Last updated: 13 July 2026 · Applies to elimitheat.co.uk and the E-Limit Heat customer portal
E-Limit Heat Ltd ("we", "us", "our") is the data controller for the personal information described in this policy. We're a UK heating company providing boiler servicing, repairs, and heat pump installation.
Registered address: 3 Warren Farm Sports Centre, Windmill Lane, UB2 4NE
Company number: 17287378 (registered in England & Wales)
ICO data protection registration: [add your ICO reference number]
Contact: info@elimitheat.co.uk · 020 3105 0508
We are the "data controller", which means we decide how and why your personal data is used. If you have any questions about how we handle your data, contact us using the details above.
| Category | Examples |
|---|---|
| Identity & contact details | Name, email address, phone number, home address, postcode |
| Property & appliance details | Boiler make/model, GC number, appliance list, property type |
| Account data | Your portal login email and an encrypted password (we never see your password in plain text) |
| Service & booking data | Job requests, booking dates, service visit notes, safety certificates |
| Communications | Messages you send our chat assistant, contact form submissions, call/WhatsApp/email preferences |
| Payment-related data | Direct Debit mandate and payment references from GoCardless, our payment provider. Your bank details are entered on GoCardless's own secure page — we never see or store your account number or sort code |
| Technical data | IP address, browser type, and basic site usage, collected automatically via standard web server logs |
| Support needs (optional) | Anything you choose to tell us about accessibility or support needs (for example hearing difficulties or mobility needs) so we can adapt our service. Because this can reveal health information, we store it only with your explicit consent, and you can view, change or permanently delete it yourself at any time in your portal (or by calling us) |
| Purpose | Legal basis |
|---|---|
| Setting up and managing your Heat Service Plan, bookings, and portal account | Performance of a contract with you |
| Contacting you about appointments, safety issues, or your plan | Performance of a contract / legitimate interest |
| Keeping gas safety and service records | Legal obligation (Gas Safe / gas safety regulations) |
| Collecting your monthly Heat Service Plan payment by Direct Debit | Performance of a contract with you |
| Sending you marketing emails or offers | Consent — only if you've explicitly opted in, and you can withdraw this at any time |
| Recording your support or accessibility needs to adapt our service | Explicit consent (UK GDPR Article 9(2)(a), as this may reveal health information) — withdrawable at any time by deleting the information in your portal or contacting us |
| Improving our services and website | Legitimate interest |
| Using our AI chat assistant to help book jobs or answer questions | Performance of a contract, based on your active use of that feature |
We use a small number of trusted service providers ("processors") to run our website and portal. They only process your data on our instructions, and only for the purposes below:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Hosts our customer database and handles secure login | All portal account, booking and service record data |
| Anthropic | Powers the AI chat assistant in the portal | Your chat messages, sent only while you're actively using the chat feature |
| Netlify | Hosts our website and processes form submissions | Contact form and sign-up form submissions |
| GoCardless | Collects your monthly plan payment by Direct Debit, as an FCA-regulated payment institution | Your name, contact details and bank details (bank details are held by GoCardless only, never by us) |
| Ideal Postcodes | Looks up addresses from a postcode you enter | The postcode you search — not stored by them beyond the lookup |
Some of these providers may process data on servers outside the UK (including the US). Where this happens, they do so under appropriate legal safeguards such as Standard Contractual Clauses, as required under UK GDPR. We do not sell your personal data to anyone, ever.
Under UK GDPR, you have the right to:
To exercise any of these rights, use the tools in your portal, or email us at info@elimitheat.co.uk. We'll respond within one month.
If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk, or by phone on 0303 123 1113.
We take a "consent-first" approach. When you first visit, nothing beyond the strictly necessary is used until you make a choice in our cookie banner. You can change your choice at any time:
| Type | What it does | Consent needed? |
|---|---|---|
| Strictly necessary | Keeps you logged in to the portal (Supabase authentication), and remembers your accessibility settings and your cookie choice. Stored in your browser's local storage — not shared with anyone. | No — exempt under PECR |
| Analytics | Anonymous statistics that would help us improve the site. None are in use today. | Yes — stays off unless you opt in |
| Marketing | Measuring adverts or remarketing. None are in use today. | Yes — stays off unless you opt in |
Because we don't currently run any analytics or advertising cookies, choosing "Reject non-essential" changes nothing about how the site works. The control is there so that, if we ever add such tools, they will not run unless you have opted in first.
We do not make decisions that have a legal or similarly significant effect on you using solely automated means. Our AI chat assistants help answer questions and, if you ask, help book jobs — but a person at E-Limit Heat remains responsible for your service, and you can always speak to us directly on 020 3105 0508.
Our services are intended for adults entering into a contract with us. We don't knowingly collect data from children.
We may update this policy from time to time — for example, if we add a new feature or change a service provider. We'll update the date at the top of this page when we do.
Questions about this policy or your data: info@elimitheat.co.uk · 020 3105 0508.