[ Privacy ] Nexus
How we look after your data.
What personal data we collect, why we need it, who we share it with and how long we keep it. Written in plain English.
01
Who we are.
Nexus Mechanical Electrical Renewables Limited (“Nexus”, “we”, “us”) installs solar panels, battery storage, heat pumps and EV chargers, and carries out mechanical and electrical work. Our address is Unit 7, Siberia Mill, Holgate Street, Briercliffe, Burnley BB10 2HQ.
We are the data controller for the personal data described in this notice. Our data protection contact is Steve Clark. If you have a question about this notice, or want to use any of your rights, contact us:
- Email: sales@nexusmer.co.uk (please put “Data protection” in the subject line)
- Phone: 0333 049 0400
- Post: Data Protection, Nexus, Unit 7, Siberia Mill, Holgate Street, Briercliffe, Burnley BB10 2HQ
02
Who this notice covers.
- People who ask us for a quote, survey or installation, and our customers.
- Visitors to our website, nexusmer.co.uk.
- People who contact us by phone, email, our website or social media.
- People who reply to one of our adverts (see section 10).
It does not cover how other organisations handle your data, such as MCS, RECC, your network operator, a finance provider, Google, Meta or LinkedIn. Please read their own privacy notices. Our staff and job applicants receive separate privacy information.
03
The data we collect.
- Contact details: your name, address, the property address (if different), phone number and email address.
- Property details: information about the property relevant to the work, such as roof type and direction, electrical supply and meter details (including your MPAN/MPRN), your current heating system, and photos taken during the survey or installation.
- Energy use: your electricity and gas use and tariff, where you give it to us, so we can size the system and estimate savings.
- Quote, contract and payment details: quotes, contracts, invoices and payment history.
- Scheme and compliance details: what we need to register your installation with MCS, meet RECC requirements, notify or apply to your network operator, or apply for a grant on your behalf.
- Communications: records of calls, emails, messages and any complaints, and your marketing preferences.
- Website and device data: such as your IP address, browser, device and how you use our website, collected through cookies only where you allow them (see section 8).
- Social media data: your public profile name and anything you send or post to our pages (see section 9).
Special category data. We do not normally need health or other sensitive information. If you tell us about an accessibility need or vulnerability so we can support you, we will use it only for that purpose, keep it to the minimum, and rely on your explicit consent.
04
Where we get it from.
- From you: when you fill in an enquiry or quote form, call or email us, book a survey, sign a contract, or message us on social media.
- Automatically: through cookies on our website, where you allow them.
- From our adverts: when you fill in a form in one of our adverts (see section 10).
- From other organisations: such as someone who refers you to us with your permission, a finance provider handling an application you made, or MCS or your network operator when registering or checking an installation.
05
How we use it, and why.
Data protection law requires a lawful basis for each way we use personal data.
| What we use it for | Lawful basis |
|---|---|
| Replying to your enquiry, arranging a survey and preparing a quote | Steps you asked us to take before entering a contract |
| Carrying out the installation, aftercare and warranty support | Performance of our contract with you |
| Invoicing, payments and accounts | Contract; legal obligation (tax and accounting) |
| MCS registration, RECC requirements, network operator notifications and grant applications | Legal obligation; contract; legitimate interests in meeting scheme and certification rules |
| Registering your insurance-backed workmanship guarantee | Contract; legitimate interests |
| Keeping enquiry and customer records and following up quotes | Legitimate interests in managing our sales and customer relationships |
| Contacting people who fill in a form in one of our adverts | Steps you asked us to take before entering a contract |
| Sending marketing emails or texts | Consent, or the “soft opt-in” for existing customers (see section 7) |
| Website analytics and non-essential cookies | Consent |
| Running our social media pages and measuring how they perform | Legitimate interests in promoting our business |
| Handling complaints, disputes and legal claims | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have weighed our interests against your rights and will explain this if you ask.
06
Our customer records.
We keep enquiries, quotes, jobs and customer records in Simpro, our job management and customer records system. It holds your contact details, property and energy information, quotes, job notes, notes of our conversations, and where your enquiry came from. Only Nexus staff who need it can access it. Simpro processes this data on our behalf and under our instructions.
07
Marketing.
