Who we are
EPC2C is operated by GoGreen Alliance Ltd, a company registered in England and Wales.
- Company number: 10365619
- Registered address: 4 Shaw Park Business Village, Shaw Road, Wolverhampton WV10 9LE
- Data Protection registration: ZA324658
- Email: hello@epc2c.co.uk
- Telephone: 01902 947799
What data we collect
When you use EPC2C, we may collect the following information:
- Property postcode — entered by you to search the EPC register
- Email address — provided when purchasing a Compliance Plan or Verified Survey
- Payment information — processed by Stripe (we do not store card details)
- Property search data — the EPC records you view, stored temporarily to enable your compliance plan
- Usage data — standard server logs including IP address, browser type, and pages visited
- Cookies — session identifiers and analytics (see Cookies section below)
How we use your data
We use the information we collect for the following purposes:
- To provide and operate the EPC2C compliance planning tool
- To process payments and deliver purchased compliance plans
- To contact you regarding your compliance plan or survey booking
- To improve the service based on usage patterns
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your explicit consent.
Third parties
We share data with the following third-party services only to the extent necessary to operate EPC2C:
- Stripe — payment processing. Stripe's privacy policy applies to payment data. We receive confirmation of payment but do not store card details.
- Supabase — database and authentication infrastructure (where applicable). Data is stored in EU/UK regions.
- Vercel — hosting and edge network. Standard server logs may be retained by Vercel per their data processing terms.
- MHCLG EPC Register API — we query the government’s open EPC data register. No personal data is sent; only the postcode you enter.
Cookies
EPC2C uses the following types of cookies:
- Session cookies — essential cookies that remember your property selection during your visit. These expire when you close your browser.
- LocalStorage — we store your selected property data locally in your browser to enable the compliance tool to work after payment redirect. This is not a cookie but operates similarly.
- Analytics cookies — if enabled, these help us understand how the service is used. No personally identifiable information is included.
You can control cookies through your browser settings. Disabling session cookies may affect the functionality of the compliance tool.
Data retention
We retain data for the minimum period necessary:
- Property search sessions: cleared when you close your browser or after 24 hours
- Payment records: retained for 7 years as required by HMRC
- Email addresses: retained while your account is active, deleted within 30 days of a deletion request
- Server logs: retained for up to 90 days
Your rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your personal data (subject to legal obligations)
- Right to portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, contact us at hello@epc2c.co.uk. We will respond within 30 days.
Complaints
If you have a complaint about how we handle your data, you can contact the Information Commissioner’s Office (ICO) at ico.org.uk or by telephone on 0303 123 1113.
Changes to this policy
We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of EPC2C after changes constitutes acceptance of the updated policy.
Contact
For any privacy-related queries: hello@epc2c.co.uk · 01902 947799 · 4 Shaw Park Business Village, Shaw Road, Wolverhampton WV10 9LE