Coventry Building Society

Privacy Notice

About this Notice

This Privacy Notice describes the information we collect about you, how we use it and why when you visit this website, and create an action plan using the Home Energy Efficiency Tool. Throughout the rest of this notice these will be referred to as the ‘website’, ‘tool’ and ‘plan’. This Privacy Notice relates to the use of the website, tool and plan only. Privacy information relating to our products and services can be found on our main website Privacy Notice. This Privacy Notice should be read alongside our Cookie Notice and our terms of use for the website.

What’s in this Notice

Your right to privacy is important to us. When you visit the website and create a plan, we want you to be confident that we’ll look after your information. We’ll make it clear what we collect personal information for and why.

Who is the data controller?

We’re Coventry Building Society Group and we’re the ‘data controller’ of any personal data that we collect about you. The ‘data controller’ is the organisation responsible for making sure your information is processed fairly and lawfully.

The group is:

Coventry Building Society
Godiva Mortgages Limited
ITL Mortgages Limited

When we use the terms we, us, our and the Group in this Notice, we mean Coventry Building Society Group.

Information we may collect on the website and why

When you visit the website and use the tool, we may collect the following information:

house number/name and postcode
information about your property e.g., number of bedrooms and property age

The postcode is required to help make calculations within the tool to work out the average temperatures in your area.

The house number/name is required to check whether the property has an Energy Performance Certificate (EPC) rating and if so to get the rating to help make recommendations within your plan.

We collect details about your property to help create your plan.

If you decide to save your plan you’ll be given a unique code to enter to retrieve it at a later date.

Cookies

We use cookies on the website. You can find out more information in our Cookie Policy.

Analytics

When you visit the website, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out such things as the number of visitors to the various parts of the site. This information is only processed in a way that does not directly identify anyone. We do not make, and do not allow Google Analytics to make, any attempt to find out the identities of those visiting the website.

You can read more about how we use cookies and analytics, and how to change your preferences, in our Cookie Policy.

Who we share your information with?

The website is operated and maintained by our third-party provider the Energy Saving Trust (EST) who store the information you provide to create your unique plan.

As outlined above Google Analytics is used on the website and is maintained by us. EST are unable to directly access the information collected through Google Analytics.

We check your postcode and house number with the Energy Performance of Buildings Register to see if there is an Energy Performance Certificate (EPC). For information about this please see https://epc.opendatacommunities.org/.

Hosting and retention

Stored plans are hosted in a data centre located within the UK. Plans will be stored for 12 months after creation and will then be deleted. Google Analytics data is set to expire after 26 months.

Purpose and lawful basis for processing

Data protection laws require us to explain what ‘legal grounds’ justify us processing your information, including sharing it with other organisations.

The legal grounds we use in relation to the data processed on the website are:

consent
legitimate interests

This is a list for all the ways we use your information for each of these legal grounds:

Consent

Cookies - where consent is required as detailed in the Cookie Policy. The purpose for using your data is to maintain and monitor the performance of our website.

Plan creation - to create and store your plan, if you do not provide the information a plan cannot be created.

Legitimate interests

to maintain the security and functionality of the website
for monitoring and performance purposes to understand how visitors use the website
for website development
to check whether your property has an Energy Performance Certificate

What are your rights?

As we’re processing your personal data for our legitimate interests as stated above, you have the right to object to our processing of your personal data. There are legitimate reasons why we may refuse your objection, which depend on why we are processing it. If you’ve created a plan and no longer want us to store it you can withdraw your consent to us storing the plan and it will be deleted.

For more information on your rights, please see ‘Your rights as an individual’ below.

You can change your cookie preferences as detailed in the Cookie Policy

Your rights as an individual

By giving us your information, you become a ‘data subject’. Here are the rights you have as a data subject, under data protection laws:

to be informed about how we process your personal information
to withdraw your consent
to have your personal information corrected or updated if it’s inaccurate or incomplete
to object to us processing your personal information
to restrict how we process your personal information
to request access to your personal information and details about how we process it
to move, copy or transfer your personal information (this is called ‘data portability’).

How to make a request under any of these rights

To ask us about these rights or to make a formal request, get in touch:

Email: Data.Protection@thecoventry.co.uk - You can also contact our Data Protection Officer (DPO) by sending an email to this address if you have any queries about the use of your data.