We will only send you marketing emails or texts if you have agreed to receive them or, if you are already our customer, about similar products and services, where you were given the chance to opt out when we collected your details. Every marketing message includes a way to unsubscribe, and you can also opt out at any time by contacting us (section 1). Opting out does not stop service messages about your enquiry, installation, warranty or contract.
If we start a newsletter, we will only send it to people who sign up.
08
Website, analytics and cookies.
Google Analytics 4. If you accept analytics cookies, we use Google Analytics 4 to understand how people use our website, for example which pages are visited and whether an enquiry form is sent. It uses cookies and collects device, browser and approximate location data. Analytics stays off unless you allow it.
Google Search Console. We use Google Search Console to see how our website appears in Google search results. It gives us totals, such as how many times our pages were shown or clicked for a search term. It does not tell us who you are.
Cookies. Cookies are small files stored on your device. We use:
- Strictly necessary cookies to make the site work and remember your cookie choices. These do not need consent.
- Analytics cookies (Google Analytics), only if you allow them.
- Maps (an embedded Google map), only if you allow them. Google may set its own cookies.
You can change your choices at any time using the “Cookie settings” link at the bottom of every page. Our cookie notice lists each cookie, what it does and how long it lasts.
10
Advertising.
We run online adverts through our marketing agency, Lead Pronto. If you fill in a form in one of our adverts, the advertising platform and Lead Pronto pass your details to us so we can contact you about your enquiry. We only contact you about the enquiry you made.
11
Finance.
We may introduce you to a finance provider if you would like to spread the cost of your installation. If you choose to apply, the finance provider handles your application under its own privacy notice, and any credit decision is made by them, not by us. We only share your details with them if you ask us to.
13
International transfers.
Some of our providers, including Google and Meta, may process personal data outside the UK, including in the United States. Where this happens, we rely on a recognised safeguard, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework for certified US companies), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Contact us (section 1) for more details.
14
How long we keep it.
- Enquiries that do not become a job: 2 years from our last contact, then deleted.
- Quotes, contracts, installation and certification records: for the length of your workmanship guarantee, plus 6 years after it ends, the time in which a legal claim can usually be brought in England and Wales. Where MCS or another scheme requires longer, we keep them for that period.
- Invoices and accounting records: 6 years from the end of the financial year they relate to, as HMRC requires.
- Marketing preferences: until you opt out. We then keep a short record that you opted out so we don’t contact you again.
- Google Analytics data: no more than 14 months.
- Social media messages: 2 years, unless they become part of a customer record.
When we no longer need personal data, we delete or anonymise it securely.
15
Keeping it secure.
We use appropriate technical and organisational measures to protect personal data, including access controls and agreements with our service providers. No system is completely secure, but we review our measures regularly. If a data breach is likely to put your rights at risk, we will tell you and, where required, the ICO.
16
Automated decisions and children.
We do not make decisions about you based only on automated processing that have a legal or similarly significant effect on you. Our services are for adults and businesses, and we do not knowingly collect data about children.
17
Your rights and complaints.
Under UK data protection law, you have the right to:
- be told how we use your personal data (this notice);
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, in some circumstances;
- limit how we use your data, in some circumstances;
- get your data in a portable format, where it applies;
- object to how we use your data, including for direct marketing, which we will always stop when asked; and
- withdraw your consent at any time, where we rely on consent.
To use any of these rights, contact us (section 1). We will normally reply within one month. Some rights have exceptions; for example, we may need to keep some records to meet a legal obligation. We will explain if one applies.
Complaints. If you are unhappy with how we have handled your data, please contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
18
Changes to this notice.
We may update this notice, for example when the law changes or we change how we handle data. The date at the top shows when it was last updated. If we make a significant change, we will take reasonable steps to let you know.
Questions about your data?
Email sales@nexusmer.co.uk or call 0333 049 0400.
09
Social media.
We have pages on Facebook, Instagram and LinkedIn. If you follow, like, comment on or message our pages, we can see your public profile name and what you send or post. We use this to reply to you and, if you ask for a quote, we may add your details to our customer records.
The platforms give us statistics about how our pages and posts perform, such as reach and engagement. These are totals and do not identify you. We bring these statistics into our own internal reporting tool to measure how our posts perform. For page statistics, Meta and LinkedIn act as joint controllers with us; their privacy notices explain how they use your data.