Privacy Policy

Last updated: 8 March 2026

1. Who we are

nu.energy ("we", "us", "our") is a UK-based lead generation marketplace that connects businesses seeking commercial clean energy solutions with UK installers. We are the data controller for the personal data described in this policy.

If you have questions about how we handle your data, contact us at [email protected].

2. What data we collect

When you submit an enquiry through our website, we collect:

  • Business name
  • Contact name
  • Email address
  • Phone number
  • Location (town or postcode)
  • Service interest
  • Any additional message you provide

We also automatically collect:

  • The page you submitted the form from (referrer URL)
  • UTM campaign parameters (if applicable)
  • Your IP address (for rate limiting and fraud prevention)

3. How we use your data

We use your data for the following purposes:

  • Installer matching: We share your enquiry details with up to 3 UK installers who are suited to your project, location and building type. This is the primary purpose of our service.
  • Service delivery: We may contact you to clarify your requirements or provide additional information about the quoting process.
  • Fraud prevention: We use your IP address to detect and prevent spam submissions and abuse of our service.

4. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

  • Consent (Article 6(1)(a)): You explicitly consent to us sharing your details with matched installers when you tick the consent checkbox and submit the enquiry form.
  • Legitimate interest (Article 6(1)(f)): We have a legitimate interest in preventing fraud and abuse of our platform through rate limiting and spam detection.

5. Who we share your data with

We share your enquiry details with:

  • Matched installers: Up to 3 UK installers selected based on your project requirements and location. These installers will contact you directly to provide quotes.
  • Service providers: We use third-party tools (such as Slack for internal notifications and Zapier for workflow automation) to process enquiries. These providers act as data processors under contract.

We do not sell your data to third parties. We do not share your data with anyone other than matched installers and our service providers.

6. How long we keep your data

We retain your enquiry data for 24 months from the date of submission. After this period, your data is permanently deleted from our systems. You can request earlier deletion at any time (see section 7).

7. Your rights

Under UK GDPR, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data.
  • Right to data portability: Request your data in a machine-readable format.
  • Right to object: Object to processing based on legitimate interest.
  • Right to withdraw consent: Withdraw your consent at any time. This does not affect processing carried out before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Cookies

We use minimal cookies. For full details, see our Cookie Policy.

9. Data security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure server hosting, and access controls. Our servers are hosted in the EU.

10. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.