Your information. Your choices.
Version 9 October 2026.
Who is responsible
The Renewable Directory is operated by THE RENEWABLES GROUP LTD.
Company number: 17504582 · Contact: hello@therenewabledirectory.co.uk
Registered address: Available on request
ICO registration: [ICO NUMBER]
What we use and why
| Use | Data | Basis |
|---|---|---|
| Homeowner matching and installer contact | Name, contact details, project, postcode, selected installers | Consent to the named recipients and project contact shown before submission |
| Phone verification, account security and misuse prevention | Mobile verification result, session tokens, limited request counters | Legitimate interests in protecting users and preventing misuse |
| Installer accounts, subscriptions and credit purchases | Business, billing references, coverage, preferences, purchases | Contract and steps requested before a contract |
| Accounting and required business records | Invoices, payment and dispute records | Legal obligation where applicable |
| Optional analytics and promotional emails | Opt-in preferences and non-identifying conversion counts | Consent |
| Public business listings | Source business and certification information | Legitimate interests in a useful business directory; corrections and objections available |
Who receives information
Homeowner lead sharing is currently switched off. When enabled, only the solar, battery, heat pump, EV charging or insulation installers you explicitly select for your project may buy access to your enquiry. Their names are displayed on the form and saved with your consent. The receipt contains a withdrawal link. No installer list is silently expanded after you submit.
The current service infrastructure uses Sites/Cloudflare for hosting and database storage. When connected, Resend delivers service emails, Twilio Verify checks your mobile number, and Stripe processes payments. These suppliers receive the information needed for their function. Payment card details go directly to Stripe. External website, booking and WhatsApp links have their own privacy notices.
Retention
Unconverted homeowner project details are removed or anonymised after six months. Consent and purchase evidence needed for complaints or contractual claims is retained for up to six years with limited access. Account information is kept while the account is active and reviewed for deletion after closure. Accounting records are retained for six years where required. One-time sign-in links expire after 15 minutes; sessions after seven days; phone proof after 30 minutes. Optional conversion events are kept for 13 months. Suppression records retain only what is necessary to honour an opt-out.
Your rights and withdrawal
You can request access, correction, deletion, restriction or portability where applicable, object to legitimate-interest use and withdraw consent without affecting earlier lawful use. Use the personal withdrawal link to stop future lead sharing immediately. Contact the privacy email above for other requests; we aim to respond within one month. You can complain to the Information Commissioner’s Office.
Cookies and overseas processing
Essential sign-in cookies are required for your account. Optional conversion analytics run only after you allow them; you can change this in Cookie settings. Advertising pixels are not installed. Supplier processing locations and applicable transfer safeguards must be confirmed in the operator’s supplier agreements before launch.
How we got your business details
For unclaimed installer listings, we use publicly available business information from the MCS register snapshot dated 20 June 2026, public company records such as Companies House, and business websites where recorded. Each listing identifies its recorded source and capture date. Details may include business and contact names, business address, telephone, email, website, services and certification references.
We use this information to help homeowners find installation businesses, maintain and correct listings, and invite businesses to claim their profile. Our stated basis is legitimate interests in running an accurate business directory; appearing in a public register does not mean you agreed to marketing or that we checked your current credentials. Public profile information is visible to visitors. Private CRM information is not.
You can object to this use, correct inaccuracies or remove my listing and stop directory marketing. We review requests and keep the minimum suppression information needed to honour an objection. The retention, recipients, overseas processing, privacy contact and other rights set out above also apply to listed businesses. No solely automated decision produces legal or similarly significant effects from a directory listing.
We must provide this notice when required for information obtained indirectly, including by the first communication where that is earlier. Read the ICO guidance on the right to be informed.
Directory sources
Records may come from claimed profiles, an imported MCS register snapshot, Companies House or manual entry. Each source record stores its origin and verification date. An old source record does not establish current certification or insurance.