Privacy policy

Who controls your data

There are two parties involved in running this service, and which one is the data controller depends on the type of data:

• {{ trading_name|default:"FreeMCS" }} (your installer) is the data controller for the information you provide to get a heat-pump survey, design or install — your enquiry, your property and survey details, your design pack and your install records. They decide why and how this data is used to deliver work for you.
• Anvul Ltd, a company registered in England & Wales (Companies House 17111703) whose registered office is 16 Radford Road, Stoke-on-Trent ST4 7DA, builds and runs the underlying platform. For your enquiry, survey, design and install data, Anvul Ltd acts as a data processor on behalf of {{ trading_name|default:"FreeMCS" }}, under a written processor agreement, and only handles that data on your installer's instructions.

Anvul Ltd is the data controller only for platform- and account-level data — for example, the login credentials and sign-in tokens used to operate the platform, security and fraud-prevention logs, and aggregated, de-identified analytics it uses to improve the product.

In short: {{ trading_name|default:"FreeMCS" }} decides what happens with your survey and install data; Anvul Ltd provides the platform that makes it work.

What data we collect

• Property data — postcode, address, EPC certificate data, photos and scans of your property, room dimensions, installed equipment.
• Survey responses — build year, heating preferences, hot-water habits and other answers you give us.
• Contact details — name, email address, phone number, the address of the property being surveyed.
• Account data — encrypted password, sign-in tokens, the device and browser you use.
• Cookies and analytics — see our cookie policy for the full list.

Why we use it

• To provide the service — build a heat-loss design, recommend a heat pump, generate an MCS-compliant report.
• To fulfill grant applications — share the design pack with MCS, BUS, ECO4, GBIS or HEEPS where you apply for a grant.
• To improve the product — aggregated, de-identified analytics that show us which steps are slow or confusing.
• To communicate with you — service updates about your install, plus marketing where you have opted in.

Lawful basis

Your survey and install data is processed under UK GDPR on these bases, decided by your installer ({{ trading_name|default:"FreeMCS" }}) as controller:

• Contract / legitimate interest — for delivering the survey, design and install you asked for.
• Consent — for marketing emails, optional analytics, and any cookies that are not strictly necessary. You can withdraw consent at any time.

Anvul Ltd relies on its own legitimate interest as controller of the platform- and account-level data described above — running, securing and improving the service — and processes all your survey and install data only on your installer's instructions.

Who we share data with

We share the minimum data needed to do the job:

• Your installer ({{ trading_name|default:"FreeMCS" }}) sees your full survey and design.
• MCS / Gas Safe / TrustMark — when we file a certificate on your behalf.
• HMRC, Ofgem and grant administrators — when you apply for a grant.
• Platform providers — cloud hosting, payment processing, email delivery. All bound by UK GDPR processor terms.

We do not sell your data.

Data retention

We keep your survey, design and install records for seven (7) years. This matches the warranty period on most heat-pump installs and the document-retention requirement for HMRC and grant audits. After 7 years, records are deleted or anonymised.

International transfers

Your data is stored on UK and EU servers. If we ever move it outside the UK / EEA we will use the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses, with additional safeguards as required.

Your rights

Under UK GDPR (Articles 15–22) you have the right to:

• Access — get a copy of your data (Art 15).
• Rectification — fix inaccurate data (Art 16).
• Erasure — ask us to delete your data, subject to our 7-year retention duty (Art 17).
• Restriction — ask us to pause processing while a complaint is being resolved (Art 18).
• Portability — download your data in a machine-readable format (Art 20).
• Object — opt out of legitimate-interest or marketing processing (Art 21).
• Avoid solely-automated decisions with significant effects (Art 22).

Cookies

We use a small number of cookies and similar technologies. The full list and your controls are on the cookies page.

Who to contact

Because {{ trading_name|default:"FreeMCS" }} is the data controller for your survey and install data, requests about that data — access, correction, deletion and the other rights above — are handled by your installer; you can reach them via the contact page. For platform- or account-level matters, or any data processing handled by Anvul Ltd, you can reach Anvul Ltd's Data Protection Officer at dpo@freemcs.com.

If your complaint cannot be resolved, you have the right to lodge one with the Information Commissioner's Office (ico.org.uk) — you do not need to use our process first.

Changes to this policy

If we make a material change we will publish a new effective date and, where required, ask for fresh consent on cookies or marketing.