Last updated: June 2026
This policy explains what personal data Green Agent collects, how and why we use it, who we share it with, and the rights you have under UK data protection law — the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Green Agent is a retrofit consultancy operated by Green Agent Limited, a company registered in England and Wales (company number 09680886), based in London. For the purposes of UK data protection law, Green Agent Limited is the “data controller” responsible for your personal data.
If you have any questions about this policy or about how your data is handled, contact:
Green Agent Limited
Email: duncan@mygreenagent.co.uk
We collect only what we need to respond to you and, where relevant, to deliver a project:
Information you give us — when you complete the enquiry form or email us, we collect your name, email address, and any details you choose to share about your property, your location, and your retrofit plans. If you go on to become a client, we will hold further correspondence and project records relating to the engagement.
Information collected automatically — if you consent to analytics, we collect anonymised usage data through Google Analytics 4: pages viewed, time on site, device and browser type, and approximate (city-level) location derived from a truncated IP address. See section 7.
We do not collect payment or bank details through this website; any invoicing is handled separately. We do not knowingly collect special category data (such as health or political views), and we ask that you do not include such information in enquiries.
We use your data for the following purposes, each with its legal basis under UK GDPR:
To respond to your enquiry and assess whether we can help — legal basis: legitimate interests (responding to a request you have initiated). You can object to this at any time.
To deliver a project and manage the relationship, if you become a client — legal basis: performance of a contract with you, and our legitimate interest in keeping accurate project records.
To understand how the website is used — legal basis: your consent, which you give or refuse for analytics cookies and can withdraw at any time (see section 7).
We do not use your data for advertising, and we never sell it.
We do not sell or rent your personal data. We share it only with the service providers that help us run the consultancy and this website, each of which acts as a “data processor” under contract with us:
Netlify — hosts this website and processes enquiries submitted through the contact form. Form submissions are stored in Netlify’s systems so that we can read and reply to them.
Google (Google Analytics 4) — provides the website analytics described in section 7, where you have consented.
Email provider — our email is hosted by a third-party provider through which your correspondence passes and is stored.
Specialist consultants on your project — where you become a client, we may share relevant project information with named specialists working on your building (for example an architect, structural engineer or surveyor). They operate under equivalent confidentiality obligations.
We may also disclose data where we are required to by law, or to establish, exercise or defend legal claims.
Some of our processors — including Netlify and Google — are based in, or store data in, the United States. Where your data is transferred outside the UK, it is protected by appropriate safeguards recognised under UK law, such as the UK extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses. You can ask us for more detail on these safeguards using the contact details above.
Enquiries that do not lead to an engagement are kept for up to 24 months and then deleted, unless we agree otherwise. Client project records are retained for 6 years after completion, in line with standard professional and contractual practice and to meet potential legal obligations. Analytics data is retained according to the period set in Google Analytics (no longer than 14 months).
Strictly necessary cookies that the site needs to function may be set without consent. For anything else, we rely on your consent.
Where you consent, this site uses Google Analytics 4 to understand how visitors use it. GA4 sets cookies and processes usage data in a form that does not directly identify you; IP addresses are truncated and not stored by us. We do not use advertising or cross-site tracking cookies.
You can withdraw consent or refuse analytics cookies at any time through the cookie controls on this site (where available) or your browser settings, and you can install the Google Analytics opt-out browser add-on. Refusing analytics does not affect your ability to use the site.
We keep your data on reputable, access-controlled services and limit access to Duncan Gilbert and, where necessary, the specific specialists working on your project. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information against loss, misuse and unauthorised access.
Under UK GDPR you have the right to: be informed about how your data is used; access the personal data we hold about you; have inaccurate data corrected; have your data erased (subject to any legal obligation to retain it); restrict or object to processing; data portability; and, where we rely on consent, to withdraw that consent at any time.
To exercise any of these rights, email duncan@mygreenagent.co.uk. We will respond within one month. Exercising your rights is free unless a request is manifestly unfounded or excessive.
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
This website and our services are intended for adults and are not directed at children. We do not knowingly collect data relating to children.
If we make material changes we will update the date at the top of this page. We do not send policy-update emails.