Data and privacy

Why we use information

• We use your comparison preferences and saved choices to provide the service you request. Our lawful basis is performance of that service agreement. You can browse without signing in; a postcode and the relevant property answers are needed for tailored results.
• We use business contact details, claims, proposed edits and correspondence in our legitimate interests of maintaining an accurate directory, checking who represents a company, answering questions and preventing misuse. Public business information may identify a sole trader or business representative.
• We use limited activity records in our legitimate interests of measuring the service's usefulness and prioritising supplier checks. The controls below let you stop this site's optional activity recording in this browser.
• We process information needed to handle data-protection requests and comply with applicable legal duties on the basis of legal obligation. Where necessary, we retain relevant records to establish, exercise or defend legal claims.

Matching is automated using your answers, product suitability, service-area information and priorities. It does not decide whether you can buy a system or receive credit. Supplier claims and profile changes are reviewed by a person. Paying for an enhanced listing does not buy a better match position.

Information used by the site

• Comparison answers, including your postcode, appear in the results URL. Saved options and shared comparisons store those answers. Anyone who can open a shared link can see its saved comparison, so check it before sharing.
• The psc_shortlist cookie links this browser to saved options, shared links and correction reports. It lasts up to one year. Clearing it can prevent you accessing those records but does not delete them from our database.
• Signing in provides a site-specific account identifier and email address. Company claims, profile changes, plan requests and support conversations are stored with the submitting account. Signing in does not automatically link saved browser comparisons to that account.
• If you purchase a paid listing, we keep the company and account reference, agreed price and terms, Square order and payment references, payment/refund status and listing-access decisions. These records are used to fulfil the purchase, resolve payment problems and maintain the relevant accounting records.
• Subscription billing updates appear in your billing page. When billing emails are enabled, we use your account's current verified email address and record the recipient, sending status and message reference to manage delivery. These are service messages, not supplier marketing or advertising.
• Approved company profile content is public to people with access to the site. Claim evidence and support messages are not published as company profile content.
• Directory information comes from company websites, company representatives and the publicly available Find Certified Installers directory. Review summaries link to their source on Trustpilot, Checkatrade, TrustATrader or Google where a matching profile is available. This includes business names, contact details, locations, products and review ratings or counts, not private customer lists.
• Company activity records contain an event identifier, company, event type, page category and time. Comparison actions can also include the offer, chosen buying route and broad postcode area (such as CF), not the full postcode or customer message. They are event counts, not unique visitors or confirmed sales. Records older than 90 days are cleaned up when new events are recorded. Recorded activity includes visible result appearances, profile visits, website clicks, quote-link clicks and preparing, copying or opening a contact destination from a question brief. These actions do not confirm message delivery. Company accounts can view aggregate area and route reports; groups with fewer than five actions are pooled. Collection respects the browser analytics opt-out, Do Not Track and Global Privacy Control. Aggregated recent counts also help prioritise checks of supplier prices and links.
• Suppliers may optionally record their own monthly enquiry, order and revenue totals. These are private supplier-reported figures, not verified transactions or customer-level records. Company accounts with access can view them. Revisions and withdrawals retain an internal history; withdrawal excludes figures from the current report rather than erasing their history. Contact us to discuss access or removal of these business records.
• When sponsored placements are enabled, their records contain a random display identifier, company, campaign, offer, broad postcode area (such as CF), display time and any recorded impression or outbound click. They do not contain your full postcode, answers, email or a cross-site tracking identifier. Suppliers can see their aggregated campaign and area counts; authorised administrators can review these reports. Events respect the browser analytics opt-out, Do Not Track and Global Privacy Control. Display records are removed after 90 days when new sponsored placements are served; idle rotation counters are removed after seven days.

Customer enquiries

Where a business accepts enquiries, you can submit a form without creating an account. We share your name, email, optional phone, message, selected option and the comparison requirements shown in the preview with that named business only. Your full postcode is included only if you choose to share it. This is not permission for unrelated marketing and is not an order.

We store the accepted enquiry in the business's private inbox and use Cloudflare Email Service to forward it to an address the business has verified on its account. Replying to that email goes to the customer-supplied address. The business's authorised account users can see and manage the enquiry. There is no general administrator inbox exposing these private enquiries.

The form keeps your draft in the current page. This tab's session storage holds a submission reference, not your message or contact details. A first-party browser identifier allows us to recognise retries and display your confirmation without a login. We use protected network identifiers, email hashes and limited security-check records to prevent spam and duplicate submissions. These identifiers are not shared with the business.

Enquiry contents stop appearing in the supplier inbox after 180 days. This is not automatic erasure from storage or backups; contact us about access, correction, deletion or retention. The receiving business may keep the email under its own privacy policy. We distinguish received enquiries, email processing and confirmed delivery from outcomes reported by the business. None of these records proves that an email was read or a sale was completed.

Optional supplier conversations and retailer checks

Where on-site supplier messaging is available, nothing is sent until you review and submit your message to the named company. We store the message, selected offer, requirements you share and conversation status. You and that company's authorised users can view the conversation. Reported conversations can also be reviewed by our authorised support team. An opening receipt records visible content being opened, not agreement or a confirmed sale. No email or SMS notification is sent by this feature.

A brief carried into the message form is held in this tab's session storage and used only while its ten-minute transfer window is current. Conversation contents stop appearing in participant views 180 days after the first submission. This is not immediate erasure from storage or separate backups. Contact us about access, deletion or retention questions; a recipient may separately keep information you have shared with it. See the messaging terms.

The optional retailer-site checker evaluates only that retailer's recorded range. Its answers are processed for the check and its postcode is checked with Postcodes.io. This feature does not save those answers to an account, send them to the retailer, or record them as an enquiry. Normal hosting security and technical logs are separate from customer activity reports.

Optional business AI connections

If you authorise a supported AI app to connect to your business account, that app can request information only for companies you already have active access to. The read-only business permission covers your company list, approved profile fields and aggregate activity reports. A separate enquiry permission covers enquiry and conversation identifiers, dates and statuses, not customer names, contact details, message subjects or message content. The connector does not share payment records or your private notes.

The AI app you choose receives the results it requests and handles them under its own privacy policy. Check that policy before connecting. The connection cannot change listings, send replies, mark messages read or make payments. Signing in does not claim a company or grant access to another business.

Permission may include continuing access through refresh tokens until the grant is revoked. Disconnect in the AI app and revoke the authorisation where that control is available; contact us if you need help withdrawing it. Revocation prevents future authorised requests but does not erase results the AI provider has already received or saved. See the business connector documentation.

Services and retention

The site uses Cloudflare for hosting and storage, and Clerk for account sign-in. Clerk processes account details and authentication cookies needed to verify your session. Choosing Google sign-in also involves Google. Those services may process technical information needed to operate and secure the service. A supplier website you open has its own privacy terms. Company project photos may load from the company's image host, which receives the technical information needed to serve the image. We do not send the page address as a referrer with those photos.

When card checkout is available, Square processes payment details on its own checkout page. We receive the references, amounts and status needed to match the payment to your listing. Our application does not store full card numbers or security codes.

When enabled, Cloudflare Email Service sends subscription billing emails. It processes the recipient address and message content; delivery checks use the verified account address held by Clerk. We do not use supplier-directory contact details for these emails.

Your postcode is sent to Postcodes.io to check the location and tailor coverage results. Selecting options for a comparison also keeps a temporary selection in this tab's session storage.

Saved and shared comparisons remain until removed. Support and supplier records are retained for handling requests, maintaining account access and recording decisions; they are not automatically deleted when you close a conversation or end a trial.

We review whether those records are still needed when resolving a request, ending company access or handling a deletion request. Retention depends on whether a matter is open, access is still active, a decision needs explaining or a dispute or legal duty requires evidence. Unneeded personal details should be removed; ending a trial alone does not remove the basic company listing. Restricted recovery copies are separate from the live service; a deletion must also be respected if a copy is restored.

Hosting and sign-in services may process information outside the UK, including in the United States. Clerk describes its processing and safeguards in its privacy policy. Cloudflare describes the UK Extension to the Data Privacy Framework and contractual safeguards in its privacy policy. Those policies explain how to request details of their safeguards. Contact us about the processing associated with your use of this site. We do not promise UK-only storage.

We do not ask for payment-card information in support or listing forms. Do not include sensitive documents in messages.

Saved comparisons in this browser

The download includes saved options, shared comparisons and correction reports linked to this browser. It does not include supplier account records, support messages or hosting logs.

Download browser data (JSON)

Company activity counts

We count company-page views and website-link clicks without storing an account ID or IP address in those activity records. Sponsored reports use a broad postcode area, not your full postcode. You can turn off these optional events for this browser.

Your right to object

You can object to processing based on legitimate interests, including use of information about you in a business listing. Tell us which information is involved and your circumstances using the contact routes above. You can object to direct marketing at any time. Claiming a listing does not subscribe you to marketing.

Request a data copy, correction or deletion

Contact us about personal data, including account records or information about you in a company listing. Tell us what you need and which information it concerns. We may need to confirm your identity before disclosing or changing private records.

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal data. If we rely on consent for a particular activity, you can withdraw it without affecting the lawfulness of earlier processing.

Deletion rights depend on the circumstances; some information may need to be retained. Read the ICO guidance on deletion requests. You can also raise a data-protection concern with the ICO.