not use them to identify or profile visitors.
2. Your cookie choices
Data: a random consent identifier, the cookie categories you accepted or rejected, a one-way hash of your IP address (which cannot be reversed to the address), your browser type, the page you were on, the date and time, and the country and region detected from your connection.
Purpose: to honour the choices you make on the cookie banner and to be able to demonstrate that consent was given, as PECR requires.
Basis: legal obligation (recording consent) and legitimate interests.
Kept: the consent cookie in your browser lasts 6 months; our consent record is kept for 12 months.
3. The register-interest waitlist
Data: your email address, your postcode if you choose to give it, the page or topic you registered from, and the date and time. Entries are stored in our website’s database and a copy is emailed from our web server to our own inbox at sales@homeenergyquotes.co.uk.
Purpose: to tell you when approved installers cover your area. We do not use the list for anything else and we do not send other marketing.
Basis: consent, which you give by submitting the form. You can withdraw it at any time by emailing sales@homeenergyquotes.co.uk and we will delete your entry.
Kept: until we have told you that installers cover your area or you ask us to remove you, and in any case reviewed and deleted within 24 months of being added.
4. Emailing us
Data: your email address, your name if you include it, and the contents of your message.
Purpose: to reply to you and deal with your question, feedback or complaint.
Basis: legitimate interests (responding to people who contact us); where you exercise a data-protection right, legal obligation.
Kept: 12 months after our last exchange, then deleted.
5. Analytics (only if you accept analytics cookies)
Data: if you accept analytics cookies, Google Tag Manager loads Google Analytics 4 (measurement ID G-L04DG1PXX5), which uses randomised identifiers to record the pages you visit, how you got here, your approximate location (derived from your IP address, which Google Analytics 4 does not store), and your device and browser. This is personal data; we do not describe it as anonymous.
Purpose: to understand how the site is used and improve it.
Basis: consent. If you reject analytics cookies, none of this runs.
Kept: Google Analytics retains event data for up to 14 months; its cookies last up to 2 years (see the Cookie Policy).
6. Campaign attribution (only if you accept analytics cookies)
Data: a first-party cookie called lmg_attr records the page you arrived on, the site that referred you and any campaign codes in the link you followed (such as utm parameters or advertising click identifiers). It is set only after you accept analytics cookies and lasts 90 days.
Purpose: so that if you ask for quotes or check grant eligibility, we know which campaign brought you to the site. When you submit one of those forms, the contents of the cookie are sent with your request (see 7 below); otherwise it stays in your browser and is not sent anywhere.
Basis: consent.
7. Quote requests and grant eligibility checks
Data: your name, email address, phone number and postcode; your house number or name if you choose to give it on the quote form; for the grant check also your address and title; your answers about your home and your plans — the upgrade you are interested in, property type and size, roof, heating system, insulation, glazing, parking and timing; and, for the grant check, your residential status, how long you have lived at the address, household size, whether anyone under 18 lives with you, your home’s EPC rating, any qualifying benefits you receive and whether your household income is above or below £36,000. With each request we record the date and time, your IP address, the exact wording of the consent you agreed to, and the campaign attribution described in 6 if you accepted it. We never ask for health information, bank or card details, or documents.
Purpose: to pass your request to installers who can quote for the work or discuss your eligibility; to contact you about your request; to look up your home’s energy performance certificate on the government’s public EPC register from your postcode and house number or address, so installers have the property’s details (type, age, floor area, energy rating, heating, walls and glazing) without asking you again; to know which campaigns bring genuine enquiries; and to keep a record that you consented.
Basis: consent, which you give by ticking the consent box on the last step of the form. The wording you agree to is shown on the form and repeated below. You can withdraw it at any time by emailing sales@homeenergyquotes.co.uk: we will stop processing your request and tell any installer that has already received it, although an installer that has already contacted you is responsible for its own copy from that point (see “Who receives quote and grant enquiries”).
Kept: the copy held on this website is deleted automatically 90 days after you submit the form. Lead Magnet Group keeps your request for 24 months from the date you sent it and then removes the personal details, keeping only an anonymised summary and the record that consent was given. A copy of each enquiry is emailed to our inbox and deleted within 12 months.
The consent wording on the quote form is: “I confirm I’m happy for Home Energy Quotes and Lead Magnet Group to contact me by phone, SMS or email about my quote request, and for my details to be passed to up to 3 approved installers who may contact me about it. I can withdraw my consent at any time. See our privacy policy.” The wording on the grant eligibility check is the same, but refers to your energy grant eligibility
Who receives quote and grant enquiries
- Lead Magnet Group Ltd (company number 17435391, 20 Wenlock Road, London N1 7GU, ICO registration ZC240800) operates the enquiry-handling system your request is sent to. It checks the request and, using automated rules based on your postcode and the upgrade you asked about, decides which approved installers receive it. It is a joint controller with us for this processing. Installers pay it a fee for the enquiries they receive; it never sells your details to anyone else.
