Your privacy.

Counting visits

We count visits ourselves so we can see which pages help people. We don’t use cookies or anything stored in your browser for this, and we don’t use Google Analytics or any other outside tracker.

• For each page you look at we record the page, the site that sent you there (without the rest of its address), any campaign tags in the link, how long you stayed, your browser and system type (such as “Safari on iPhone”), and roughly how wide your screen is.
• Your internet address is never kept. To count each visitor once a day, we mix your address and browser type with a random code that changes every day and keep only the result. The day’s code is deleted after two days, so a visit today can’t be linked to a visit on another day.
• Your location comes from Cloudflare, which carries the site’s traffic, and goes no closer than your town: the country, the region, the town and, in the UK, the first letters of the postcode area (such as “HA”).
• If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is recorded.
• These records are deleted after 13 months.

We also count what people do, such as sending an enquiry, creating an account or sending themselves a report. These counts don’t include your email address.

If you create an account

The energy check asks you to sign in with your email and a password. When you create an account or set a new password, we email you a code to confirm the address is yours. An account keeps:

• your email address, when you signed up and when you last signed in;
• your password, stored only in a scrambled form (a salted hash) that can’t be turned back into the password;
• your smart meter readings (electricity bought and sold back, half hour by half hour) and your answers in the check;
• where the readings came from, such as your Octopus account and meter numbers (your Octopus API key is never sent to us);
• your properties, if you check more than one: the name you give each, and its postcode and full address if you add them;
• your postcode and where it is on the map, if you give it (it sets your electricity region and appears on your report);
• how many reports you’ve emailed yourself.

Signing in sets one cookie, which keeps you signed in for up to 90 days and is only used for that. The energy check also remembers your answers in your own browser (and your Octopus API key, only if you tick the box to remember it), so you don’t have to type them again. A remembered API key is encrypted in your browser, never leaves your device, and is forgotten after 90 days without use, when you untick the box, or if Octopus stops accepting it.

If you read your rates from a bill, the PDF is read in your own browser: it isn’t uploaded to us or kept. Only the rates you confirm are used.

To find a postcode, our server asks postcodes.io where it is and Octopus Energy which electricity region it’s in. Only the postcode is sent, never your email or anything else, and those services don’t keep it for us.

Reports are emailed only to your own address. The WhatsApp share sends a short summary and a link, never your readings or your email.

The figures from your energy check

Before the energy check starts, we ask you to agree that we keep its figures anonymously: how much electricity is used and when, the tariff, any solar or battery, the electricity region, and the savings worked out. Nothing that says who you are or where the home is (beyond the region) is kept with them. If you don’t agree, the check doesn’t go on and nothing is sent.

If you also choose to share your details, the same figures are linked to your account (your email) and the property (its name, address and postcode if you added them), so an expert can look over them and get in touch. You can turn sharing off at any time, which unlinks them. If you delete your account, the figures stay but nothing in them points to you any more.

Rates read from a bill

Bills you add to the energy check are read on your device and never sent to us. If you choose to use the rates a bill shows, and leave “Share these rates anonymously” ticked, those rates are sent to us with your electricity region only: the supplier and tariff name, the unit rates and hours, and the standing charge. Nothing about you or the home goes with them. Untick it and nothing is sent; your choice is remembered in this browser. Our staff check them before any is added to the tariffs we compare; none is added automatically.

If you ask us to review your check

When you choose “Ask GenNext to review this”, we keep a copy of the report as it was then, your answers then, and the note and phone number you give, if any. GenNext Power staff can see those, your saved meter readings and your answers, so we can check the figures and get back to you. We email our staff to say it has arrived. Deleting your account deletes these too.

If you ask us to contact you about a package

When you choose “Contact us about this” in the energy check, we keep the package or parts you chose with the price we showed, the saving we worked out, the times you’d like a call, your phone number, any note, the property’s name, address and postcode, and when you agreed to be contacted. GenNext Power staff use them to phone you and arrange a visit, and add the visit date, fitting date and notes as things go on. We email our staff to say it has arrived. Deleting your account deletes these too.

Quotes

A quote we issue you after a visit is kept exactly as issued, with its PDF: its number, the parts, prices and VAT, the property’s name, address and postcode, the email address it was sent to, and who issued it and when. Quotes are business records, so they’re never changed or deleted, including when you delete your account; they’re then no longer linked to it.

Links to energy suppliers

If we show a link to switch to a supplier we work with, and you follow it, we keep a record of the supplier and tariff, where in the check the link was, the saving shown, and a reference to match any commission the supplier pays us. These records stay when you delete your account, as business records, but are no longer linked to it.

Deleting your account

In the energy check, choose “Delete my data” and confirm. That deletes your account, your readings, your answers and any requests for us to contact you (with the phone numbers in them) straight away, and signs you out everywhere. The counts described above stay, but nothing in them points to you any more. Issued quotes and supplier link records stay as business records, no longer linked to your account (see above). We do keep a note of each sign-in code we emailed (the address and when, never the code itself), to stop the sign-in form being misused; ask us if you’d like those removed too.

If you don’t sign in to your account for two years, we delete it the same way. We email you a month before to say when; signing in before then keeps it.

Enquiries

When you send an enquiry, we keep what you put in the form (your name, email, and phone number and postcode if you gave them, what you’re interested in and your message) so we can reply, and we email it to [email protected] and [email protected]. Emails are sent through our email provider, Resend. If you’d like an enquiry deleted, just ask.

Questions

Email [email protected] or [email protected], or call 07981 229990. GenNext Power Ltd, company number 13659186, Ruislip, Middlesex.