Privacy Policy

Last Updated: 01 March 2025

Ivynest (“we,” “our,” or “us”) operates the website www.ivynest.co.uk (“Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site. Please read this policy carefully to understand our views and practices regarding your personal data.

1. Data Controller Information

Ivynest LTD acts as the data controller for the personal data we collect and process under UK GDPR regulations. We are registered in the United Kingdom, and where applicable, we comply with the requirements of the UK Information Commissioner’s Office (ICO).

2. Information We Collect

We collect the following types of personal data:

  • Personal Information:Name, email address, and physical address.
  • Automated Information:Data collected via cookies and tracking technologies.
  • Third-Party Data:We may receive additional details from external sources, such as property records, grant eligibility databases, and analytics providers.

3. How We Collect Information

  • Directly from You:When you provide it through forms, communications, or account creation.
  • Automatically:When you interact with our Site using cookies and tracking tools.
  • From Third Parties:We may obtain relevant data from external service providers to improve our services

4. Use of Information

We use your data to:

  • Provide and manage our services
  • Perform marketing and send relevant updates
  • Analyse site traffic and user interactions
  • Deliver customer support
  • Ensure compliance with applicable regulations
  • Match users with vetted contractors, service providers, and supply chain partners able to deliver retrofit works
  • Match users with financing options
  • Match users with government grant schemes
  • Provide vetted supply chain partners, assessors & coordinators with access to client data through our CRM platform to enable project delivery, quoting, and client communication (as part of our premium partner services)

5. Data Sharing

We may share your personal data in the following circumstances:

  • With Analytics Providers: To understand user behavior and improve services.

  • For Legal Compliance: If required by law enforcement, regulatory bodies, or for fraud prevention.

  • With Vetted Service Providers, Contractors, and Technology Partners: To facilitate retrofit planning, project delivery, and energy management solutions. This includes making relevant client information available via our CRM platform (for premium supply chain partners), enabling them to provide accurate quotes, manage communications, and deliver services efficiently.

  • With Financing and Grant Partners: When you use Ivynest’s financing or grant features, relevant financial data may be shared with our vetted lending partners to facilitate applications. We do not process financial applications directly, and all financial data is handled securely by our partners under their privacy policies.

You can opt out of data sharing for financing or contractor matching at any time by contacting us.

Lawful Basis for Processing:

We process your personal data under the following lawful bases in accordance with UK GDPR:

  • Contractual Necessity – To provide services you’ve signed up for, including retrofit assessments and project support

  • Legitimate Interests – To improve our services, provide relevant partner matches, and operate our CRM tools for contractors

  • Consent – For optional activities like marketing or when required by law (e.g., cookies, data sharing with grant/finance partners)

  • Legal Obligation – Where necessary to comply with laws or regulatory requests

6. Cookies and Tracking Technologies

We use cookies to:

  • Analyse website performance
  • Enhance user experience
  • Deliver targeted advertising You can manage or disable cookies through your browser settings or our Privacy Policy.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include restricted access controls, secure authentication mechanisms, and regular security monitoring. However, no system is entirely risk-free, and we encourage users to use strong passwords and safeguard their login credentials.

8. Data Retention and Account Deletion

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, including ongoing customer engagement and marketing activities.If you delete your account, we will retain only the necessary information for legal compliance, fraud prevention, or dispute resolution, after which unnecessary data will be securely erased.If you express interest in our services but do not proceed immediately, we may retain your data for up to 24 months to offer follow-up opportunities. You can request deletion of your data at any time.

9. Your Rights

You have the right to:

  • Access, correct, or delete your personal data
  • Restrict processing or object to marketing communications

10. Sensitive Data & Children’s Information

Ivynest does not collect or store sensitive personal data, including financial, medical, or ethnic information. However, if you apply for financing or grants through our platform, our lending partners may process financial data to assess eligibility. These third parties operate under their own privacy policies, and we encourage you to review them before submitting any financial information. Additionally, our services are intended for individuals 18 years or older, and we do not knowingly collect data from minors.

11. Automated Decision-Making & Profiling

We may analyse user interactions and behavior to enhance services and tailor recommendations. However, we do not use fully automated decision-making that has significant legal effects on users.

12. International Data Transfers

While we primarily process and store personal data in the UK, some of our IT operations are supported by team members based in France. As France is covered under the UK’s adequacy regulations, these data transfers comply with UK GDPR standards, ensuring full data protection. We implement strict security measures to safeguard all personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. If we make significant changes affecting how we collect, use, or share your data, we will notify you through prominent means, such as email or an in-platform notification, in accordance with applicable laws.

14. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us via email: hello@ivynest.co.uk

Ivynest LTD Address Registration
Unit 7 Landmere Lane, Wheatcroft Business Park
Edwalton, Nottingham, United Kingdom, NG12 4DG