Privacy Policy

Casa Cor Limited T/A Casa Renewables

Registered Address: 15 Radlix Road - Leyton - E10

Contact Email: info@casacontractao.com

Last Updated: 16/11/2025

This Privacy Policy explains how Casa Renewables ("we," "us," or "our") collects, uses, and protects your personal data when you use our website, enquire about our services, or enter into a contract with us for heat pump, air conditioning, and electrical installations.

1. Data Controller

Casa Renewables is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data in an open and transparent manner.

2. The Data We Collect About You

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

Data CategoryData ExamplesPurposeIdentity DataName, title, company name.Contract fulfillment, communication.Contact DataBilling address, installation address, email address, telephone numbers.Surveys, quotations, scheduling, invoicing.Financial DataBank account details (for payments), payment card details (for processing).Processing payments, managing deposits.Technical DataIP address, browser type, time zone setting, location data (from website visits).Website security, analytics, and improvement.Usage DataInformation about how you use our website and services (e.g., pages viewed).Improving website and service offerings.Property DataTechnical data about your property required for MCS/Grant certification (e.g., EPC details, heat loss calculations).Fulfilling MCS/Grant requirements, system design.

3. How We Collect Your Data

We collect data from and about you through various methods:

  • Direct Interactions: You give us your Identity, Contact, and Financial Data when you:

    • Fill out enquiry forms on our website.

    • Contact us by phone or email for a quotation or service request.

    • Sign a contract for installation services.

    • Provide feedback or request support.

  • Third Parties: We may receive data from third parties, such as:

    • Government bodies (e.g., Ofgem for the Boiler Upgrade Scheme grant application process).

    • Lead generation services or comparison websites (if you contact us through them).

    • Credit reference agencies (for financing applications, if applicable).

  • Automated Technologies (Website): As you interact with our website, we automatically collect Technical and Usage Data using cookies and similar technologies.

4. How We Use Your Personal Data (The Legal Basis)

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Legal BasisPurpose of ProcessingContract FulfillmentTo carry out our obligations under the installation contract, including surveying, design, installation, and invoicing.Legitimate InterestsTo manage our business, prevent fraud, improve our services, and send marketing communications (where you have not opted out).Legal ObligationTo meet statutory and regulatory requirements, such as VAT records, health and safety obligations, and providing MCS certificates.ConsentWhere required, for specific marketing activities or certain types of website tracking (e.g., non-essential cookies). You can withdraw consent at any time.

5. Sharing Your Data

We may share your personal data with the following parties for the purposes described above:

  • Regulators & Grant Bodies: We must share necessary Property and Identity Data with bodies like Ofgem or the MCS Register to certify your installation and process grant applications.

  • Sub-Contractors: Trusted third-party installers or specialist services (e.g., electricians, groundworkers) only to the extent necessary to fulfil the installation contract.

  • Suppliers: Manufacturers and wholesalers to facilitate warranty claims or specific parts ordering.

  • Professional Advisers: Lawyers, bankers, auditors, and insurers for legal and administrative purposes.

  • Government/Law Enforcement: Where we are under a legal or regulatory duty to disclose your personal data.

6. Data Security and Retention

  • Security: We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

  • Retention: We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (e.g., warranty periods, tax records).

7. Your Legal Rights (GDPR)

Under data protection law, you have rights including:

  • Your right of access: The right to ask us for copies of your personal data.

  • Your right to rectification: The right to ask us to rectify personal data you think is inaccurate or incomplete.

  • Your right to erasure: The right to ask us to erase your personal data in certain circumstances.

  • Your right to restriction of processing: The right to ask us to restrict the processing of your personal data in certain circumstances.

  • Your right to object to processing: The right to object to the processing of your personal data in certain circumstances (e.g., direct marketing).

  • Your right to data portability: The right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

To exercise any of these rights, please contact us at info@casacontractao.com

The Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority in the UK, which is the Information Commissioner's Office (ICO). We would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.