Home Upgrade Grant (HUG) 2 eligibility checker privacy notice

The data controller for the information we collect

This Privacy Notice is provided to meet the requirements of the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA) to explain how we process your personal data for the Home Upgrade Grant (HUG) 2 grant scheme. 
The Department for Energy Security and Net Zero (DESNZ) has launched an online eligibility checker to enable you to determine whether you may be eligible for the HUG 2 grant scheme. Where you use the eligibility checker and are found to be eligible for the scheme, DESNZ will forward your data to Leeds City Council to allow us to contact you.

Both Leeds City Council and the DESNZ are acting as independent data controllers for your data, and we have a data sharing agreement with DESNZ. This privacy notice does not cover DESNZ and how they use your data. You should read their privacy notice to understand how they will use your data.
Leeds City Council is the data controller for the purposes of the Data Protection Act 2018 and other regulations, including the UK General Data Protection Regulation, which means it determines what your data is used for and why it is collected. The purpose of this privacy notice is to tell you about what information we collect about you when you use our service, how we use that information, and who we may share it with. The contact details of the data controller are Leeds City Council, Merrion House, 110 Merrion Way, Leeds, LS2 8BB.

Everwarm Ltd. are the lead contractor for the scheme and are responsible for undertaking the energy efficiency works inside homes. They can be contacted at 3 Inchcorse Place, Whitehill Industrial Estate, Bathgate, EH48 2EE.

The data we will collect 

DESNZ will receive the data you provided on the online eligibility checker. The data of the people found to be eligible will be shared with us and our lead contractor, who will contact eligible households on our behalf. The aim is to maximise the number of Leeds residents who can access the HUG 2 grant and have energy efficiency improvements made to their homes.


The data that we receive from DESNZ for eligible households will be as follows: 

  • referral ID
  • name
  • full address
  • email address
  • phone number
  • UPRN
  • Lower Super Output Areas (LSOA) status
  • Energy Performance Certificate (EPC) rating
  • date EPC was done
  • off gas grid status
  • household income band

How we collect information about you

We receive information from DESNZ as described elsewhere in this notice.

Why we process your data

We use the information to enable those eligible to access the HUG 2 grant and have energy efficiency improvements made to their homes.

All the data collected will be treated in strict confidence and in accordance with the requirements of the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR). The data provided by you will only be used for the purpose(s) specified.

Lawful basis for processing 

We will process your data in accordance with UK GDPR Article 6(1(a). The processing shall be lawful only if and to the extent that Article 6(1)(a) (the data subject has given their consent to the processing of his or her personal data for one or more specific purposes) applies.

Withdrawing your consent

You have the right to withdraw your consent from participating in this scheme at any time. Withdrawing your consent will not affect any services or benefits you receive from the Council. However, it may mean you will be unable to access any energy efficiency measures to your home to improve energy efficiency, lower bills, and reduce carbon emissions. If you decide that you no longer wish to participate in the scheme, please contact us.

Data retention, storage and destruction

Our data retention policies and procedures are designed to help ensure that we comply with our legal obligations in relation to the retention. This means that your information will be kept for as long as it is required to fulfil the purpose it was collected and then will be securely deleted no more than two years after the funding period for HUG 2 has ended, for example, 31 March 2027. We may, however, keep your data for longer where the law requires us to do so or if there is a business requirement to do so. After this, your information will be deleted or archived. 
We are strongly committed to data security and will take reasonable and appropriate steps to protect your personal data from unauthorised access, loss, misuse, alteration, or corruption.



Who we share your data with

We share your data with our legitimate contractors, shown below:

Everwarm Limited and their subcontractors:

  • Lanes Group Plc
  • Busy Energy Ltd
  • Tunstall Healthcare (UK) Limited
  • MBL Scaffolding Services Ltd
  • Pennine Electrical Solutions Ltd
  • Kinetik Energy Limited
  • A I Improvements Ltd
  • Property4u.co.uk (trading as SolarCity)
  • Cliptech Limited
  • Urban Retrofit Projects Ltd
  • Ian & Rebecca Grundy (trading as Grundy Scaffolding)
  • Vertex Scaffolding Solutions Ltd
  • CorEnergy Ltd
  • Efficient Energy Services Ltd (trading as EcoGiants)
  • UPS Solar Limited
  • One insulations
  • MyEnergy Solutions ltd
  • Snug Home Insulations

  • Storm Windows

    And Groundwork Yorkshire

In addition, we will share your personal data:

  • where such disclosure is necessary for compliance with a legal obligation to which we are subject
  • to protect your vital interests or the vital interests of another natural person
  • for the purposes of security and prevention of fraud and other criminal activity
  • where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure
     

Automated decision-making

By the time your personal data has reached us, it will have undergone some initial checks undertaken by DESNZ. We do not use the data we receive from DESNZ for any automated decision-making, including profiling.

Your rights

Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.

The following data rights are available under the UK GDPR and apply where we process your information based on your consent:

  • the right to access (where you can ask for copies of your personal data)
  • the right to rectification (where you can ask us to rectify inaccurate personal data and to complete incomplete personal data)
  • the right to erasure (where you can ask us to erase your personal data)
  • the right to restrict processing (where you can ask us to restrict the processing of your personal data)
  • the right to data portability (where you can ask that we transfer your personal data to another organisation or to you)
  • the right to object to processing (where you can object to the processing of your personal data)
  • the right to complain to a supervisory authority (where you can complain about our processing of your personal data)
  • withdraw consent (to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent)

All the rights are subject to certain limitations and exceptions. You can learn more about your rights through ‘Your individual rights and how to exercise them' and the Information Commissioner's Office site. You may exercise any of the above rights in relation to your personal data by writing to us using the contact details provided below.

If your data is sent to other countries

The information you provide will not be transferred to another country outside of the UK.

Contact us

Any queries in relation to this privacy notice should be forwarded to:

homeenergyhelp@leeds.gov.uk 
Data Protection Officer
Aaron Linden
Head of Information Management and Governance - Data Protection Officer
Leeds City Council
Merrion House
110 Merrion Way
Leeds
LS2 8BB
DPO@leeds.gov.uk


The Council privacy notice is available online 

Complaints

If you are unhappy with the way in which your information has been handled, you should speak with the specific service in the first instance.

Any data protection complaints about how the council has processed your personal data will be handled in accordance with the council’s complaints policy. You can find out how to submit a complaint.

If we cannot resolve your complaint, you can refer to the Information Commissioner if you consider that there has been an infringement of data protection legislation. Further details can be found on the Information Commissioner’s website.

Changes to this notice

This privacy notice will be subject to ongoing review to ensure it continues to align with the requirements of the scheme and all applicable legislation. This privacy notice was last updated December 2024.