Privacy Policy

Community Home Solutions Ltd

Community Home Solutions Ltd are committed to ensuring we comply with General Data Protection Regulation (GDPR).

The below notices set out how your personal data will be used, and your rights under Articles 13 and/or 14 of the UK General Data Protection Regulation (GDPR).

The relevant notice is defined by the Funding route for your installation(s).

What information do we collect?

Community Home Solutions Ltd will process the following personal data on behalf of Scheme funders:


The purpose(s) for which we are processing your personal data is to support the delivery and administration of Energy Efficiency Schemes.

Delivery and administration of these Schemes may require linking of your data to other datasets held by the Department for Energy Security and Net Zero (DESNZ) or the Office of Gas and Electricity Markets (Ofgem).

DESNZ and Ofgem conduct evaluations of their Energy Efficiency Schemes. This may include you being contacted to take part in further research. Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt-in to that research at the point of contact.

Your data may also be used for statistical, research and fraud prevention purposes.

Legal basis of processing

The legal basis for processing your personal data is:

Public task: Processing is necessary for the performance of a task carried out in the public interest.

The specific public task is the delivery, administration and evaluation of, as well as statistical, research and fraud prevention purposes relating to Energy Efficiency Schemes aimed at raising the energy efficiency of low energy performance homes (those rated at EPC Band D, E, F or G).

Consent: Use of your personal data to contact you to take part in further research will be subject to your consent.

Sharing your details

Your personal data will be shared with:

Your personal data may also be shared with other Government departments where necessary and as required in support of the Purpose of this Privacy Notice.

We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.

How is personal data collected?

We may use different methods to collect Personal Data including the following:

If any of the Personal Data you have given to us changes, such as your contact details, please inform us without delay by contacting us using the contact details at the bottom of this notice.

Storing your data

We have put in place appropriate physical and technical measures to safeguard the Personal Data we collect in connection with our services. Save where additional consent is obtained, we limit access to Personal Data to those employees, agents, contractors and other third parties who have a need to know in service of the Purpose. They will only process Personal Data on our instructions and are subject to a duty of confidentiality.

However, please note that although we take appropriate steps to protect Personal Data no device, computer system, transmission of data or wireless connection is completely secure and, therefore, we cannot guarantee the absolute security of Personal Data shared with us over the internet.


Your personal data may be stored for up to 25 years. Where a guarantee is in place for the installation of an Energy Efficiency Measure, we may retain your data to match the lifetime of the guarantee(s) provided.

We may retain your personal data for up to seven years after the scheme ends, in line with HM Revenue & Customs record management.

The Department for Energy Security & Net Zero will hold some information about the measures installed under the Scheme, including your address and which may include some information about the Scheme eligibility criteria applying to your home or household, but not your name or other personal information, for up to 25 years for policy, research and statistical purposes.

Your rights

As a data subject you have the following rights:

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.

You have the right to request that any inaccuracies in your personal data are rectified without delay. You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.

You have the right to object to the processing of your personal data.

You have the right to withdraw consent to the processing of your personal data at any time, where processing is based on your consent.

How to make a request: If you wish to make a request associated with any of the rights listed above, contact us using the contact details at the bottom of this notice.


If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow Cheshire

0303 123 1113

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

If you wish to exercise any of the rights above, please contact our data protection officer.



Under ECO4 and The Great British Insulation scheme large energy suppliers provide funding towards energy efficiency measure installations in domestic homes. In order for you to have a measure installed into your home under the ECO4 or The Great British Insulation Scheme we need to collect some of your personal information and share this with other organisations. We will only collect and use personal data in ways that are described here, in a way that is consistent with our obligations and your rights under the law.

The personal data we collect and use

We collect your data directly and this data may include:

Providing your personal data

We will tell you if providing some of your personal data is optional. In all other cases you must provide your personal data, or we will be unable to install a measure into your home under ECO4 or The Great British Insulation Scheme.

Using your personal data: legal basis and purpose

We will process your personal data:

In some circumstances we may need to process special categories of data (e.g., Information related to your health as evidence you are eligible for the scheme). In these cases, we’ll need to rely on an additional condition for processing this information. Where the data is being processed by a government body, local authority, the Crown or a Minister of the Crown under the exercise of its functions under an enactment or rule of law, this will be based on a substantial public interest.

Any data processing of your disability benefit data will also be carried out in compliance with an “appropriate policy statement” a copy of this will be provided on request.

Sharing your personal data

Criteria used to determine data retention periods

Your rights, including accessing your data or amending correct data

You have certain rights regarding information held about you by the Controller (these do not apply in all circumstances). These include the right:


The Midlands Net Zero Hub (MNZH) as part of Nottingham City Council is leading on the regional delivery of a project called Home Upgrade Grant Phase 2 (HUG 2).

HUG 2 is a national government scheme funded by the Department for Energy Security and Net Zero (the Department) which awards grants to Local Authorities for energy efficiency and clean heating upgrades in owner occupied and private rented sector fuel-poor homes off the gas grid. It will provide energy efficiency upgrades and low carbon heating via local authority funding, to households in England that are low income, are off the gas grid or have an Energy Performance Certificate (EPC) between D and G.

The following organisations are separate data controllers who are processing your personal data under this scheme:

What personal information will the data controllers process?

Lawful basis for processing

The basis under which we use your personal information for the purposes of administering the Scheme is that this is necessary for the performance of a task carried out in the public interest by the Council or in the exercise of official authority vested in the Council.

Will my information be shared with other organisations or used for other purposes?

The data controllers will only share your personal information with other departments within their organisations and with other organisations when it is necessary to provide the services to you, and when we have a lawful reason to do so. The data controllers may also share your information when we are obliged to by law.

In relation to the Scheme, the data controllers will share your personal information with each other and with the following organisations:

The information provided by you may also be used for the purpose of any other function carried out by the Council. This may include sharing your information across the Council, or with external organisations. Information about these functions and the legal basis on which information is used for them can be found at

The information will only be used for another purpose where it is lawful to do so.

Do I have to provide the information?

You are not obliged by statute to provide the information that is specified here. However, if you do not provide the information we will not be able to assess you for eligibility or administer the Scheme to your property.

How long will the Council retain the data for?

Some of the information that you have provided will be kept for 25 years. This is in order for the Department to detect instances of fraud. The Council publish an Information Asset Register (IAR), this will outline the retention periods for the personal data we process. You can find this IAR on our website

Information Rights

The UK General Data Protection Regulation provides for the following rights as prescribed by the legislation:

However, the data controllers can restrict the above rights in certain circumstances for example to avoid obstructing an investigation, avoid prejudicing the prevention, detection, investigation or prosecution of criminal penalties or to protect the rights and freedoms of others.

Data Protection Officers

Midland Net Zero Hub (part of Nottingham City Council) you can contact the data protection officer at:

Loxley House
Station Street
or at

Staffordshire County Council
Information Governance Unit
Staffordshire County Council
1 Staffordshire Place
ST16 2DH
Or at

Community Home Solutions Ltd
Oaktree House
2 Phoenix Place
Phoenix Park
Nottingham NG8 6BA
Or at

Further Information

For more information about these rights please refer to our detailed privacy statement at:

Nottingham City Council’s Privacy Notice:

Staffordshire County Council’s Privacy Notice:

Community Home Solutions’ Privacy Notice: Privacy Page