Privacy Policy
Who We Are
C&T Eco Consultants LTD, trading as C&T Smart Energy Group Wales is the data controller for personal information collected through this website.
- Registered company number: 09312960
- Registered office: Unit 11, Milland Road Industrial Estate, Milland Road, Neath, SA11 1NJ
- Telephone: 01792 44 66 46
- Email: [email protected]
If you have a question about your personal information, or want to exercise any of the rights set out below, contact us using the details above.
What This Policy Covers
This policy covers personal information collected through our website at www.ctecoconsultants.co.uk, and by email and telephone where those arise from your use of the site.
Our site links to other organisations’ websites, including our accreditation bodies and our document and video services. This policy does not cover those sites. When you follow a link away from ours, the operator of that site becomes responsible for how they handle your information, and you should read their own privacy notice.
Information We Collect
Information you give us. When you complete an enquiry form, request a quote, ask about funding eligibility, book a boiler service, or email or call us, we collect the details you provide. Depending on the form, that can include your name, email address, telephone number, property address, details about your home and its heating system, and information about your circumstances where you are enquiring about grant-funded work.
Information collected automatically. Our web server logs your IP address, the pages you visit, the date and time of your visit, and basic technical information about your browser and device. Where you have accepted analytics cookies, we also collect information about how you move through the site.
Information from third parties. Where you apply for finance, our finance partner may share the outcome of your application with us. Where you leave us a Google review, that review and the name attached to it are public and appear on our site.
Why We Use It, and Our Lawful Basis
Under UK GDPR we must have a lawful basis for each purpose. Ours are:
| What we do | Lawful basis |
|---|---|
| Respond to your enquiry, arrange a survey, and prepare a quote | Taking steps at your request before entering a contract |
| Design, install and service your system, and handle warranty and aftercare | Performance of our contract with you |
| Check eligibility for ECO4, the Boiler Upgrade Scheme, Warm Homes or LA Flex, and submit funding applications on your behalf | Taking steps at your request before entering a contract, and our legal obligations under those schemes |
| Introduce you to our finance partner where you ask us to | Taking steps at your request before entering a contract |
| Verify identity and carry out anti-money-laundering and fraud prevention checks | Compliance with a legal obligation |
| Meet our obligations to MCS, TrustMark, RECC and Gas Safe, including submitting installation records | Compliance with a legal obligation, and our legitimate interest in maintaining our accreditations |
| Send you marketing about our products and services | Your consent, which you can withdraw at any time |
| Measure how the site is used through analytics cookies | Your consent, given through the cookie banner |
| Keep our own business, accounting and insurance records | Compliance with a legal obligation, and our legitimate interest in running and defending our business |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and you can object at any time — see Your Rights below.
Where you are enquiring about grant-funded work, we may collect information about your income, benefits, health or vulnerability. Some of this is special category data under UK GDPR. We only collect it where the funding scheme requires it, we process it on the basis of your explicit consent or because it is necessary for reasons of substantial public interest, and we share it only with the scheme administrator and where the scheme rules require.
Who We Share It With
We do not sell your personal information, and we do not share it for other organisations’ marketing.
We do use third-party services to run this website and our business. Each one only receives what it needs, is bound by a contract requiring it to protect your information, and may only use it on our instructions:
| Who | What they do | What they receive |
|---|---|---|
| Typeform | Runs the enquiry and quote forms on this site | Everything you enter into a form |
| OpenSolar | Runs the solar design and quote tool | Your contact details, property address and information about your roof and energy use |
| Provides Google Tag Manager and analytics, and hosts our Google Business Profile reviews | Your IP address and information about your visit, where you have accepted analytics cookies | |
| Trustindex | Displays our Google reviews on the site | Technical data needed to load the review widget |
| Synthesia | Hosts an embedded video on one of our pages | Your IP address and device information when that page loads |
| IONOS | Hosts this website and our email | Everything stored on the site, our server logs, and the content of email correspondence with us |
| Shermin Finance Limited | Acts as credit broker where you choose to apply for finance | The details needed to process your application |
We also share information:
- with the administrators of government funding schemes, where you are applying for grant-funded work;
- with MCS, TrustMark, RECC, Gas Safe and our insurance-backed guarantee provider, where we are required to register an installation or respond to an audit;
- with our professional advisers, insurers and auditors where necessary;
- with fraud prevention agencies. If false or inaccurate information is provided and fraud is identified, details will be passed to those agencies to prevent fraud and money laundering;
- where we are required to by law, or by a regulator or court order.
