FindEPC

Privacy Policy

Last updated: 7 April 2026

1. Who we are

FindEPC (findepc.uk) is an online directory helping property owners and landlords find accredited Energy Performance Certificate (EPC) assessors in England and Wales. References to "we", "us" or "our" in this policy refer to the operators of findepc.uk.

For any privacy-related queries, contact us at: hello@findepc.uk

2. What data we collect

Visitors

We use Fathom Analytics, a privacy-first analytics tool that does not use cookies, does not track you across websites, and does not collect any personally identifiable information. No cookie consent banner is required. Fathom is fully GDPR, PECR and CCPA compliant.

Enquiry submissions

If you submit an enquiry via an assessor profile, we collect your name, email address, phone number (optional), and property postcode. This is used solely to connect you with the assessor you enquired about.

Assessors (claimed profiles)

If you claim your assessor profile, we collect your name, email address, and any additional contact details you choose to provide (phone, website, bio). This information is used to display your profile and manage your account.

3. Assessor directory data

Assessor names, accreditation numbers, schemes and coverage areas are sourced from the GOV.UK EPC register, which is publicly available government open data. This data is not considered personal data under UK GDPR as it relates to professional trading activities.

If you are an assessor and wish to have your profile updated or removed, please contact us at hello@findepc.uk.

4. Legal basis for processing

  • Legitimate interests — operating a public directory of accredited professionals
  • Contract performance — processing enquiries submitted through the site
  • Consent — where you voluntarily claim and manage your profile

5. How long we keep your data

  • Enquiry data — 12 months from submission
  • Claimed profile data — until you request deletion or close your account
  • Analytics data — aggregated and anonymous, retained indefinitely

6. Third parties

  • Fathom Analytics — cookieless, privacy-first analytics (their privacy policy)
  • Vercel — hosting and infrastructure, based in the US with EU data centre options
  • Neon / PostgreSQL — database hosting for assessor and enquiry data

We do not sell your data to any third party.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability

To exercise any of these rights, email hello@findepc.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after any changes constitutes acceptance of the updated policy.