Last Updated: 01 March 2025
Ivynest (“we,” “our,” or “us”) operates the website www.ivynest.co.uk (“Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site. Please read this policy carefully to understand our views and practices regarding your personal data.
Ivynest LTD acts as the data controller for the personal data we collect and process under UK GDPR regulations. We are registered in the United Kingdom, and where applicable, we comply with the requirements of the UK Information Commissioner’s Office (ICO).
We collect the following types of personal data:
We use your data to:
We may share your personal data in the following circumstances:
With Analytics Providers: To understand user behavior and improve services.
For Legal Compliance: If required by law enforcement, regulatory bodies, or for fraud prevention.
With Vetted Service Providers, Contractors, and Technology Partners: To facilitate retrofit planning, project delivery, and energy management solutions. This includes making relevant client information available via our CRM platform (for premium supply chain partners), enabling them to provide accurate quotes, manage communications, and deliver services efficiently.
With Financing and Grant Partners: When you use Ivynest’s financing or grant features, relevant financial data may be shared with our vetted lending partners to facilitate applications. We do not process financial applications directly, and all financial data is handled securely by our partners under their privacy policies.
You can opt out of data sharing for financing or contractor matching at any time by contacting us.
We process your personal data under the following lawful bases in accordance with UK GDPR:
Contractual Necessity – To provide services you’ve signed up for, including retrofit assessments and project support
Legitimate Interests – To improve our services, provide relevant partner matches, and operate our CRM tools for contractors
Consent – For optional activities like marketing or when required by law (e.g., cookies, data sharing with grant/finance partners)
Legal Obligation – Where necessary to comply with laws or regulatory requests
We use cookies to:
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include restricted access controls, secure authentication mechanisms, and regular security monitoring. However, no system is entirely risk-free, and we encourage users to use strong passwords and safeguard their login credentials.
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, including ongoing customer engagement and marketing activities.If you delete your account, we will retain only the necessary information for legal compliance, fraud prevention, or dispute resolution, after which unnecessary data will be securely erased.If you express interest in our services but do not proceed immediately, we may retain your data for up to 24 months to offer follow-up opportunities. You can request deletion of your data at any time.
You have the right to:
Ivynest does not collect or store sensitive personal data, including financial, medical, or ethnic information. However, if you apply for financing or grants through our platform, our lending partners may process financial data to assess eligibility. These third parties operate under their own privacy policies, and we encourage you to review them before submitting any financial information. Additionally, our services are intended for individuals 18 years or older, and we do not knowingly collect data from minors.
We may analyse user interactions and behavior to enhance services and tailor recommendations. However, we do not use fully automated decision-making that has significant legal effects on users.
While we primarily process and store personal data in the UK, some of our IT operations are supported by team members based in France. As France is covered under the UK’s adequacy regulations, these data transfers comply with UK GDPR standards, ensuring full data protection. We implement strict security measures to safeguard all personal data.
We may update this Privacy Policy periodically. If we make significant changes affecting how we collect, use, or share your data, we will notify you through prominent means, such as email or an in-platform notification, in accordance with applicable laws.
If you have any questions or concerns regarding this Privacy Policy, please contact us via email: hello@ivynest.co.uk
Ivynest LTD Address Registration
Unit 7 Landmere Lane, Wheatcroft Business Park
Edwalton, Nottingham, United Kingdom, NG12 4DG