Introduction

Eco Energy Scheme Company (“we,” “us,” “our”) is committed to protecting your personal data and complying with applicable data protection laws. Under the Energy Company Obligation (ECO) scheme, large energy suppliers provide funding for energy efficiency measure installations in domestic homes. To facilitate the installation of these measures, we need to collect and share some of your personal information with other organizations. We will only collect and use your personal data as described in this policy, in a way that is consistent with our legal obligations and your rights under the law.

The Personal Data We Collect and Use

We collect your data directly, and this may include:

• Personal Identification: Your name, address, and date of birth (to verify your eligibility for the scheme and to contact you regarding your installation).
• Proof of Identity: This may be required to confirm eligibility or as supporting documentation.
• Benefit and Income Proof: Copies of documents showing proof of benefits and income from the Department for Work and Pensions and HMRC (limited to information necessary to confirm your eligibility for the scheme).
• Contact Information: Your phone number and email address (to facilitate necessary communications regarding the installation process).
• Optional Financial Data: The financial amount you contributed towards the cost of the installation (to assist the Department for Business, Energy & Industrial Strategy in developing future schemes).

Providing Your Personal Data

In most cases, providing your personal data is mandatory. If you do not provide the required information, we may be unable to proceed with the installation of energy efficiency measures under the ECO scheme. We will inform you if the provision of certain personal data is optional.

Using Your Personal Data (Legal Basis and Purpose)

We will process your personal data under the following legal bases:

• Contractual Necessity: We process your data as necessary to manage and undertake the contract, including the installation of energy efficiency measures in your home.
• Legitimate Interests: We process your data to:
  • Verify your eligibility for the ECO scheme.
  • Share your data with third parties who administer, support, or enforce the ECO scheme (as detailed under ‘Sharing Your Personal Data’).
  • Collect the financial contribution you made towards the installation.
• Legal Obligation: We may process your data as required to comply with legal obligations, such as responding to your data protection rights.

In certain cases, we may need to process special categories of data (e.g., health information) to verify your eligibility for the scheme. We will provide separate information on how we process such data and the legal basis for doing so.

Sharing Your Personal Data

We may share your personal data with the following:

• Department for Work and Pensions (DWP): To verify benefit eligibility via a YES/NO response provided through the Energy Saving Trust.
• Office of Gas and Electricity Markets (Ofgem):
  • To fulfill statutory duties and verify the installation of measures.
  • To share information with auditors contracted to ensure the integrity of the scheme.
• Department for Business, Energy & Industrial Strategy: May use some of your data for research, statistical purposes, or to link with other data sources they hold.
• Obligated Energy Supplier: Who contributes to the cost of the measure and processes data in accordance with legal obligations and their own privacy policies.
• Relevant Companies Supporting the Installation:
  • The installer and their certification body.
  • Technical monitoring agents, managing agents, external auditing agencies, building control inspectors, and guarantee companies.
  • The property owner, social housing provider, local authority, or managing agent (if applicable).
  • Software providers who process your data.
• Legal Requirements: We may disclose your personal data when required by law or with your consent.

Your information may be transferred to third parties outside the European Union, but only where necessary for the purposes outlined above. We will ensure all appropriate safeguards, as set out by the Information Commissioner’s Office (ICO), are in place to protect your data before any transfer takes place.

Your data will only be processed for purposes related to the ECO scheme unless you have given specific consent otherwise.

Data Retention

We will retain your personal data for the following periods:

• For Measures with a Twenty-Five-Year Guarantee (including wall insulation): Up to 25 years, or as necessary to match the lifetime of the guarantee.
• For All Other Measures: Up to seven years after the ECO scheme ends, in accordance with HM Revenue & Customs’ record management policies.

The Department for Business, Energy & Industrial Strategy may hold some information, including your address but not your name or other personal information, for up to 25 years for statistical purposes.

Your Rights

You have certain rights regarding your personal data, including:

• Access: To request access to your personal data.
• Information: To be informed about how we process your personal data.
• Correction: To request corrections to any inaccurate or incomplete data.
• Portability: To request the transfer of your data to another controller.
• Deletion: To request the deletion of your personal data.
• Restriction/Objection: To request a restriction on processing or to object to processing.
• Complaint: To lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

For more information about your rights, visit the ICO website at https://ico.org.uk/concerns/.

Contact Information

• Name and Address of the Data Controller: Eco Energy Scheme Company
• Type of Company: Energy Efficiency Installation Services
• Telephone: 07566876119
• Email: info@ecoenergyscheme.co.uk

For further details, please contact our Data Protection Officer at the above address or email.