Privacy
Last updated 15 October 2026
Who we are
EPC Customer Report is run by Emerald Eco, the trading name of Glenn Turner, a sole trader in the UK. Contact: hello@emeraldeco.co.uk. Postal address available on request. We're the data controller for the account information described here.
What we keep, and why
Your email address, so you can sign in and so we know which plan and reports belong to you. If you sign up with a Gmail, Outlook or iCloud address, we store it without any dots or "+" tags, because those all reach the same inbox.
Your plan and report balance, and the certificate numbers you've unlocked in the last 90 days, so downloading the same report again is free.
The assessor ID on certificates you've used free reports on (for example ABCD123456) and how many free reports that ID has used, so the free reports can't be claimed again with a new email address. We don't store the assessor's name or contact details.
Sign-in codes and the network address they were requested from, for up to a day, to stop people flooding inboxes with codes.
A sign-in cookie, which keeps you signed in on this device for up to 90 days. It's needed for the service to work, so we don't ask for consent for it. We don't use advertising or tracking cookies.
Your logo and report settings stay in your own browser. They aren't sent to us.
Our lawful basis is that we need this information to provide the service you signed up for (contract), plus our legitimate interest in preventing misuse of the free reports.
Certificates and your customers
Address searches and certificates come from the government's public EPC data when you ask for them. Reports are built in your browser. We don't keep copies of reports or your customers' details.
Payments
Payments are handled by Stripe, which stores your card details and billing information under its own privacy policy. We see what you bought and when, not your card number.
Who else handles your data
Cloudflare (hosting and database), Stripe (payments) and Resend (sign-in emails), each only as needed to run the service. Some of them may process data outside the UK under the safeguards UK law requires.
How long we keep it
Your account details for as long as you have an account. Unlocked certificates for 90 days. Assessor IDs and free report counts for as long as the free offer runs. Payment records for as long as the law requires for tax purposes (usually 6 years).
Your rights
You can ask for a copy of your data, or for it to be corrected or deleted, at any time by emailing hello@emeraldeco.co.uk. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).