List your business

Privacy Policy

Learn how Heat Pump Installer Directory collects, uses, and protects your personal data in accordance with UK GDPR.

Last updated: October 2026

1. Who We Are

Heat Pump Installer Directory is operated by KRO PROJECTS LTD, a company registered in England and Wales.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, KRO PROJECTS LTD is the data controller.

2. What Data We Collect

We collect the following types of personal data:

Lead Form Submissions

We retain data from earlier homeowner lead-form submissions. The quote-request service is currently unavailable. When it was open, the form collected:

  • Your name
  • Email address
  • Phone number
  • Postcode
  • Property details (such as property type and current heating system)

Newsletter Signups

If you subscribe to our newsletter, we collect your email address.

Analytics Data

We use Plausible Analytics and Google Analytics 4 to understand visits and use of the directory. Google Tag Manager loads the Google Analytics tag. These services can receive page URLs, referral, device and interaction information. Search URLs can contain a postcode or other terms entered by a visitor. Our custom interaction events do not include those values, but analytics page views may process the page URL.

Cookies

Cookies and similar technologies used on the site include:

  • Session cookies: Used for authentication when you sign into your account. These are essential for the site to function and expire when you close your browser or after a set period.
  • Analytics cookies: Google Analytics 4 uses first-party cookies, including _ga, to distinguish visitors and sessions when analytics storage is enabled. Plausible does not use cookies for its standard measurement.

Installer Data

Our directory contains information about MCS certified heat pump installers sourced from the publicly available MCS certified installer database. This includes business names, addresses, certification details, and other publicly available information.

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you submit a lead form or sign up for our newsletter, you give us your consent to process your data for those specific purposes. You can withdraw consent at any time by contacting us.
  • Legitimate interest: We use website usage information to improve the directory. This does not replace any consent required for access to or storage of information on your device.

4. How We Use Your Data

We use the data we collect to:

  • Help homeowners compare heat pump installer listings and available contact routes
  • Manage historical lead-form records from when that service was available
  • Send you our newsletter if you have subscribed
  • Improve our website and the services we offer
  • Respond to your enquiries or support requests

5. Who We Share Your Data With

We share your personal data with the following third parties:

  • Heat pump installers: Earlier lead-form submissions may have been shared with relevant installers under the terms shown when the form was available. The directory is not currently accepting new homeowner quote requests.
  • Google: We use Google Maps API to display maps on our site. Google may collect data in accordance with their own privacy policy when you interact with embedded maps.
  • Email service provider: We use a third-party email service to send newsletters and transactional emails.
  • CRM provider: We may use a customer relationship management platform to manage and process leads.

We do not sell your personal data to any third party. We only share data as described above and as necessary to provide our services.

6. Data Retention

  • Lead form data: We retain your lead form submissions for up to 24 months, after which your data is securely deleted.
  • Newsletter subscriptions: We retain your email address until you unsubscribe. You can unsubscribe at any time using the link in any newsletter email.
  • Analytics data: Retention in Plausible and Google Analytics 4 follows the settings of those services. Contact us for details of current retention periods.
  • Session cookies: These expire when you close your browser or after a set session period.

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
  • Right to restrict processing: You can ask us to limit how we use your data.
  • Right to data portability: You can request that we transfer your data to another organisation or directly to you in a machine-readable format.
  • Right to object: You can object to us processing your data where we are relying on legitimate interest.
  • Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

8. How to Exercise Your Rights

To exercise any of your rights, or if you have any questions about how we handle your data, please contact us at:

We will respond to your request within one month. If your request is complex, we may extend this by a further two months, and we will inform you if this is the case.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

9. Third-Party Services

  • Google Maps & Google Places:We embed Google Maps and use Google Places API to display installer locations and enrich business information. Google's privacy policy applies to data processed by Google through these services.
  • Plausible Analytics: We use Plausible for website analytics. Plausible provides cookie-free site measurement.
  • Google Analytics 4 and Google Tag Manager: Google Tag Manager loads our Google Analytics tag, which measures site visits and interactions.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes using encrypted connections (HTTPS) and secure hosting infrastructure.

11. International Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us: