heatpumpready.uk
Legal

Privacy Policy

How we collect, use, and protect your personal data when you use HeatPumpReady.uk.

Last updated: 2 July 2026

1. Introduction

Welcome to VerifyRecruiter Ltd ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our website, heatpumpready.uk, to assess your property's suitability for a heat pump. We are a company based in Ireland, serving the United Kingdom market.

2. Who We Are (Controller)

For the purposes of the General Data Protection Regulation (EU GDPR) and the UK Data Protection Act 2018 (UK GDPR), the data controller responsible for your personal data is:

3. The Data We Collect

To provide our AI-generated reports and quote comparison service, we collect specific information from you. This includes:

  • Identity Data: First name and last name.
  • Contact Data: Email address, telephone number, and address.
  • Property Data: Your postal code and specific property details you select, which we use alongside third-party data points (such as public Energy Performance Certificate records) to generate your custom AI heat pump report.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, and operating system (collected automatically via cookies, subject to your consent choices).

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. We use your data for the following purposes:

  • To Generate Your Report: We process your property data alongside third-party sources to create a tailored, AI-generated report regarding your property's suitability for a heat pump. (Legal basis: performance of a contract — providing the service you request.)
  • To Connect You with Installers: We process your data to match you with vetted heat pump installers so you can receive no-obligation estimates from these specialists. (Legal basis: performance of a contract and our legitimate interest in operating an introduction service.)
  • To Verify Your Contact Details: Before matching, we check that your email address is deliverable and confirm your phone number by sending a one-time SMS code. (Legal basis: our legitimate interest in preventing fraudulent or mistaken enquiries.)
  • Service Communication: To contact you regarding the status of your project submission. (Legal basis: performance of a contract.)
  • Advertising Measurement & Analytics: To understand how visitors use our site and measure the effectiveness of our advertising — see section 6. (Legal basis: your consent, given via the cookie banner.)

5. Sharing Your Personal Data

  • Heat Pump Installers: We share your property details and contact details with hand-picked, vetted contractors within our network — no more than two installers per enquiry — so they can analyse your requirements and contact you directly to provide quotes.
  • Service Providers: We use carefully selected providers who process data on our behalf, including: website and infrastructure hosting (Cloudflare), our application database (Bubble), SMS verification (Twilio), email deliverability checking (NeverBounce), workflow automation (Make), transactional email delivery, and analytics/advertising (Google — see section 6). Each provider is bound by contractual data-processing terms.
  • Legal Obligations: We may share data if required by law or to protect our rights.

Note: We do not sell your data to unrelated third parties for marketing purposes.

6. Advertising, Analytics & Cookies

With your consent (managed through our cookie banner, powered by CookieYes), we use:

  • Google Analytics: to understand how visitors use our site (pages viewed, approximate location, device type).
  • Google Ads: to measure the effectiveness of our advertising. When you submit an enquiry, we may share your email address and phone number with Google in hashed (pseudonymised) form to improve conversion measurement ("Enhanced Conversions"). Google cannot recover the original values from the hash, and this data is not used to send you marketing.

You can accept, reject, or change these choices at any time via the cookie banner, and no analytics or advertising data is collected before you consent. Strictly necessary cookies (such as your consent preference itself) are always active.

7. International Transfers

We are based in Ireland (EU), and our contractor network is located across the United Kingdom.

  • Personal data flows between Ireland (EU) and the UK. The European Commission has adopted an "adequacy decision" regarding the UK, meaning data can flow freely and securely between the two jurisdictions.
  • Some of our service providers (including Google, Cloudflare, Twilio, Bubble, and NeverBounce) process data in the United States. Where this happens, transfers are protected by appropriate safeguards — the EU–US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
  • We ensure that appropriate safeguards are in place to protect your data during any cross-border transfer.

8. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

9. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

10. Your Legal Rights

Under data protection laws (GDPR), you have rights in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data (Right to be Forgotten).
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Withdraw consent at any time (where we are relying on consent to process your data).

To exercise any of these rights, please contact us.

You also have the right to lodge a complaint with a supervisory authority: the Irish Data Protection Commission (our lead authority) or, in the UK, the Information Commissioner's Office (ICO). We would, however, appreciate the chance to address your concerns first.

11. Third-Party Links

Our website may include links to third-party websites (such as the websites of the contractors we recommend). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

12. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us: