Privacy policy

Who is responsible for your information

The data controller is AIRWARM LTD, a company registered in England and Wales, company number 17362672, registered office 2 Aireview Crescent, Baildon, Shipley, BD17 7LS.

You can reach us at hello@airwarm.co.uk. Data protection is the direct responsibility of our Founder & Director. We have not appointed a Data Protection Officer and are not required to.

AIRWARM LTD is registered with the Information Commissioner’s Office, the UK’s data protection regulator.

What this website collects

One form, and only if you choose to fill it in. We want to be specific about what that means, because “we respect your privacy” is easy to write and hard to check.

• We set no cookies. See our cookie policy.
• We run no analytics, no tracking pixels, no advertising tags and no session recording. We do not know how many people visit, or which pages they read.
• The Home Energy Assessment itself runs entirely in your own browser. Your answers are worked out on your own device and are never sent to us unless you decide to send them. Nothing is saved to your device either, so closing the tab discards them.
• At the end of the assessment, and only there, we offer a form. If you fill it in and submit it, that is the point at which your details reach us. Everything you type before that stays on your machine.

There is no form anywhere else on the site — the contact page is e-mail and a telephone number, not a form.

If you send us the assessment form

The form is voluntary. You can read your assessment result, close the page, and we will never know you were here.

• What we hold: your name, the property address and postcode, your e-mail address, your telephone number, the answers you gave in the assessment, and the rough figures for occupants, rooms and radiators if you give them. We also record that you ticked the consent box, and when.
• Household needs, only if you tell us: the form asks, optionally, whether anyone at the property needs extra care when we plan the work because of their age, health, mobility or reliance on heating, hot water or essential equipment. An answer of yes, or anything you write about it, can be health information. We only send it with a second, separate tick box, we rely on your explicit consent under Article 9(2)(a) UK GDPR, we use it only to plan the work safely, and it is never used in your assessment result. You can ask us to remove it at any time.
• Why: so a person at Airwarm can look at your property properly, check the public energy performance record for it, and come back to you with a considered answer rather than a generic one.
• Our lawful basis: consent under Article 6(1)(a) UK GDPR. You tick a box that is not pre-ticked, and you can withdraw at any time by e-mailing us — withdrawing is as easy as giving it.
• Where it goes: the form sends us an e-mail and nothing else. There is no database, no customer relationship system and no third-party dashboard holding a list of enquiries. It lands in the same inbox as any other e-mail to us, described below, and is looked after the same way.
• What we look up: the Energy Performance Certificate for your address, where one exists. That is a public register published by the Ministry of Housing, Communities and Local Government under the Open Government Licence. We look it up by hand; we do not give your details to anyone in order to do it.
• How long: 12 months from our last contact if it does not lead to work, the same as any other enquiry.
• Automated decisions: the assessment result itself is produced automatically, on your own device, from the answers you gave. It is an indication about the building, not a decision about you, and it is never sent to us unless you send it. If the result is “potentially unsuitable” the page does not offer the form, because on those answers we would not recommend going further — but you can still e-mail or ring us, and a person will read what you send. Nothing about you is profiled, scored against other people, or used to predict anything beyond how a heat pump might suit the building.
• If you ask us to introduce you to someone: we do not pass your details to anyone else unless you ask us to. If you want a quotation for solar panels or battery storage we can introduce you to our current partner for that work, and we will tell you what we are sending and to whom before we send anything. If your installation later goes ahead under an MCS umbrella arrangement, the information needed for certification and any grant application is shared with the umbrella provider at that point — we will explain what that involves before you commit.

Hosting, and the one request that leaves this site

The site is a set of static files hosted by GitHub Pages, a service of GitHub, Inc. Like any web host, GitHub processes the technical request your browser makes in order to send the page back, which necessarily includes your IP address. We have no access to those records and we do not receive server logs.

Each page also loads the Montserrat typeface from Google Fonts, which means your browser makes one request to a Google server. That request includes your IP address. Google states that it does not use Google Fonts requests to build advertising profiles. This is the only request this site makes to a third party, and we name it here because it is the sort of thing most privacy policies quietly omit.

If you e-mail or telephone us

Everything that reaches us — an e-mail you write yourself, a voicemail, or the assessment form above — ends up in the same place and is looked after the same way.

• What we hold: your name, e-mail address and telephone number, anything you choose to tell us about your property or your enquiry, and our replies.
• Why: to answer you, and to keep enough of a record to pick the conversation up again.
• Our lawful basis: legitimate interests under Article 6(1)(f) UK GDPR — replying usefully to someone who has asked us a question. You approached us and expect an answer; treating that as something needing separate consent would be artificial. The assessment form is different, and runs on consent instead, because there we are asking you for details rather than answering a message you sent.
• Where it sits: Google Workspace, our business e-mail provider, acting as our processor under a written agreement. This involves a transfer to the United States, covered by the UK Extension to the EU–US Data Privacy Framework.
• How long: 12 months from our last contact if your enquiry does not lead to work — long enough to cover a heating season and a genuine change of mind, short enough that we are not hoarding it.
• Marketing: we will not add you to a mailing list because you contacted us. We do not currently send marketing at all.

Please do not send us health information you would rather we did not record. Occasionally it is relevant — a mobility need that affects where a unit can go, for example — and if you tell us, we will record only what we need to do the work safely and rely on your explicit consent to do so. You can ask us to remove it at any time.

Your rights

These are free to use and we will normally respond within one month. You can ask us to give you a copy of what we hold about you, correct it, complete it, delete it, restrict what we do with it, or send it to another organisation. You can object to our relying on legitimate interests, and you can withdraw consent where we have relied on it.

Two of these are absolute rather than balanced: if you tell us to stop sending you marketing, we stop, no questions; and you never have to justify asking what we hold.

E-mail hello@airwarm.co.uk and tell us what you want. We may need to check who you are before releasing anything. If we cannot do what you ask, we will tell you why and how to challenge it.

Complaining

Please tell us first — we would rather fix it. E-mail us with “Data protection complaint” in the subject line. We will acknowledge within 30 days, investigate without undue delay, keep you posted and tell you the outcome. We operate this process because controllers have been required to since 19 June 2026 under the Data (Use and Access) Act 2025.

You can also complain to the Information Commissioner’s Office, the UK regulator, and you do not have to come to us first: ico.org.uk/make-a-complaint, helpline 0303 123 1113, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You also have the right to go to court.

Keeping information secure

Multi-factor authentication on our business accounts, access limited to those who need it, managed devices, current software, encrypted storage and regular backups. Access is removed promptly when someone leaves. No system is perfectly secure; if a breach is likely to put your rights at risk we will report it to the ICO within 72 hours and tell you directly if the risk to you is high.

What will change, and when

Airwarm is preparing to trade, and we will update this notice before what we collect changes rather than after. We did that when the assessment form was added: this notice described it before the form could accept a single submission.

The next change we can see coming:

• Before our first survey. Heat-loss surveys and system design take place ahead of our April 2027 installation launch. Customer records — survey measurements, design assumptions, photographs, commissioning results, warranty and service history — are a much bigger set of information than a website enquiry, and will be covered here before the first survey takes place, including the subcontractors, manufacturers and compliance partners involved.

If we ever move enquiries out of e-mail and into a customer relationship system, that system will be named here first, along with what it holds and for how long.

Changes to this notice

The version and date at the top tell you which version you are reading. If a change materially affects how we use your information, we will tell affected customers directly rather than relying on you to notice.