Privacy notice

Last updated: 16 October 2026.

This notice explains what personal information Toastie collects through www.toastie.me, why, who we share it with, how long we keep it, and your rights.

Who we are

Toastie Home Services Ltd ("Toastie", "we", "us") is the controller of your personal information. We are registered in England and Wales, company number 17414616, registered office 20 Wenlock Road, London, England, N1 7GU. We are registered with the Information Commissioner's Office (ICO), registration number ZC274739.

For anything about your personal information, email info@toastie.me or write to us at our registered office.

What we collect

When you register your interest: your name, email address, phone number and postcode, whether you'd like news and offers from us, and whether you'd like a price when cover opens. We also record which kit you have, and, if you came from one of our adverts or links, which one (for example the campaign name), so we know what’s working.
When you send us an enquiry: your name, contact details, postcode, company name (for landlords, businesses and installers), what kit you have and your message.
When you use the website: our hosting provider keeps short-term technical logs (such as your IP address, browser type and the pages requested) to keep the site running and secure. If you agree to analytics cookies, Google Analytics records how you use the site, such as pages visited, how long you stayed, roughly where you are (town or region), your device type and how you arrived. See our Cookie policy. If you agree to cookies, HubSpot also records the pages you visit. If you then register your interest or contact us, those visits are linked to your record.
When you use our heat pump calculator: the postcode, house number and home details you enter, your energy use and prices, and your choices (such as a Toastie plan you’re interested in). If you ask for your report, we also collect your first name and email address, whether you’d like news and offers from us, and whether you’d like us to recommend an installer. To fill in your home details, we look up your home’s Energy Performance Certificate on the government’s EPC register and check your postcode with postcodes.io. To estimate solar output, we send your approximate location to the European Commission’s PVGIS service. We only send them your postcode, house number or approximate location.

We don't ask for special category information (such as health information). Please don't include it in messages to us.

We don't sell plans, take payments or monitor equipment through this website yet. Before we do, we'll update this notice to explain what information those services use.

Why we use it, and our lawful basis

To keep you on our waitlist and reply to you: our legitimate interest in responding to people who contact us, and steps you've asked us to take before entering a contract.
To send you news and offers: only with your consent, which you give by ticking the box. You can withdraw it at any time using the unsubscribe link in any email, or by emailing us.
To keep the website and our systems secure: our legitimate interest in protecting our services and the people who use them.
To understand how the website is used and improve it (Google Analytics and HubSpot): only with your consent, given by clicking "Accept all" on the cookie banner. You can withdraw it at any time using "Cookie settings" at the bottom of any page.
To meet legal duties: for example responding to a lawful request from a court or regulator. Our lawful basis is legal obligation.
To make your heat pump report, and to recommend an installer if you ask: steps you’ve asked us to take before entering a contract. We keep a copy of your report so we can answer questions about it. We won’t pass your details to an installer without asking you first.

Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details of that assessment.

We don't make decisions about you by automated means alone.

Who we share it with

We never sell your personal information. We share it only with:

Our service providers, who act on our instructions: Vercel (website hosting), Supabase (our database), HubSpot (our customer records and emails, and website visit tracking if you accept cookies), and Google (website analytics, only if you accept analytics cookies).
Others where the law requires it, for example when asked by a court or regulator.

Transfers outside the UK

Some of our providers are based in, or have staff or systems in, the United States or the European Economic Area. Where your information is transferred outside the UK, it is protected by one of the safeguards UK law allows: the UK's adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the ICO's International Data Transfer Agreement or Addendum. You can ask us which safeguard applies to each provider.

How long we keep it

Waitlist and marketing: until you ask us to remove you, or 24 months after we last heard from you.
Enquiries: 2 years after we last replied.
Website technical logs: for a short period set by our hosting provider.
Website analytics: 14 months, the setting we use in Google Analytics.
Heat pump reports: 24 months after you asked for the report.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal information we hold about you
ask us to correct anything that's wrong or incomplete
ask us to delete your information
ask us to limit how we use it
object to how we use it, including an absolute right to stop direct marketing
ask us to move it to another organisation (data portability)
withdraw your consent at any time, where we rely on consent

Some rights may be limited, for example where we have to keep records by law. To use any of them, email info@toastie.me. It's free, and we'll reply within one month.

Keeping it safe

Our systems use encrypted connections. Access to personal information is limited to the people who need it, and our admin systems require two-factor login. Our providers are chosen for their security standards.

Children

Our services are for adults who own or are responsible for a home. We don't knowingly collect information from anyone under 18.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, phone 0303 123 1113.

Changes to this notice

We'll update this notice when our services or the law change, and show the date of the latest version at the top. If a change affects you significantly, we'll tell you.