Privacy Policy
1. Who we are
Certus Commercial Ltd is a commercial energy assessment and MEES compliance consultancy. Our registered trading address is 338 Dyke Road, Brighton, BN1 5BB.
If you have any questions about this policy or how we handle your data, contact us at: info@certuscommercial.co.uk
2. What data we collect
When you use our website or contact us, we may collect:
• Name
• Email address
• Phone number
• Property postcode
• Approximate floor area
• Type of property
• Any message or enquiry you submit
We also collect anonymous usage data via Google Analytics (see Section 5).
3. How we collect it
• Via the enquiry and quote request form on our website
• Via direct email or phone contact
• Automatically via cookies and analytics tools when you browse our website
4. Why we collect it and our legal basis
Purpose Legal basis
Responding to your enquiry or quote request Legitimate interests / pre-contractual steps
Providing EPC assessment and compliance services Performance of a contract
Keeping records of instructions and communications Legal obligation / legitimate interests
Improving our website and understanding visitor behaviour Legitimate interests (with consent for cookies)
5. Cookies and Google Analytics
Our website uses Google Analytics to help us understand how visitors use the site. This involves the use of cookies — small text files stored on your device. We only activate analytics cookies with your consent, which is requested via the cookie banner on your first visit.
You can withdraw consent at any time by clicking the cookie preferences link in the footer of our website.
For more information on how Google uses data, visit: google.com/policies/privacy/partners
6. Who we share your data with
We do not sell your personal data. We may share it with:
• Google — for analytics purposes (anonymised)
• Our email and cloud storage providers — solely for the purpose of managing your enquiry
All third-party providers are required to handle your data securely and in accordance with UK GDPR.
7. How long we keep your data
• Enquiry data: up to 3 years from last contact, or as required for ongoing compliance records
• Analytics data: as per Google Analytics retention settings (default 26 months)
8. Your rights
Under UK GDPR you have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Withdraw consent at any time (where consent is the legal basis)
To exercise any of these rights, email us at info@certuscommercial.co.uk. We will respond within 30 days.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent version.