Privacy notice

Last updated: August 2026

Who I am

Jim Thomas, trading as Jim Thomas Energy Consultancy, of Worfield, near Bridgnorth, Shropshire. I am the data controller for the information described here, which means I am the person responsible for deciding how it is used.

You can reach me at jim@jimthomasenergy.co.uk or on 07852 545753. If you have a question about your data, ask me directly. You will not be routed through a system.

What I collect

Only what I need to answer your question or carry out the work. In practice that is:

Information	Why I need it	Lawful basis
Name and contact details	To reply to you, arrange a visit and send your report	Contract, or legitimate interests before a contract exists
Property address and details	To assess the building and produce advice specific to it	Contract
Energy bills, meter readings and tariff details	To model what your options would actually save	Contract
Photographs and measurements taken during a survey	To record what I found and support the recommendations	Contract
Quotes and reports from other companies	To review them for you	Contract
Occupancy and how the property is used	Because heating patterns change the answer	Contract
Payment and invoicing records	To take payment and meet tax obligations	Legal obligation

I do not ask for information about your health, finances beyond what is needed to invoice you, or anything else that is not relevant to the building. If you volunteer something sensitive because it affects grant eligibility or how you use the property, I will only use it for that purpose and will not pass it on without asking you first.

Energy Performance Certificates

This one deserves its own heading because people are often surprised by it. If I produce an EPC for you, I am legally required to lodge it on the national EPC register, which is a public database operated by the Ministry of Housing, Communities and Local Government. Anyone can search that register by address and see the certificate.

I have no discretion about this and it applies to every EPC produced by any assessor in England and Wales. My accreditation scheme also has the right to audit my assessments, which means they may see the survey data behind a certificate.

Who else sees your information

I do not sell data, I do not share it for marketing, and I do not pass your details to installers so they can approach you. That would undermine the whole point of what I do.

Your information is shared only in these situations:

• Specialists and contractors, where you have asked me to arrange a survey, obtain a quote or manage work. I share the minimum needed and I tell you who it is going to first.
• My accreditation scheme, for audit of energy assessments, and the national EPC register as described above.
• My accountant, for invoices and financial records.
• My insurers or legal advisers, if there were ever a claim or dispute.
• Service providers who host the tools I use, described below.
• HMRC or another authority, where the law requires it.

The services behind this website

The enquiry form on this site is handled by Netlify, which hosts the website and stores form submissions until I collect them. My email runs through GoDaddy. Both hold data on my behalf under contract and are not permitted to use it for their own purposes.

The site loads typefaces from Google Fonts. That means your IP address is visible to Google when a page loads. It sets no cookies and I receive nothing from it. This site uses no analytics, no advertising trackers and no cookies of its own, so there is no cookie banner to click away.

How long I keep it

Enquiries that do not turn into work are deleted after twelve months.

Where I have carried out work, I keep the file for six years after the last piece of work, and financial records for six years after the end of the relevant tax year. Advice can be relied on for years afterwards, and if a question or a claim ever arose I would need the file to answer it. That period reflects the limitation period for professional advice, not a wish to hold onto your data.

EPC data lodged on the national register is retained by the register operator, not by me, and I cannot remove it.

Where your data is held

In the UK and the European Economic Area, other than where a supplier processes data elsewhere under safeguards approved for that purpose. I do not deliberately transfer client data outside those regions.

Your rights

Under UK data protection law you can ask me to:

• Give you a copy of the information I hold about you
• Correct anything that is wrong or incomplete
• Delete information where there is no longer a good reason for me to keep it
• Restrict how I use it while a concern is resolved
• Provide it in a portable format, or send it to someone else
• Stop using it, where I am relying on legitimate interests

There is no charge, and I will respond within one month. Email me and I will deal with it myself. Some information I have to keep, such as tax records and lodged EPCs, and I will explain if that applies.

Keeping it secure

Files are held on password-protected, encrypted devices and backed up to an encrypted account. Survey data on my tablet is protected by device encryption and a passcode. Paper notes are transferred to digital records and destroyed. I am the only person with access.

If you are unhappy

Tell me first and I will try to put it right. If you are not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. You can go to them at any point, you do not have to come to me first.

Changes to this notice

If it changes materially I will update the date at the top. If the change affects work I am already doing for you, I will tell you directly rather than expecting you to check the website.