How we handle your data

Who we are

Weframe Group Limited ("weframe") runs this tool. We are the data controller for what it stores. Contact us at george@weframe.io.

What we store, and why

The postcodes and building names you enter, the certificates you tick, your answers to the five questions, and the assumptions you change. We store them so your report keeps working when you share the link or come back to it. Certificate details come from the official EPC register.

If you leave your email address, we store it with your report and use it only to tell you when expiry reminders are ready. We don't add it to a mailing list or share it with anyone.

We log anonymous steps through the tool, such as "report viewed", against the report link, so we can see which parts are useful. We don't use cookies, tracking pixels or third-party analytics.

How long we keep it

90 days from the last change to the report. After that we delete the report and any email address left on it. EPC lookups are cached for 24 hours to save calls to the register.

Deleting your data

Every report has a "Delete it now" link at the bottom. If you left an email address, the confirmation shows a link that deletes it and the report. Or email us and we'll do it for you.

Our lawful basis

Legitimate interests: running the check you asked for, and, if you leave your email, telling you about the feature you asked to hear about. You can object at any time by emailing us.

Where the EPC data comes from

The Get energy performance of buildings data service, run by the Ministry of Housing, Communities and Local Government. Address data in it belongs to Ordnance Survey and Royal Mail; see their licensing notice.