Privacy notice
Last updated: 2 October 2026.
Who we are
CANDAI, 143 Delaneys Road, Manchester, M8 4RE, runs NRG+ Trusted by CANDAI. We are the controller of your personal data. Contact us at sales@candai.co.uk.
What we collect
- Your enquiry: your name, phone number, email address, postcode, the upgrades you chose, whether you own the home, and optionally the EPC band, property type and age you tell us. We do not look your home up in the EPC register.
- Your consent: the exact wording you agreed to and the time you agreed.
- Firm applications: business and contact details a tradesperson gives us.
- Technical data: your IP address in web server logs and for rate limiting. Server logs are kept for up to 30 days.
Why we use your data
- To match you with one vetted, verified firm and to get back to you (your consent, given by ticking the box on the form, which you can withdraw at any time).
- To record and follow up your enquiry in our own enquiry system (CANDAI’s customer management system) (our legitimate interests in running the service, and your consent).
- To keep the service secure and stop abuse, for example by limiting repeated submissions (our legitimate interests).
Who we share it with
Only the one firm we match to your enquiry, and only after that match is made. We tell you which firm it is. We do not sell your data, and we do not pass your enquiry to several companies or to a list. If we cannot yet match you to a vetted, verified firm, we keep your request and do not pass it to anyone. Our hosting provider processes data on our instructions.
Cookies and fonts
This site does not set advertising or analytics cookies. Pages load fonts from Google Fonts, which means your browser sends your IP address to Google when a page loads.
How long we keep it
Enquiries are deleted from this website’s database 12 months after you make them. A copy is held in CANDAI’s customer management system. We keep that copy for 12 months as well, unless you ask us to delete it sooner. If you ask, we will delete your enquiry from both places. Server logs are kept up to 30 days. Firm applications are kept while we consider them and for as long as the firm is on our list.
Your rights
You can ask to see, correct, export or delete your data, and to withdraw consent. Write to sales@candai.co.uk. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
If we change this notice in a way that matters to you, we will update the date above and, where we can, tell you.