Summary in plain English: We collect your contact details and home energy information to match you with local installers. We share only what's necessary, only with vetted trade partners, and only with your consent. We don't sell your data to anyone.
1. Who we are
ChillBill is a UK-based lead generation platform that connects homeowners with local energy efficiency and air conditioning installers. The service is operated by ChillBill Ltd, a company registered in England and Wales (company number 17488225). Registered office: 14 Aldren Road, London, SW17 0JT.
Data controller contact:
Email: privacy@chill-bill.co.uk
Website: www.chill-bill.co.uk
We are registered with the Information Commissioner's Office (ICO) as a data controller.
2. What data we collect
When you use our free home energy assessment
- Your name, email address and phone number
- Your home postcode and address
- Information about your home: type, size, current heating, existing improvements
- Your energy upgrade interests (e.g. air conditioning, solar panels, insulation)
- Any notes you voluntarily provide
- EPC data retrieved from the UK government's public register based on your postcode (if available)
When you use our EPC lookup tool
- Your postcode and house number (used only to retrieve your EPC record)
- We do not store this data unless you proceed to the full assessment
When you register as a trade partner
- Your name, company name, email address and phone number
- Your business postcode and coverage area
- Accreditations, years in business and brands you install
- Job categories you wish to receive leads for
Technical data (all visitors)
- Browser type and device type (via standard web logs)
- Pages visited and time on site
- Anonymous counts of how many people reach each step of the assessment (no cookies, and not linked to you)
- IP address (anonymised for analytics)
We do not use tracking cookies or third-party advertising pixels.
3. Why we collect it and our legal basis
| Purpose | Data used | Legal basis (UK GDPR) |
|---|
| Matching you with local installers for the categories you selected |
Name, contact details, home details, upgrade interests |
Consent (Article 6(1)(a)) — given via the assessment form |
| Sending you your ChillBill energy report |
Email address, home data |
Consent |
| Updates on your request: which installer will contact you, and one check-in a week later asking whether they have |
Name, email address, your answer and any comment you add |
Consent (part of the service you asked for) |
| Managing trade partner accounts and delivering leads |
Business name, contact details, coverage area |
Contract performance (Article 6(1)(b)) |
| Improving the service and detecting fraud |
Technical/log data |
Legitimate interests (Article 6(1)(f)) |
| Complying with legal obligations (e.g. invoicing) |
Business name, email, payment records |
Legal obligation (Article 6(1)(c)) |
4. Who we share your data with
We share homeowner contact details only with the specific trade partner assigned to your lead. We do not sell, rent or share your data with any other third parties, advertisers, or data brokers.
Each trade partner on our platform has agreed to our Data Processing Terms, which require them to:
- Use your details only to follow up on the specific enquiry you submitted
- Not pass your details to any other party
- Delete your data if you ask them to
- Comply with UK GDPR in all their communications with you
We may also share data with the following service providers who help us operate the platform, all of whom are bound by data processing agreements:
- Vercel Inc. — website hosting. The parts of our site that handle your details run on servers in London, UK
- Upstash Inc. — the secure database where enquiries and partner accounts are stored
- postcodes.io, the government's planning data service (planning.data.gov.uk) and PVGIS (European Commission) — we send them your postcode, or the map location of your postcode area, and never your name or contact details, to check for conservation areas and estimate solar output
- Resend Inc. — sends our emails (your report, and notifications to installers), from its EU region in Ireland
We may disclose data if required to do so by law, court order or regulatory authority.
5. How long we keep your data
- Homeowner leads: Contact and home details are deleted automatically 90 days after your enquiry, or sooner if you request deletion. If an installer accepted your enquiry, we keep a minimal record with no contact details (the date, type of work and installer) for invoicing
- Trade partner accounts: Retained while your account is active, then deleted within 30 days of account closure
- Invoice records: Retained for 7 years as required by HMRC regulations
- Web logs: Retained for 30 days then deleted
- Backups: We keep backup copies so data isn't lost if something goes wrong. Daily copies are deleted after 14 days, and weekly copies (kept in our business email account) are deleted within 90 days. If you ask us to delete your details, they're removed from live systems straight away and drop out of backups as those copies expire
6. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data ("right to be forgotten")
- Right to restrict processing — ask us to pause processing while a dispute is resolved
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise any of these rights, email us at privacy@chill-bill.co.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
7. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure, including:
- HTTPS encryption on all pages
- Access controls limiting who within our team can view lead data
- Regular review of third-party service providers
No method of transmission over the internet is 100% secure. If we become aware of a data breach that affects your rights, we will notify you and the ICO within 72 hours as required by law.
8. Cookies
We use only essential cookies required for the site to function (e.g. to remember your progress through the assessment form). We do not use tracking, advertising or analytics cookies. You can disable cookies in your browser settings, though this may affect site functionality.
9. Children's data
Our service is intended for adults (18+) making decisions about their home. We do not knowingly collect data from anyone under the age of 18. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the "last updated" date at the top and, where appropriate, notify registered users by email. Continued use of the site after changes are published constitutes acceptance of the updated policy.
11. Contact us
For any privacy-related questions or requests:
ChillBill Ltd
Email: privacy@chill-bill.co.uk
Website: www.chill-bill.co.uk