Privacy
We built the checker so that it does not need to keep anything about your searches.
We do not store the postcodes, addresses or certificates you look up.
What happens when I search?
Your browser sends the postcode to our server, which asks the official EPC register for matching certificates and returns the result to you.
We do not save these searches in a database, we do not cache the certificates, and we do not build a history of what you looked at.
Searches are sent in the body of the request rather than in the web address, so postcodes do not appear in our web server's standard access logs.
What does our server record?
Like any website, our hosting records basic technical information such as the time of a request, your IP address, the page requested and the browser type, to keep the site secure and working.
To limit abuse we keep a short-lived counter of how many lookups come from one network address in a minute, using a hashed version of the address, with no search content attached.
We do not currently run advertising or analytics cookies, and if that changes we will update this page and ask for consent where the law requires it.
Is EPC data personal data?
The data service states that address-level energy performance data counts as personal data under UK data protection law, because it relates to where people live.
For that reason we show only what the register publishes, we do not combine it with other data about people, and we do not provide bulk downloads or lists of addresses.
If you are a householder with a concern about your property's certificate, you can contact the data service at MHCLG, which holds the register, using the details on its data protection page.
What if I ask to be contacted by an installer?
The optional "request a call back" forms are separate from the checker and are not active yet.
When they are switched on, they will only send your details to a partner if you tick a clear consent box, and we will name the types of partner, explain what we collect and say how long we keep it before you submit anything.
Contact
A contact address for privacy requests will be published here before the site goes live.