Privacy Policy

1. Who We Are

EkoBuild (trading name, to be incorporated as EkoBuild Ltd) is an electric underfloor heating specialist based in the United Kingdom. We are the sole UK importer of AHT ribbon underfloor heating technology.

Registered address: Field Farm, Oakenholt Lane, Oakenholt, Flint, Flintshire, CH6 5SU

Email: hello@ekobuild.co.uk
Phone: 01244 822 918
Website: ekobuild.co.uk

For the purposes of UK GDPR, EkoBuild is the data controller responsible for your personal data.

2. What Data We Collect

We collect personal data when you interact with our website, primarily through our enquiry and quote request forms. The data we collect includes:

We do not collect any special category data (such as health, biometric or genetic data).

3. How We Collect Your Data

We collect data through:

• Contact and quote forms — when you submit an enquiry, request a quote or use our room designer tool
• Cookies and similar technologies — when you browse our website (see Section 7)
• Direct communication — when you email, phone or otherwise contact us
• Automated technologies — through analytics tools that track how you use our website

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Consent — where you have given clear consent for us to process your data for a specific purpose (e.g. submitting an enquiry form, accepting cookies)
• Legitimate interest — where processing is necessary for our legitimate business interests, such as improving our services, responding to enquiries and marketing our products, provided these interests do not override your rights
• Contract — where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract (e.g. providing a quote)
• Legal obligation — where we need to comply with a legal requirement

5. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and provide quotes for underfloor heating systems
• Process and fulfil orders
• Send follow-up communications related to your enquiry
• Provide technical advice and after-sales support
• Improve our website, products and services
• Send marketing communications where you have opted in
• Analyse website usage to improve the user experience
• Comply with legal and regulatory obligations

6. Third Parties and Data Sharing

We share your data with the following categories of third-party service providers who assist us in operating our business:

All third-party providers are contractually required to protect your data and only process it on our instructions. We do not sell, rent or trade your personal data to any third parties for marketing purposes.

Your data may be transferred outside the UK where our service providers operate internationally. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).

7. Cookies

Our website uses cookies — small text files placed on your device — to ensure the site functions properly and to help us understand how visitors use it.

Types of cookies we use:

When you first visit our website, a cookie consent banner will ask for your permission before setting any non-essential cookies. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.

You can also control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling cookies may affect website functionality.

8. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiry data — retained for up to 24 months from your last interaction. If your enquiry does not proceed to a sale, data is deleted after this period.
• Customer data — retained for 6 years after the last transaction, in line with HMRC requirements and our warranty obligations (up to 15 years for warranty claims).
• Marketing data — retained until you unsubscribe or withdraw consent.
• Analytics data — anonymised data may be retained indefinitely for statistical analysis.
• Cookie data — as specified in the cookie duration table above.

When data is no longer needed, it is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data where there is no compelling reason for continued processing
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request your data in a structured, commonly used, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at hello@ekobuild.co.uk. We will respond within one month of receiving your request.

You will not be charged a fee for exercising your rights in most circumstances. If your request is clearly unfounded or excessive, we may charge a reasonable fee or refuse the request.

10. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it, including:

• SSL/TLS encryption on all website connections
• Secure, access-controlled storage of personal data
• Regular review of data processing activities
• Limiting access to personal data to authorised personnel only

While we take every reasonable precaution, no method of data transmission or storage is 100% secure. If you believe your data has been compromised, please contact us immediately.

11. ICO Registration

EkoBuild is in the process of registering with the Information Commissioner's Office (ICO) as a data controller. Our registration number will be published here once confirmed.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the ICO:

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would appreciate the opportunity to resolve any concerns before you contact the ICO. Please reach out to us first at hello@ekobuild.co.uk.

12. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us