Privacy policy

Last updated: 1 January 2027

Who we are

[YOUR FULL NAME] trading as Survey13 is the "data controller" for the personal information described here. We are registered with the Information Commissioner's Office (ICO), registration number [ICO REGISTRATION NUMBER]. You can contact us at [BUSINESS ADDRESS], West Midlands, [POSTCODE], by email at hello@example.co.uk or by phone on 0121 000 0000.

What information we collect

• Your name, email address and phone number.
• The address and details of the property being assessed (type, bedrooms, reason for the EPC).
• Your appointment date and time, and a payment reference. Card details are entered on Stripe's secure page and are never seen or stored by us.
• Your answers to our pre-visit checklist and any photos you choose to upload (for example of a boiler).
• Photos and survey data taken by the assessor during the visit, which are needed to produce the EPC.
• Messages you send us through the contact form.

Why we use it, and our legal basis

• To carry out your booking and assessment (contract): taking payment, arranging the visit, producing and lodging the certificate.
• To send booking emails (contract): confirmation, your checklist link and a reminder the day before your visit.
• To meet legal and scheme requirements (legal obligation): EPC assessors must lodge certificates on the national register and keep supporting evidence for the period required by their accreditation scheme.
• To answer your enquiries (legitimate interests).

We do not use your information for marketing and we do not sell it.

Who we share it with

We only use trusted service providers to run the booking service, each acting under their own data protection terms:

• Google Firebase (Firestore, Cloud Storage, Authentication, hosting): stores bookings, checklist answers and photos.
• Stripe: takes your payment.
• Resend: sends our emails.
• The national EPC register and our accreditation scheme (Quidos-accredited): receive the certificate data and may audit our work.

Some of these providers may process data outside the UK. Where they do, they rely on approved safeguards such as the UK International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework.

How long we keep it

We keep booking details, checklist answers and photos for 24 months after your appointment, then they are deleted automatically. Certificates lodged on the national register are kept by the register under its own rules. Payment records may be kept for longer where tax law requires.

Your rights

You can ask us to: see the information we hold about you; correct it; delete it (unless we must keep it by law); restrict or object to how we use it; or give you a copy in a portable format. Contact us using the details above. We aim to reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

This site only uses essential storage needed to run the booking and admin sign-in. We do not use advertising or analytics cookies.