- Approved installers — no more than three for each request — receive your details so that they can contact you. Each installer is an independent data controller for what you share with it from that point, has its own privacy policy, and will tell you who it is when it contacts you.
We do not pass your details to any other third party for marketing, and neither we nor Lead Magnet Group sell, rent or trade them.
What we do not collect
Outside the two forms described in section 7, we do not ask for names, postal addresses or phone numbers. Our free tools — the savings calculator, the grant checker and the export-rate table — run entirely in your browser and send nothing to us. No form on this site asks for health information, bank or card details, or documents. We do not use advertising or social-media tracking cookies, and we do not embed third-party video or map services.
Cookies
We use one strictly necessary cookie to remember your choices, and optional analytics cookies that are set only if you accept them. Nothing optional loads until you choose. Our Cookie Policy lists every cookie by name, who sets it, what it does and how long it lasts. You can change your choices at any time using the cookie settings icon at the bottom of every page.
Who processes data on our behalf
Beyond the recipients described above, the organisations that process data on our behalf, under contracts that limit what they may do with it, are:
- Soap Media Ltd (Manchester, UK) — builds and hosts the website and the enquiry-handling system on servers located in the United Kingdom, and therefore holds the server logs, form entries, the waitlist database and the consent records described above.
- Google — Google Tag Manager and Google Analytics 4, only if you accept analytics cookies.
- Defiant, Inc. (USA) — makers of the Wordfence security software that protects the site; it processes the IP addresses of requests to block attacks and may send details of malicious traffic to Defiant’s servers.
- Our email provider — delivers messages you send us, and copies of form submissions and waitlist entries, to our inbox.
We may also disclose personal data where the law requires it, for example to comply with a court order, or to protect the site, our users or others from harm.
International transfers
Our website, the enquiry-handling system, their databases and our email are held in the United Kingdom. Google and Defiant are US companies and may process the limited data described above outside the UK. Those transfers rely on the UK Extension to the EU–US Data Privacy Framework where the provider is certified, and otherwise on the UK International Data Transfer Addendum to the standard contractual clauses. You can ask us for more detail on the safeguards in place.
How long we keep your data
- Quote requests and grant checks — 90 days on this website; 24 months at Lead Magnet Group, after which the personal details are removed and only the consent record and an anonymised summary remain.
- Server and security logs — rotated monthly, kept no longer than 12 months.
- Cookie consent records — 12 months; the consent cookie itself lasts 6 months.
- Waitlist entries — until you have been told that installers cover your area or you ask us to remove you, and in any case deleted within 24 months of being added.
- Email correspondence and emailed copies of form submissions — 12 months after our last exchange.
- Analytics data — retained by Google Analytics for up to 14 months.
- Attribution cookie — 90 days, in your browser; its contents are kept with your enquiry only if you submit a form.
When personal data is no longer needed for the purpose it was collected, it is securely deleted or anonymised.
Your rights
Under the UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data (the “right to be forgotten”).
- Restriction — ask us to stop using your data for a specific purpose while a question is resolved.
- Portability — receive the data you gave us in a common, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — wherever we rely on consent (quote and grant enquiries, the waitlist, analytics and attribution cookies), withdraw it at any time. This does not affect processing carried out before you withdrew.
To exercise any of these rights, email sales@homeenergyquotes.co.uk. One request covers both Home Energy Quotes Ltd and Lead Magnet Group Ltd. We will respond within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may ask you to confirm your identity before acting on a request. In complex cases we may extend the deadline by up to two further months, and we will tell you within the first month if that is necessary.
Security
The site is served only over HTTPS, and requests passed from it to the enquiry-handling system are signed and encrypted in transit. The site is protected by a web application firewall, access to the administration area and the server is limited to named people using individual credentials, and software is kept up to date. We never take card or payment details. If a breach were to put your rights at risk we would notify the ICO within 72 hours and tell you without undue delay, as the law requires.
Automated decisions
We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile visitors. Two things are automated: the grant eligibility check only gives an indication — your local council and the installer decide whether you qualify — and Lead Magnet Group uses rules based on your postcode and the upgrade you asked about to choose which approved installers receive your enquiry. You can ask us to review either by email.
Children
The site is not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
How to complain
If you are unhappy with how we have handled your personal data, please tell us first at sales@homeenergyquotes.co.uk or on 0333 344 1115 so we can put it right. You also have the right to complain to the Information Commissioner’s Office: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; ico.org.uk.
Third-party websites
Our pages link to other websites, such as GOV.UK and energy suppliers, and to our profiles on Instagram, TikTok and Facebook. Those sites have their own privacy policies and we are not responsible for how they handle your data.
Changes to this policy
We will update this policy whenever our processing changes. Material changes will be flagged with a notice on the site. The date below tells you when it was last revised.
Last updated: 25 September 2026 (optional house number or name on the quote form; energy performance certificate look-up). Previous versions: 15 September 2026 (tenant repair questions and the housing-disrepair referral route removed; phone number added), 14 September 2026 (quote request and grant eligibility services added), 14 September 2026 (company details and cookie policy), 8 June 2026.