Skip to main content
L&D Energy

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how L&D Energy, the EPC trading division of Luminous & Deliver Ltd (“we”, “us”, “our”), collects, uses and protects your personal data when you enquire about or book one of our services.

1. Who we are

L&D Energy is operated by Luminous & Deliver Ltd, a company registered in England & Wales. For privacy enquiries, contact us at [email protected].

2. What data we collect

When you contact us or book a service, we collect:

  • Your name
  • Phone number
  • Email address
  • Property address and postcode
  • Property details relevant to the EPC (type, number of bedrooms, requested services)
  • Any additional notes you provide

We do not use cookies for tracking or advertising. We use Cloudflare Web Analytics, which is privacy-friendly and does not set cookies or identify individual visitors.

3. How we use your data

  • To respond to your enquiry and arrange your appointment
  • To carry out the EPC assessment and lodge your certificate on the UK Government EPC Register
  • To send you your certificate and any related documents
  • To invoice and collect payment
  • To meet our legal and regulatory obligations

4. Lawful basis

We process your data on the basis of (a) your consent when you submit our contact form, (b) performance of a contract once you book a service, and (c) compliance with our legal obligations as an accredited Domestic Energy Assessor.

5. Sharing your data

We share your data only where required to deliver the service:

  • The UK Government EPC Register (mandatory lodgement of EPC data)
  • Elmhurst Energy, our accreditation scheme
  • Resend, our transactional email provider
  • Your letting agent or solicitor, only if you ask us to send the certificate directly

We do not sell your data and we do not share it for marketing purposes.

6. Data retention

We retain enquiry data for up to 12 months and booking/job records for 7 years to meet UK accounting and accreditation record-keeping requirements. EPC data is held by the UK Government EPC Register for the certificate’s 10-year validity.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure where we no longer need the data
  • Object to or restrict processing
  • Request data portability
  • Complain to the Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights, email [email protected].

8. Security

We use industry-standard security measures including HTTPS encryption in transit and access controls on stored data.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised.

Call UsWhatsApp