Privacy Policy

This website is operated by Manpreet Hundal, trading as MH Energy Assessors, a sole trader based in Nottingham.

MH Energy Assessors is committed to protecting your privacy and handling your personal data responsibly and in line with UK data protection laws.

We may collect and process the following personal information when you use our website:

• Name
• Phone number
• Email address
• The address of the property you need assessed
• Property details such as type and number of bedrooms
• Which services you are enquiring about
• Any other information you include in your message

We only collect information that is necessary to quote for and carry out an Energy Performance Certificate, retrofit assessment or floor plan.

Your data is collected when you:

• Submit the enquiry form on our website
• Contact us by phone or email

We do not collect unnecessary personal data.

We use your personal data to:

• Respond to enquiries and provide a price
• Arrange and carry out an assessment appointment
• Produce and send you your certificate, report or floor plan
• Provide our services and customer support

Your data is used only for legitimate business purposes related to MH Energy Assessors.

Our lawful bases for this under UK GDPR are:

• Taking steps at your request before entering into a contract, when you send an enquiry or ask for a price
• Legal obligation, for lodging a completed Energy Performance Certificate on the national register (see Section 6)
• Legitimate interests, for keeping the website secure and filtering spam out of the enquiry form
• Consent, for the optional analytics cookies described in Section 10

Your personal data may be accessed by:

• MH Energy Assessors, operated by Manpreet Hundal
• WAT Websites, who built and maintain this website and act as a data processor on our behalf

WAT Websites may access form submissions for technical support, website maintenance, and performance monitoring purposes only.

We do not sell, rent, or trade your personal data to third parties.

Every Energy Performance Certificate we produce must, by law, be lodged on the government's national EPC register. That record includes the property address and the assessment data, and it is publicly searchable. This is a legal requirement of the EPC scheme and is not optional.

We are accredited through Elmhurst Energy and ECMK, and assessment data is shared with the relevant accreditation scheme as part of their quality assurance and auditing process.

Beyond that, we will only share your data where necessary, with the service providers that keep the website running, such as hosting, database, email delivery, spam filtering and analytics services.

Some of these providers process data outside the UK, for example in the United States. Where that happens we rely on safeguards recognised under UK law, such as the UK International Data Transfer Agreement or an adequacy decision.

We may also share data where legally required to do so. All third parties are required to handle your data securely and in compliance with UK GDPR.

We keep the details you send through the website for up to 2 years from the date of your enquiry, so we can deal with it and any follow-up work. Submissions our filters flag as spam are kept for up to 90 days.

After that, the personal details (name, contact details, property address and message) are permanently removed. We keep only an anonymous count of enquiries, which tells us how the website is performing but cannot identify anyone.

Records needed for legal or accounting purposes are kept for as long as the law requires. Certificates lodged on the national EPC register are retained by the register itself, not by us, and are valid for 10 years.

You may request deletion of your data at any time (see Section 9).

We take appropriate security measures to protect your personal information, including:

• Secure hosting and systems
• Limited access to personal data
• Ongoing website maintenance and monitoring

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Receive a copy of the data you gave us in a portable format
• Withdraw consent at any time, for example via the "Cookie settings" link in the footer
• Lodge a complaint with the Information Commissioner's Office (ICO)

Please note that we cannot remove a certificate from the national EPC register, as that record is held by the government scheme and is a legal requirement of the assessment.

To exercise any of these rights, please contact us using the details above.

We use Google Analytics to see how the site is used. Its cookies are only set if you accept them in the banner. Choosing "No thanks" stores nothing on your device and deletes any cookies already there.

• _ga and _ga_ followed by a site code, set by Google Analytics, tell one visitor from another and track a single visit. They expire after 2 years.
• Your cookie choice is remembered in your browser for 6 months, then we ask again.

If you choose "No thanks", Google Analytics still runs but in a cookieless mode: it records that a visit happened, without storing anything on your device or identifying you. We use this only to count visits and enquiries in aggregate.

You can change your choice at any time using the "Cookie settings" link in the footer, or block cookies in your browser settings.

We may update this Privacy Policy from time to time. Any changes will be posted on this page.