Privacy policy
Last updated: 28 July 2026
MEES Radar builds ranked commercial retrofit lead data from official public records. This notice explains what personal data we hold, why we hold it, and what you can do about it.
Who we are
MEES Radar Ltd, registered in England and Wales, company number 17287831. Registered office: Delph Lodge, Brandreth Park, Wigan, WN8 7AG, United Kingdom.
We are the data controller for the personal data described in this notice.
Privacy contact: jack@meesradar.co.uk
The personal data we handle
Enquiries and sample requests. When you use our contact form we collect your name, company name, email address, telephone number (optional), the postcode areas you cover, your request type, and anything you write in the message field. We also record the time of submission and the originating IP address to prevent spam.
Client records. If your firm becomes a client, we hold the names, business contact details and correspondence of the people we work with, together with records of your territory, deliverables, invoices and payments.
Business prospect records. We identify commercial retrofit firms that may want the service and hold business contact information about them: company name, trading address, business email address and telephone number, website, and where relevant the name and role of a director or owner. Where a firm is a sole trader or an unincorporated partnership, or where a named individual is identifiable, this is personal data.
Property records in our lead data. Our lead lists are built from the Government's non-domestic Energy Performance Certificate register and describe buildings, not people: address, EPC band, floor area, the improvement measures recommended on the certificate, certificate number and assessment date. We do not include owner, landlord, tenant or occupier contact details in any deliverable, and we do not supply contact data for the buildings we list. A small number of non-domestic records can nonetheless relate to an identifiable person - for example where premises are also a sole trader's business address. Where that is the case, this notice applies to those records.
Website and technical data. Our hosting provider keeps standard server logs, which include IP address, browser type and the pages requested. We use only cookies that are strictly necessary to make the site work. We do not use advertising or analytics cookies, and there is nothing to consent to.
Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR Article 6) |
|---|---|
| Reply to your enquiry, send a free sample, arrange a walkthrough | Steps taken at your request before entering a contract - Art. 6(1)(b); and our legitimate interests in responding to business enquiries - Art. 6(1)(f) |
| Deliver the service, invoice and support you as a client | Performance of a contract - Art. 6(1)(b) |
| Contact commercial retrofit firms about the service | Our legitimate interests in offering a relevant service to businesses likely to want it - Art. 6(1)(f) |
| Compile, score and rank property records from public registers | Our legitimate interests, and those of our clients, in producing accurate commercial property intelligence - Art. 6(1)(f) |
| Keep accounting and company records | Legal obligation - Art. 6(1)(c) |
| Maintain a suppression list of people who have asked not to be contacted | Legal obligation and our legitimate interests in honouring your request - Art. 6(1)(c) and 6(1)(f) |
Where we rely on legitimate interests we have assessed the benefit to us against your rights and expectations, and we review that assessment annually. You can object at any time (see Your rights). Where an objection concerns direct marketing, we will always stop.
Marketing
We market business-to-business only. Every marketing email identifies us and carries a simple way to opt out; you can also opt out at any time by replying, or by emailing jack@meesradar.co.uk. We do not use open- or click-tracking pixels in our outreach email. Where a business is a sole trader or an unincorporated partnership, we only send marketing email where we have consent or an existing relationship that permits it. We do not send marketing text messages or automated calls, and we do not sell, rent or share our contact lists.
Where our data comes from
- You, when you complete our contact form or correspond with us.
- The MHCLG non-domestic EPC register (get-energy-performance-data.communities.gov.uk). This contains public sector information licensed under the Open Government Licence v3.0.
- Companies House, for company status, registered details and officer information.
- Publicly available business contact information, such as company websites and business directory listings.
We use these sources to identify and qualify commercial properties and to identify contractor firms who may want the service. We do not use them to supply contact details for the owners or occupiers of the buildings we list.
Who we share it with
We use a small number of service providers who process personal data on our behalf, under contract and on our instructions:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting |
| Supabase | Database |
| DigitalOcean | Server hosting for our automation tooling (n8n) |
| Apify | Discovery of prospect business listings |
| Apollo | Enrichment of prospect business contact data |
| Instantly | Outbound email delivery |
| Google (Workspace / Gmail) | Business email |
| Notion | Internal notes and records |
Where a provider is outside the UK, the transfer is covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by the UK Extension to the EU-US Data Privacy Framework where the provider is certified.
We do not sell personal data. We may disclose data to our professional advisers, or where we are required to by law.
How long we keep it
- Enquiries that don't become clients - 24 months from our last contact with you, then deleted.
- Client records - for the length of the relationship and six years after the final invoice, to meet HMRC and limitation-period requirements.
- Prospect records - reviewed every 12 months and deleted where there has been no engagement.
- Suppression list - kept indefinitely. This is the minimum information needed to make sure we don't contact you again.
- Server logs - retained by our hosting provider, typically for no more than 30 days.
Your rights
Under UK GDPR you have the right to ask us to give you a copy of your personal data; correct it; delete it; restrict how we use it; object to our use of it; and provide it in a portable format. Where we rely on legitimate interests, you can object - and if that objection concerns direct marketing, we will stop, without exception.
Email jack@meesradar.co.uk and we will respond within one calendar month. There is no charge.
We do not make automated decisions about people that produce legal or similarly significant effects. Our MEES Score ranks buildings, not individuals.
If you are unhappy with how we have handled your data, we would like the chance to put it right - but you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
Data is held in access-controlled cloud services with encryption in transit and at rest. Access is limited to those who need it to run the service. We keep no payment card details.
Changes to this notice
We review this notice at least annually and whenever the service changes materially. The date at the top shows when it was last updated; material changes will be notified to current clients and enquirers by email.