Privacy Policy

Retrofit Group Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Retrofit Group Ltd, Suite 1-3, Westbourne Business Centre, Barrhead. Data Controller. Contact: admin@retrofit-group.com.

2. What Data We Collect

We may collect the following personal data:

• Name, email address, phone number, and postal address
• Property details relevant to an energy survey or installation
• Financial information where required for grant applications
• Website usage data via cookies (see our Cookie Policy)
• Communications you send to us via email, phone, or web forms

3. How We Use Your Data

We use your data to:

• Provide and manage our installation and survey services
• Process grant applications on your behalf
• Respond to enquiries and provide customer support
• Send service-related communications
• Comply with legal and regulatory obligations
• Improve our website and services (using anonymised analytics)

We will only send marketing communications where you have given explicit consent, and you may withdraw consent at any time.

4. Legal Basis for Processing

We process your data under the following legal bases: contract performance (where you have engaged our services), legitimate interests (service improvement, fraud prevention), legal obligation, and consent (for marketing).

5. How We Share Your Data

We do not sell your personal data. We may share it with:

• MCS and relevant government bodies for grant processing
• Finance partners (Phoenix Financial Consultants Limited) where finance is requested
• Trusted subcontractors involved in delivering your installation
• IT service providers who process data on our behalf under data processing agreements

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes it was collected for, including legal, accounting, or reporting requirements. Customer records are typically retained for 7 years following completion of work.

7. Your Rights

Under UK GDPR, you have the right to: access your data, correct inaccurate data, request deletion, object to processing, and data portability. To exercise any right, contact admin@retrofit-group.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction.

9. Changes to This Policy

We may update this policy from time to time. The current version is always available on this page.