Legal

Privacy Policy

This policy explains what personal data we collect, how we use it, and your rights under UK data protection law.

Last updated: 28 July 2026

Who we are

Curator Renovatis operates the retrofit grant eligibility platform at this website. We are the data controller for the personal information you provide when using this service.

For any data-related enquiry, you can contact us at contact@curatorrenovatis.co.uk.

What personal data we collect

We collect information you provide directly when using our eligibility check and lead capture form. This includes:

  • ·Contact details: name, email address, phone number
  • ·Location data: postcode
  • ·Property information: property type, construction era, EPC rating, heating and insulation details
  • ·Household information: tenure, qualifying benefit status, approximate income band, household circumstances
  • ·Consent records: when and how you gave consent to be contacted
  • ·Eligibility results: the output of our eligibility engine based on your answers

We do not collect sensitive personal data such as health information, ethnicity, or financial account details.

How we use your data

We use your personal data to:

  • ·Run our eligibility engine and generate an indicative result for you
  • ·Create and manage a lead record so a case manager can follow up with you
  • ·Send you an email or call you (where you have consented) to explain your options
  • ·Share your details with a certified installer where you have explicitly consented and we believe a genuine grant opportunity exists
  • ·Improve the accuracy of our eligibility engine using de-identified property data (see the dedicated section below for details)
  • ·Comply with our legal obligations

Legal basis for processing

We rely on the following legal bases under UK GDPR:

Consent

Where you tick the consent box on our eligibility check or lead capture form, you consent to us processing your data for the purposes stated at that point. You can withdraw consent at any time.

Legitimate interests

We may process some data on the basis of our legitimate interest in operating and improving our service, where your interests and rights do not override ours.

Legal obligation

We may need to process or retain data to comply with legal obligations, including responding to lawful requests from regulatory authorities.

Who we share your data with

We do not sell your personal data. We may share it with:

  • ·Supabase (our database provider): your data is stored securely on their servers under a data processing agreement
  • ·Resend (our email delivery provider): used to send you notifications and updates
  • ·MCS-certified and TrustMark-registered installers, but only where you have explicitly consented and we believe a credible grant opportunity exists
  • ·Professional advisers and regulators, only where required by law

We never share your data with advertising networks, data brokers, or marketing aggregators.

De-identified data for accuracy improvement

When you complete the eligibility check, we record a de-identified summary of your property and result. This record contains no name, email address, phone number, or full postcode. We store only the first part of your postcode (for example, “SE18” or “M4”), together with property characteristics such as property type, wall type, heating system, and EPC band.

This is the same practice described in the eligibility check itself: “Property details may be used, in fully de-identified form, to improve the accuracy of future results.”

We use these records to understand how well the eligibility engine performs across different property types, and to improve the accuracy of future results. This data is never linked back to you personally and is not shared with third parties. The legal basis for this processing is our legitimate interest in providing an accurate and reliable service.

Data retention

We retain your personal data for as long as necessary to manage your enquiry and any follow-up activity, or as required by law. Lead records are typically retained for up to two years from last contact.

You can request deletion of your data at any time by contacting us. See “Your rights” below.

Your rights

Under UK data protection law, you have the right to:

  • ·Access a copy of the personal data we hold about you
  • ·Correct inaccurate personal data
  • ·Request deletion of your personal data (the right to erasure)
  • ·Restrict how we use your data
  • ·Object to processing based on legitimate interests
  • ·Withdraw consent at any time (where processing is based on consent)
  • ·Request a portable copy of your data

To exercise any of these rights, contact us at contact@curatorrenovatis.co.uk. We will respond within one month. If you are unhappy with how we handle your request, you can complain to the Information Commissioner's Office (ICO).

Security

We use industry-standard security measures to protect your data, including encrypted data storage, access controls, and secure connections (HTTPS). No system is completely secure. If you believe your data has been compromised, please contact us immediately.

Cookies

We use cookies to maintain your session during the eligibility check. See our Cookie Policy for details.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. Continued use of the platform after changes are published constitutes acceptance of the updated policy.

Contact us about privacy

Email: contact@curatorrenovatis.co.uk