Summary
Heat Pump HQ is an editorial / research website. We don't run quote-request forms, we don't run a newsletter signup, and we don't sell user details to installers or lead-buyers. The personal data we process is therefore narrow — primarily anonymised analytics on which pages are read.
This policy describes what data is collected, how it's used, who it's shared with, and your rights under UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
What we collect
Analytics. We use Google Analytics 4 (GA4) to understand which content is being read, what device and browser visitors use, and how visitors arrive at the site (search engine, direct, referral). GA4 is configured with IP anonymisation. No personally identifying information (name, email, address) is sent to GA4.
Server logs. Cloudflare, our hosting provider, processes standard server-log information (IP address, user agent, requested URL, response code) to deliver the site, mitigate abuse, and produce aggregate traffic reports. Cloudflare's privacy policy applies.
Cookies. We use a small number of cookies, principally for analytics (GA4) and for remembering your light/dark theme preference. A consent banner asks for permission before non-essential cookies are set, in line with PECR.
What we don't collect
- We don't run forms that capture your name, email, address, or phone number. There are no quote-request, lead-gen, or contact forms on the site.
- We don't run a newsletter signup. We have no mailing list.
- We don't sell data to third parties.
- We don't operate a chat widget or live-support system.
Affiliate links
Where we link to a retailer or installer with an affiliate arrangement (when one is in place — see the Affiliate Disclosure), the partner's affiliate network may set a tracking cookie when you click through. That cookie is set on the partner's domain, not ours, and is governed by their privacy policy.
Who we share data with
The processors we use are:
- Cloudflare — hosting, edge delivery, DDoS protection.
- Google (GA4 / Tag Manager) — analytics.
- Google Search Console — for search performance insights from Google's search index. No user data is sent to GSC; it reports on Google's index of public pages.
We do not share data with installers, lead-buyers, or any third party other than the processors listed above.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, request correction or deletion, object to processing, and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Because the data we process is anonymous analytics, we typically have no personal record tied to you to access or delete — but if you believe we hold information about you, please flag it.
Updates
We will update this policy when our processing changes (for example, when an affiliate programme is approved and goes live). Changes are dated; material changes will be flagged on the homepage.