Privacy notice

Your details and the ESOS budget screen

Who we are

Hyphora Consulting Ltd is the controller of the personal data described here. We are registered in England and Wales, company number 12904446, registered office 126 Crampton Street, London, England, SE17 3AE. Hyphora is a trading name of Hyphora Consulting Ltd. Questions, and requests to see or delete your data, go to Ben Hart at ben@hyphora.co.uk. Our main privacy notice covers everything else we do.

What we collect

• About you: first and last name, work email, job title and organisation.
• About your organisation: your answers to the screen (staff numbers, financial figures if you gave them, sites, energy use, transport and ESOS history), or the site list you uploaded.
• Whether you ticked “Send me occasional ESOS updates from Hyphora”, and when.
• Where you came from (UTM tags on the link you clicked) and a one-way hash of your IP address, used only to limit repeat submissions.

What we do with it, and the lawful basis

• To produce, check and send your screen: steps taken at your request, and our legitimate interest in responding to business enquiries.
• To keep a record of you as a business contact, so we can follow up your enquiry: legitimate interests.
• To send occasional ESOS updates, only if you ticked that box (consent). You can withdraw at any time by replying to any email or writing to us.

We don’t use analytics or tracking scripts on this site.

Who else handles it

We don’t sell or share your details. These processors handle them for us:

• Vercel (hosting and private file storage for the PDF).
• Neon (database).
• Resend (sending email).
• Google (Gmail, our inbox, which keeps a copy of the email we send you).
• Cloudflare Turnstile (spam check on the final step).

Some of these providers store or access data outside the UK, mainly in the United States. Where they do, the transfer is covered by UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the ICO’s International Data Transfer Agreement or Addendum.

How long we keep it

• Your uploaded site list: deleted 30 days after your screen is sent (or after we tell you we couldn’t produce one).
• Your contact details, your answers and the PDF we sent: up to two years after our last contact.
• If your organisation becomes a client, the records we need for that work are kept for six years under our main privacy notice.
• You can ask us to delete your data sooner at any time.

Cookies

This site sets no cookies for visitors. Your answers are kept in your browser’s session storage until you submit, so a refresh doesn’t lose them; closing the tab clears them.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to our use of it, or withdraw consent. Email ben@hyphora.co.uk. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Last updated: 4 November 2026