Privacy notice

The short version

Heatdesk stores nothing you type or upload. The free check and the charges working run entirely in your browser and send nothing. When you download a worksheet, a document or a letter, what you entered is used to draw that file in memory and is gone as soon as the response is sent. It's never written to a database, a file or a log. There are no accounts, no cookies, no analytics and no third-party trackers on this site.

While you're working, your browser keeps what you've typed in this tab, so that you can move between pages. It goes when you close the tab, and it isn't sent to us unless you press download.

Who is responsible

The data controller for this site is RDZZ LTD (company number 14352914), 483 Green Lanes, London, England, N13 4BS. For anything in this notice, email privacy@heatdesk.co.uk.

Worksheets, documents and heat charge letters

When you press download, your browser sends what you entered, and for letters your list of homes, to our server over an encrypted connection. The server draws the file and sends it back. If your list includes residents' names, you remain the controller of them; Heatdesk processes them only to draw the letters you asked for, and keeps none of it. The site is hosted by Vercel, which acts as our processor and carries the request. Requests are handled in London.

We never ask for your Priority Services Register, anyone's health details, or your list of senior people. Those stay with you. Don't type them into the free-text boxes.

To stop abuse, the server keeps a short-lived count of requests per IP address in memory for one minute. It isn't written anywhere, and it isn't linked to anything you enter.

If you order or email us

If you email us, for example to order a licence, we keep the email, your invoice and licence record to provide the licence and support, and for six years after it ends for tax and accounting. The lawful basis is the contract with your organisation, and our legal obligations.

If we contacted your organisation

If you work for an organisation with a heat network, or one that manages buildings, we may have emailed your organisation's published general address once about Heatdesk. We keep the organisation's name, the address we used, where we found it, when we wrote and any reply. The basis is legitimate interests (Article 6(1)(f) UK GDPR) in telling organisations about a service relevant to a registration date that applies to them. We send at most one follow-up, and delete these details 12 months after our last contact if nothing comes of it. Reply “no” or email privacy@heatdesk.co.uk and we'll stop, keeping only a minimal record so we don't contact you again.

Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, or object to its use. Email privacy@heatdesk.co.uk and you'll get a reply within one month. You can also complain to the Information Commissioner's Office.