Skip to main content

Home Energy Efficiency Tool

Privacy Notice

About this Notice

This Privacy Notice describes the information we collect about you and your clients, how we use it and why when you visit this website, and create an action plan using the Energy Saving Tool. Throughout the rest of this notice these will be referred to as the ‘website’. This Privacy Notice describes the information we collect about you, how we use it and why when you visit this website, and create an action plan using the Energy Saving Tool. Throughout the rest of this notice these will be referred to as the “website”, “tool” and “plan”. This Privacy Notice relates to the use of the website, tool and plan only. Privacy information relating to our products and services can be found on our main website Privacy Notice. This Privacy Notice should be read alongside our Cookie Notice and our terms of use for the website.

What’s in this Notice

Your right to privacy is important to us. When you visit the website and create a plan, we want you to be confident that we will look after the information of you and your clients. We'll make it clear what we collect personal information for and why.

Who is the data controller?

We’re Coventry Building Society Group and we are the ‘data controller’ of any personal data that we collect about you and your clients. The ‘data controller’ is the organisation responsible for making sure your information is processed fairly and lawfully.

The group is:

  • Coventry Building Society
  • Godiva Mortgages Limited
  • ITL Mortgages Limited

When we use the terms we, us, our and the Group in this Notice, we mean Coventry Building Society Group.

Information we may collect on the website and why

When you visit the website and use the tool, we may collect the following information:

  • house number/name and postcode
  • information about the property e.g., number of bedrooms and property age

The postcode is required to help make calculations within the tool to work out the average temperatures in the area.

The house number/name is required to check whether the property has an Energy Performance Certificate (EPC) rating and if so to get the rating to help make recommendations within the plan.

We collect details about the property to help create the plan for your client.

If you decide to save the plan you will be given a unique code to enter to retrieve it at a later date.


We use cookies on the website. You can find out more information in our Cookie Policy.


When you visit the website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google Analytics to make, any attempt to find out the identities of those visiting the website.

You can read more about how we use cookies and analytics, and how to change your preferences, in our Cookie Policy.

Who we share your information with?

The website is operated and maintained by our third-party provider the Energy Savings Trust (EST) who store the information you provide to create the unique plan.

As outlined above Google Analytics is used on the website and is maintained by us. EST are unable to directly access the information collected through Google Analytics.

We check the postcode and house number with the Energy Performance of Buildings Register to see if there is an Energy Performance Certificates removed (EPC). For information about this please see

Hosting and retention

Stored plans are hosted in a data centre located within the UK. Plans will be stored for 12 months after creation and will then be deleted. Google Analytics data is set to expire after 26 months.

Purpose and lawful basis for processing

Data protection laws require us to explain what ‘legal grounds’ justify us processing the information of your and your clients, including sharing it with other organisations.

  • consent
  • legitimate interests

This is a list for all the ways we use your information for each of these legal grounds:


Cookies - where consent is required as detailed in the Cookie Policy. The purpose for using your data is to maintain and monitor the performance of our website.

Plan creation - to create and store the plan, if you do not provide the information a plan cannot be created. By using this website, you confirm that your client is aware that you are creating a plan on their behalf and have their consent to do so. Your client should be made aware following your usual processes how you may use their information. If your client wishes to create their own plan they should be redirected to

Legitimate interests

  • to maintain the security and functionality of the website
  • for monitoring and performance purposes to understand how visitors use the website
  • for website development
  • to check whether the property has an Energy Performance Certificate

What are your rights?

As we’re processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. If you’ve created a plan and you or your client no longer want us to store it you can let us know and it will be deleted.

For more information on the rights of you and your client, please see ‘Your rights as an individual’ below.

You can change your cookie preferences as detailed in the Cookie Policy

Your rights as an individual

By giving us your information, you become a ‘data subject’. Here are the rights you and your clients have as a data subject, under data protection laws:

  • to be informed about how we process personal information
  • to withdraw consent
  • to have your personal information corrected or updated if it’s inaccurate or incomplete
  • to object to us processing your personal information
  • to restrict how we process your personal information
  • to request access to personal information and details about how we process it
  • to move, copy or transfer the personal information (this is called ‘data portability’).

How to make a request under any of these rights

To ask us about these rights or to make a formal request, get in touch:

Email: - You can also contact our Data Protection Officer (DPO) by sending an email to this address if you have any queries about the use of the data of you and your clients.

Coventry Building Society. Principal Office: Coventry House, Harry Weston Road, Binley, Coventry, West Midlands CV3 2TQ