Privacy Policy

Last updated: 21 September 2026. Digedtal, trading as EPCguys and Boiler Guys, is the controller of personal data described in this policy. Contact us at hello@epcguys.co.uk. You may also write to us for our registered office address.

1. Personal data we collect

We collect search locations; enquiry contact, property and request details; email and phone verification codes and related timestamps; account and security information; professional profile, coverage, credential and team information; reviews and support messages; billing and subscription details where professionals purchase paid plans; and technical logs needed to operate and protect the service.

Some professional directory information comes from public or licensed industry sources. This can include a professional's name, business contact details, accreditation scheme or identifier and service area. The profile can be claimed, corrected or removed.

2. Why we use it and our lawful bases

We use data to provide search, enquiries, accounts, profiles and quotes, and to take steps requested before a contract (contract). We review credentials, operate and secure the marketplace, prevent misuse, maintain directory accuracy and improve the service where those legitimate interests are not overridden by your rights (legitimate interests). We process payments and billing records where professionals subscribe to paid plans (contract and legal obligation). We keep records needed for tax, accounting, fraud prevention and legal claims where required (legal obligation or legitimate interests). We use consent for optional marketing or non-essential cookies where consent is required.

3. Who receives data

We share an enquiry only with the businesses the customer selects, up to a maximum of ten. Those businesses act as independent controllers for their response and any work. We use hosting, email, security, analytics, customer-support and payment providers (including Stripe for subscription checkout when available) acting under contract, and disclose information where required by law or to protect users. We do not sell enquiry contact details or broadcast them to every professional in an area.

4. Retention

Abandoned enquiry drafts are deleted after 7 days. Open enquiries expire after 30 days. Contact and property-address details for closed, cancelled or expired enquiries are removed after 365 days; non-identifying outcome data may be retained for reporting. Raw import files and rows are removed after 90 days. Expired verification records and access grants are deleted automatically. Account, listing, billing and legal records are kept while needed to provide the service and for applicable legal or dispute periods.

5. International transfers and security

If a contracted provider processes data outside the UK, we require an applicable adequacy decision or recognised contractual safeguards. We use access controls, encryption in transit, scoped permissions, audit records and retention controls, but no internet service can promise absolute security.

6. Your rights

Depending on the lawful basis and circumstances, you may ask for access, correction, erasure, restriction, portability or withdrawal of consent. You may object to processing based on legitimate interests and you have an absolute right to object to direct marketing. Email hello@epcguys.co.uk; we may need to verify your identity.

You can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. Please contact us first if you are comfortable doing so, so we can try to resolve the issue.

7. Matching and automated decisions

After a professional verifies their account email, we compare that email and any supplied work phone number with directory contact details. One exact, unclaimed match may be connected to the account; no match creates a new draft listing. Ambiguous, conflicting or already-claimed matches are held for manual review. This matching controls listing administration only and does not produce a legal or similarly significant effect.

Postcode, service and eligibility rules help order and filter directory results. Paid placement, when available, is labelled. We do not use solely automated decisions that produce legal or similarly significant effects.

8. Cookies and changes

See our Cookie Policy. We will update this notice when our providers, purposes or practices materially change and identify the new update date.