Home Upgrade Grant (HUG) 2 Scheme privacy notice

Who is the data controller for the information we collect

This Privacy Notice is provided to meet the requirements of the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) to explain how we process your personal data in delivering the Home Upgrade Grant (HUG) 2 scheme. 

The Home Upgrade Grant (HUG) 2 scheme is the government-run scheme, which is delivered by the council to improve the energy efficiency of homes in Leeds, and if you are eligible, the grant scheme can provide a number of different measures. 

Leeds City Council is the data controller for the purposes of the Data Protection Act 2018 and other regulations, including the UK General Data Protection Regulation, which means it determines what your data is used for and why it is collected. The Council has entered into contracts with Everwarm Ltd and Groundwork Leeds, who act on our behalf. The purpose of this privacy notice is to tell you about what information we collect about you when you use our service, how we use that information, and who we may share it with. The contact details of the data controller are Leeds City Council, Merrion House, 110 Merrion Way, Leeds, LS2 8BB. This privacy notice does not cover Everwarm Ltd and how they use your data, and you should read Everwarm’s privacy notice to understand how they will use your data.

The data we will collect

In order to support the delivery and administration of the scheme, we will collect the following data:

  • name 
  • address 
  • contact details (including email address, phone number)
  • finance data (for example, household income, previous grants awarded)
  • property ownership
  • fuel costs
  • eligibility

Special Category Data

Some special category data will be requested from you, including equality data and also about any health or communication needs, so we can ensure that we can put in place any special arrangements you might need to access the grant and benefit from energy efficiency installations to your home.

How we collect information about you

If you contact us directly or your details are passed to us through another organisation to apply for the HUG 2 grant scheme, we will send your details to Everwarm Ltd to process your application. Everwarm Ltd will collect the above information from you and will share it with us. Once we receive this information, we will need to carry out an eligibility check, which may involve us obtaining your information from other sources such as:

  • your family members, carers or other persons acting on your behalf
  • internal council departments
  • government departments
  • other public authorities
  • NHS trusts

Why we process your data

Information we collect from you is used to:

  • support the delivery and administration of the scheme and
  • to monitor its effectiveness
  • analyse the quality of the Leeds housing stock
  • improve the energy performance of off-gas grid homes.
     

Lawful basis for processing

We will process your data in accordance with UK GDPR Article 6(1). The processing shall be lawful only if and to the extent that the following applies:

Article 6(1)(e): We need it to perform a public task. The specific public task is the delivery, administration, audit, and evaluation of the HUG 2 scheme, as well as statistical, research, and fraud prevention purposes relating to the scheme. HUG 2 is a government-funded scheme aiming to improve the energy performance of off-gas grid homes in England rated at EPC Band D, E, F, or G.

We will process your special category data in accordance with UK GDPR Article 9(2). The processing shall be lawful only if and to the extent that the following applies:

We will process your special category data in accordance with UK GDPR Article 9(2)g)—processing is necessary for reasons of substantial public interest. These are supported by the following conditions in Schedule 1 Part 2 of the DPA 2018 and the legal framework described above:

  • support for individuals with a particular disability or medical condition (16)
  • safeguarding of economic well-being of certain individuals (19)

Data retention, storage and destruction

Our data retention policies and procedures are designed to help ensure that we comply with our legal obligations in relation to the retention. This means that your information will be kept for 7 years after the scheme ends, unless the law says that we need to hold it for longer or if there is a business requirement to do so. After this, your information will be deleted or archived.

We are strongly committed to data security and will take reasonable and appropriate steps to protect your personal data from unauthorised access, loss, misuse, alteration, or corruption.

Who we share your data with

Your personal data will be shared with:

Our appointed contractors, Everwarm Ltd and their subcontractors:

  • Lanes Group Plc
  • Busy Energy Ltd
  • Tunstall Healthcare (UK) Limited
  • MBL Scaffolding Services Ltd
  • Pennine Electrical Solutions Ltd
  • Kinetik Energy Limited
  • A I Improvements Ltd
  • Property4u.co.uk
  •  trading as SolarCity
  • Cliptech Limited
  • Urban Retrofit Projects Ltd
  • Ian & Rebecca Grundy trading as Grundy Scaffolding
  • Vertex Scaffolding Solutions Ltd
  • CorEnergy Ltd
  • Efficient Energy Services Ltd trading as EcoGiants
  • UPS Solar Limited
  • One insulations
  • MyEnergy Solutions ltd
  • Snug Home Insulations

  • Storm windows

    And

  • Groundwork Leeds
  • DESNZ and its delivery partners and agents
  • Ofgem and other organisations administering other central and local government schemes that support energy efficiency or low-carbon heating measures
  • TrustMark for the purpose of upholding installation standards under the scheme
  • Government departments, where necessary

Automated decision making

By the time your personal data has reached us, it will have undergone some initial checks undertaken by DESNZ. This will not involve any automated decision-making. These initial checks are undertaken for the purpose of prevention and detection of fraud, for example, or to determine whether a property or person is likely to be eligible for the HUG 2 grant scheme.

Your rights

The following rights under data protection law are available under the UK GDPR:

  • the right to access—you can ask for copies of your personal data
  • the right to rectification—you can ask us to rectify inaccurate personal data and to complete incomplete personal data 
  • the right to erasure—where you can ask us to erase your personal data
  • the right to restrict processing—you can ask us to restrict the processing of your personal data
  • the right to data portability (where you can ask that we transfer your personal data to another organisation or to you)
  • the right to object to processing (where you can object to the processing of your personal data) and
  • the right to complain to a supervisory authority—you can complain about our processing of your personal data the right to
  • withdraw consent (to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent)

Where we process your data under the public task basis, certain rights do not apply, such as: 

  • erasure
  • data portability
  •  the right to withdraw consent

These rights are subject to certain limitations and exceptions. You can learn more about your rights and how to exercise them, with further details on the Information Commissioner’s Office website. You may exercise any of the above rights in relation to your personal data by writing to us using the contact details provided below.

If your data is sent to other countries

The information you provide will not be transferred to another country outside of the UK by us. However, personal data shared may be stored on DESNZ’s IT infrastructure and may therefore also be shared with DESNZ’s data processors, Microsoft and Amazon Web Services. This means your data may be transferred and stored securely outside the UK or European Economic Area. Where that is the case, it will be subject to equivalent legal protection through the use of model contract clauses.

Contact us

Any queries in relation to this privacy notice should be forwarded to homeenergyhelp@leeds.gov.uk. 

 Data Protection Officer

Aaron Linden
Head of Information Management and Governance - Data Protection Officer
Leeds City Council
Merrion House
110 Merrion Way
Leeds
LS2 8BB

DPO@leeds.gov.uk 

The Council privacy notice is available online.

Complaints

If you are unhappy with the way in which your information has been handled, you should speak with the specific service in the first instance.

Any data protection complaints about how the council has processed your personal data will be handled in accordance with the council’s complaints policy. You can find out how to submit a complaint.

If we cannot resolve your complaint, you can refer to the Information Commissioner if you consider that there has been an infringement of data protection legislation. Further details can be found on the Information Commissioner’s website.

Changes to this notice

We keep our privacy notice under regular review. We will notify you of significant changes to this notice by email or other means as appropriate. This privacy notice was last updated December 2024.