C&T Eco Consultants LTD, trading as C&T Smart Energy Group Wales is an Introducer Appointed Representative of Shermin Finance Limited, FRN 727594, company number 01276121, registered office Homeserve, Cable Drive, Walsall, WS2 7BN. Shermin Finance Limited acts as a credit broker and is not a lender. Credit is subject to status and affordability. Where you ask us to introduce you to a finance provider, we pass your details to Shermin, who become responsible for the information under their own privacy notice.
Transfers Outside the UK
Some of the services listed above store or process information outside the United Kingdom.
Where that happens, we make sure one of the following applies: the country has UK adequacy regulations in place; or the transfer is covered by an International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or another safeguard permitted by UK data protection law is in place.
You can ask us for details of the safeguards applying to a particular transfer using the contact details above.
How Long We Keep It
| Information | How long |
|---|---|
| Enquiries that do not become customers | 24 months from your last contact with us |
| Customer records, including survey, design, installation and aftercare | 6 years after the end of our contract with you, or longer where MCS, TrustMark or your guarantee provider requires it |
| Funding scheme applications and supporting evidence | For the period the scheme administrator requires |
| Accounting and tax records | 6 years, as required by HMRC |
| Marketing consents and withdrawals | For as long as we market to you, and for 2 years afterwards as a record that you opted in or out |
| Website server logs | Held by IONOS for a short period for security and troubleshooting, then deleted. IONOS sets this period; we do not keep a separate copy |
When a retention period ends we delete the information or anonymise it so it can no longer identify you.
Cookies
We use cookies to make the site work and, with your permission, to understand how it is used. When you first visit, a banner asks whether you accept non-essential cookies. Analytics and tag manager scripts are held back until you accept, and nothing non-essential loads if you decline.
You can change your choice at any time through the cookie settings link on our Cookies Policy page, and you can block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site working.
Our Cookies Policy sets out the individual cookies we use. The Information Commissioner’s Office publishes general guidance at ico.org.uk.
Security
We take reasonable steps to protect your personal information. The site is served over an encrypted connection, data is held on secure servers, and access is limited to staff who need it for their role. Our staff and surveyor areas are password protected.
No transmission over the internet is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours, and tell you directly where the risk is high.
Identity and Anti-Money-Laundering Checks
Where you apply for finance, the lender will search the files of credit reference agencies, which will record that search whether or not your application proceeds. We may ask you to provide evidence of identity. To comply with anti-money-laundering rules, the lender may need to confirm or re-confirm your name and address. We do not see the results of the lender’s credit searches, and we do not share the identity evidence you give us with anyone else unless we have your written consent or are required to by law.
Your Rights
Under UK data protection law you have the right to:
- be told how we use your information — which is what this policy is for;
- access the personal information we hold about you;
- have inaccurate information corrected;
- have information erased, where we no longer have a good reason to keep it;
- restrict how we use your information while a question about it is resolved;
- object to processing we carry out on the basis of legitimate interests, and to object to direct marketing at any time, which we will always honour;
- portability — receive certain information in a machine-readable format, or have it sent to another organisation;
- withdraw consent at any time, where we rely on it. Withdrawing consent does not affect anything we did before you withdrew it;
- not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make decisions about you in this way.
To exercise any of these, contact us using the details at the top of this policy. We will respond within one month. We can extend that by two further months for complex requests, and will tell you if we need to. There is no charge unless a request is manifestly unfounded or excessive, in which case we will explain why and what your options are.
If we refuse a request we will tell you why, and that you can complain to the ICO and seek a judicial remedy.
Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at any time:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Complaining to the ICO does not affect any other legal remedy available to you.
Changes to This Policy
We may update this policy from time to time. The date it was last changed is shown below. Where a change materially affects how we use your information, we will take reasonable steps to tell you directly rather than relying on you noticing the update.
Last updated: 28 August 2026