Home Upgrade Grant Scheme (HUG2) Privacy Notice
This privacy notice applies to the Home Upgrade Grant Scheme (HUG2) provided by °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« and should be read in addition to °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«'s Full Privacy Notice.
We keep this Privacy Notice under regular review, and we will place any updates on this web page. This notice was last updated on 20 September 2023.
Purpose for processing
This notice explains how °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).
The purpose of collecting and processing your personal data is to support the delivery and administration of the Home Upgrade Grant Scheme Phase 2 (together the Scheme).
Personal information collected and lawful basis
We will collect and process the following personal data. Some of the data we collect will be from publicly available sources.
Personal data collected about applicants to the Scheme:
- Your name
- Email address
- Phone number
- The names of everyone living in the property
- The age ranges of adults living in the property
- The names and ages of children living in the property
- Address and details of property receiving the HUG 2 installation(s)
- Details about the HUG 2 installation(s) installed at the property, including type, size and cost
- Contact address (if not the property receiving the HUG 2 installation(s))
- Address and details of property offered, but not receiving, the HUG 2 installation(s)
- Household income and any other scheme eligibility information including benefits checks and evidence of council tax discounts
- Any financial contribution you have made towards the HUG 2 installation(s)
- Details about the expected energy, carbon and cost savings expected to be delivered by the installation, including pre- and post-installation property EPC details where appropriate
Personal data collected about installers:
- Your name
- Contact address
- Email address
- Phone number
- Relevant accreditation and registration information
- Details of HUG 2 installations delivered
- Whether directly contracted or sub-contracted by °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« to install HUG 2 installations
- The number of employees in your organisation
The legal basis for processing personal data
The legal basis for processing your personal data is:
Article 6(1)(e) UK GDPR Public task: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
Public task processing is necessary for the performance of a task carried out in the public interest and is based on legislation. For the Scheme, the applicable legislation is:
- Local Government Act 1972
- Localism 2011, s1
- Warm Homes and Energy Conservation Act 2000
The specific public task is the delivery, administration and evaluation of, as well as statistical, research and fraud prevention purposes relating to, the Scheme.
Research Consent
DESNZ will be conducting an evaluation of the Scheme. DESNZ may wish to contact you and request you take part in further research. °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« will ask you if you consent to be contacted and pass your details to DESNZ for this purpose if you agree.
Where the research involves processing of personal data in addition to that already collected for delivery of the Scheme, you will be given the opportunity to opt-in to that research at the point of contact. DESNZ will then contact you to carry out their research. If you do not agree to this, then please tell us. If you later change your mind and no longer wish to be contacted for research, then please tell us and we will inform DESNZ.
Who we may share your information with
The Data Controllers for the Scheme are:
- °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«
- Bromsgrove District Council
- Redditch Borough Council
- Malvern Hills District Council
- Wychavon District Council
- Midlands Net-Zero Hub
- Act on Energy
- Act on Energy will support people completing an application for the funding and check the applicant’s eligibility for the Scheme. They may also offer energy efficiency advice and refer applicants to other energy efficiency schemes
- The Department for Energy Security and Net Zero (DESNZ)
- and its contractors for delivery, administration and evaluation of the scheme, statistical, research and fraud prevention purposes
- Ofgem and delivery partners of central and local government home energy schemes such as the Energy Company Obligation and Renewable Heat Incentive
- HM Land Registry
- The appointed contractors and their subcontractors including the installer, retrofit roles consultant, Principal Designer and in some cases the clerk of works
Delivery and administration of the Scheme may require linking of your data to other data sets held by the Data Controllers.
Your personal data may also be shared with other Government departments where necessary.
We may share your data if we are required to do so by law, for example by court order or to prevent fraud or other crime.
Your personal data will be stored on °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óȫ’s IT infrastructure and the IT infrastructure of those parties named in this privacy notice.
Automated decision making
Your personal data will not be subject to automated decision making by °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«.
International transfers
If your personal information is transferred outside the United Kingdom or the European Economic Area (EEA) by °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« for processing or storage purposes, °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« will ensure that safeguards are in place to protect it to at least the standard applied within the EEA.
How long we will hold your information
Your personal data will be stored securely for a maximum period:
- 10 years by:
- °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«
- Bromsgrove District Council
- Redditch Borough Council
- Malvern Hills District Council
- Wychavon District Council
- Midlands Net-Zero Hub
- Act on Energy
- the appointed contractors
- 25 years of following the close of the Scheme:
- DESNZ who may choose to store anonymised data beyond this period. Please see the for details of how they use and manage your data.
Your information rights
You are entitled to a copy, or a description, of the personal data °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« hold that relates to you, subject to lawful restrictions. Please go to our to find out how to make a request.
You may be entitled to rectification, restriction, objection, and erasure of your personal information depending on the service and legal basis. We are unlikely to be able to erase your data if you have been awarded a grant as this will be needed to comply with the grant conditions with DESNZ.
You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.
You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.
You have the right to object to the processing of your personal data.
When processing is based on your consent, you have the right to withdraw consent to the processing of your personal data at any time. For the Scheme, your consent is only required for further research purposes as detailed above.
Please see our overarching for further contact details or if you have a complaint about your information rights.
Contact details
The Data Controllers for your personal data are Midlands Net Zero Hub (part of Nottingham City Council), °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«, Bromsgrove District Council, Malvern Hills District Council, Redditch Borough Council, Wychavon District Council, Act on Energy and the Department for Energy Security and Net Zero (DESNZ). The contact details for each of these organisations is given below.
Midland Net Zero Hub (part of Nottingham City Council)
You can contact the data protection officer at:
Loxley House,
Station Street,
Nottingham,
NG2 3NG
Email: data.protectionofficer@nottinghamcity.gov.uk
°ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ«
You can contact the data protection officer at:
County Hall,
Spetchley Road,
Worcester,
WR5 2NP
Email: dataprotection@worcestershire.gov.uk
Bromsgrove District Council
You can contact the data protection officer at:
Town Hall,
Walter Stranz Square,
Redditch,
B98 8AH
Email: information.management@bromsgroveandredditch.gov.uk
Malvern Hills District Council
You can contact the data protection officer at:
Council House,
Avenue Road,
Malvern,
WR14 3AF
Email: SAR@malvernhills.gov.uk
Redditch Borough Council
You can contact the data protection officer at:
Town Hall,
Walter Stranz Square,
Redditch,
B98 8AH
Email: information.management@bromsgroveandredditch.gov.uk
Wychavon District Council
You can contact the data protection officer at:
Civic Centre,
Queen Elizabeth Drive,
Pershore,
WR10 1PT
Email: SAR@wychavon.gov.uk
Act on Energy
You can contact the data protection officer at:
Unit 2 Lauriston Business Park,
Pitchill, Salford Priors,
Warwickshire,
WR11 8SN
Email: administration@actonenergy.org.uk
Department for Energy Security and Net Zero
You can contact the DESNZ Data Protection Officer at:
DESNZ Data Protection Officer
Department for Energy Security and Net Zero,
1 Victoria Street,
London,
SW1H 0ET
Email: dataprotection@desnz.gov.uk
Complaints
If you consider that your personal data has been misused or mishandled, you may make a complaint to the Data Protection Officer at °ÄÃŽðËãÅÌ×ÊÁÏÃâ·Ñ´óÈ« in the first instance. If you are not satisfied with the response you can complain to the Information Commissioner, who is an independent regulator. The Information Commissioner can be contacted at:
Information Commissioner's Office
Wycliffe House,
Water Lane,
Wilmslow,
Cheshire,
SK9 5AF
0303 123 1113
Email: casework@ico.org.uk
Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.