Privacy Policy

Background

Thermy Ltd. respects your privacy and values how your personal data is used.
We only collect and use personal data as described in this Privacy Policy and in accordance with UK law.

1. Information About Us

Operator: Thermy Ltd
Company number: 14838592
Registered address: 85 Great Portland Street, London, W1W 7LT.

2. What Does This Policy Cover?

This Privacy Policy applies to your use of thermy.co.uk and the Thermy App.
Our App may contain links to other websites or apps. We have no control over their data practices and recommend reviewing their policies.

3. What Is Personal Data?

Personal data means any information that can identify you, directly or indirectly — such as your name, email, address, or device identifiers.

4. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the rights to:

  • Be informed about how we use your data
  • Access and rectify your data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Withdraw consent
  • Request data portability
  • Complain to the ICO (though we encourage you to contact us first)

5. Data We Collect and How

| Type of Data | How We Collect It |
|---------------|------------------|
| Identity Information (name) | Provided by you when creating an account or ordering |
| Contact Information (address, email, phone) | Provided by you |
| Payment Information (card details) | Transmitted securely to our payment provider |
| Profile Information (login, subscription, heating setup) | Provided by you or collected when using Our App |
| Technical Information (IP, OS, browser) | Collected automatically through Our App |

We do not collect special category or sensitive data.

6. How We Use Your Personal Data

We use your data only where legally permitted:

| Purpose | Legal Basis |
|----------|-------------|
| Account creation and subscription management | Contract performance |
| Payment processing | Contract performance |
| Communications and support | Consent |
| Marketing emails (optional) | Consent |
| Improving and securing our App | Legitimate interest |

We will never sell your data. Marketing messages are always optional.

7. Data Retention

We keep data only as long as necessary:

  • Active subscriber information: kept for legal bookkeeping duration.
  • Payment data: not stored by us.
  • Technical session data: deleted after your session ends.

8. Data Storage and Transfers

Some data may be stored outside the UK (e.g. in EU or US data centres).
We use only providers offering adequate safeguards under UK GDPR (e.g. Standard Contractual Clauses).

Security measures include:

  • Limited internal access
  • Encrypted transmission and storage
  • Data breach response procedures compliant with ICO requirements

9. Sharing Data

We only share data:

  • With essential service providers (e.g. payment processors, hosting partners)
  • If legally required (court order, law enforcement)
  • In case of business sale or merger, under equivalent protection terms

10. Controlling Your Data

You can:

  • Opt out of marketing
  • Request access, correction, or deletion
  • Withdraw consent at any time

11. Withholding Information

You may access some parts of Our App without providing personal data, but full functionality may require it.

12. Accessing Your Data

To request a copy of your data (“subject access request”), email contact@thermy.co.uk.
We’ll respond within one month (or up to three months if complex).

13. Cookies

Our App does not use cookies.
If this changes, we will update this policy and seek consent where required.

14. Contact Us

Email: contact@thermy.co.uk
Address: Thermy Ltd, 85 Great Portland Street, London, W1W 7LT.

15. Changes to this Policy

We may update this Privacy Policy periodically.
Any updates will be posted at thermy.co.uk/legal/privacy-policy.
Last updated: 25 July 2025