Solar Market UK (solar-market.co.uk) and Boiler Market UK (boiler-market.co.uk)
Last updated: 20 Sep 2026 (version privacy-uk-2026-09-20)
Who we are
We are The Quote Company Pty Ltd, a company registered in Australia (ACN 154 910 004) whose principal place of business is Suite 6B, 103 Rokeby Road, Subiaco, Western Australia 6008. We trade in the United Kingdom as Solar Market UK and Boiler Market UK. In this notice, “we”, “us” and “our” mean The Quote Company Pty Ltd.
We are the controller of the personal data described in this notice. Because we offer our service to people in the UK, UK data protection law applies to us directly, even though we are based in Australia. You have the same rights against us as you would against a UK company.
Our UK representative We are not taking quote requests from people in the UK at the moment. Before we do, we will appoint a representative in the UK under Article 27 of the UK GDPR and name them here.
Our privacy contact Email privacy@solar-market.co.uk or privacy@boiler-market.co.uk (both reach the same team).
The short version
When you ask us for quotes:
- We collect your contact details and details about your property and what you need.
- We pass those details to up to three independent installers who cover your area. We choose them; you do not.
- Those installers contact you directly, by phone, email or text, to provide their quotes. We email and text you the names of the installers who have your details as soon as we have passed them on.
- The installers pay us for the introduction. You pay nothing for our service.
- We do not carry out any installation work. We are not the installer and we are not a party to anything you agree with one.
- We do not send you marketing. The only messages you get from us are about your own enquiry.
Passing your details to installers is not a side effect of our service. It is our service. If you do not want your details passed to installers, do not submit a quote request.
What personal data we collect
When you request quotes
Both quote forms collect your first name, last name, email address, mobile telephone number, and the address of the property, including postcode. We ask for a mobile number so installers can reach you and so we can text you a code to confirm the number is yours before we pass your enquiry on.
Solar Market UK also asks:
- the type of property (house, bungalow or flat) and whether you own it, rent it or are buying it
- whether the property already has solar panels
- what you want quotes for: solar panels, a battery, a heat pump, or a combination of them
- roughly what you spend on electricity each month, in bands
- when you are looking to install
- anything you choose to add in the notes box
Boiler Market UK also asks:
- the type of property (house, bungalow or flat) and whether you own it or rent it
- the fuel your heating uses: mains gas, LPG, oil or electric
- the type of boiler you have now (combi, system, regular or none)
- whether you want a replacement boiler or a new installation
- the number of bedrooms and bathrooms
- when you need the work done
- anything you choose to add in the notes box
You do not have to give us this information
No law and no contract requires you to give us any of it. But we cannot pass on a quote request without your name, contact details and the property address, and we cannot verify your mobile number without it. The property questions are what let us send your enquiry to installers who can actually help. If you leave them out, we may not be able to pass your enquiry on.
Other forms
If you use the contact form we collect your name, email address and your message. There are no other forms on these sites. If you contact us as an installer or heating engineer interested in working with us, we keep the details you give us about you and your business.
Automatically, when you use the sites
Necessary cookies make the sites and forms work and are set without asking.
When you submit a form we also record the date and time, your IP address and your browser type, together with the version of the wording you were shown and agreed to. This is our record of what you asked for and were told.
If the link you clicked to reach our site carried an advertising click identifier (for example from a Google or Microsoft advert), we store it with your enquiry so that we can tell which advertising brought the enquiry to us. This happens whether or not you accept advertising cookies. It does not involve setting or reading anything on your device.
With your consent (see “Cookies” below), we and our service providers also collect your IP address, device and browser information, the pages you view, how you arrived, and information stored in analytics and advertising cookies.
From installers
Whether the installer contacted you, whether they quoted, whether you went ahead, and any reason they gave for not being able to help. We use this to run the service and to judge installers’ performance.
What we do not collect
We do not ask for and do not want special category data, such as health information. Please do not put it in the notes box; if you do, we may delete it. We do not take payment from consumers. We do not record calls. Our service is for adults: we do not knowingly collect personal data from anyone under 18, and the form asks you to confirm you are over 18.
Why we use your personal data, and our lawful basis
UK law requires us to have a lawful basis for each use of your personal data. These are ours.
| What we do | Why | Lawful basis |
|---|---|---|
| Check your enquiry is genuine, complete and not a duplicate, and verify your mobile number | So installers receive real enquiries and you receive real quotes | Legitimate interests (Article 6(1)(f)): running a reliable referral service |
| Pass your enquiry to up to three installers who cover your area | This is the service you asked for | Legitimate interests: providing the introduction you requested, and installers’ interest in receiving it. Our written assessment of these interests is available on request |
| Email and text you the names of the installers who received your enquiry, and follow up to check they contacted you | So you know who will be in touch and can stop any of them | Legitimate interests: transparency and quality control |
| Ask for your feedback on the installers and on us | To decide which installers stay on our platform | Legitimate interests |
| Keep a record of what you were shown and agreed to when you submitted the form, and of any request to stop | To handle complaints, show what happened, and make sure we and the installers never contact you again once you have asked us not to | Legitimate interests, and legal obligation where a regulator asks |
| Record which advertising brought your enquiry to us | To know which advertising works and to run the business | Legitimate interests |
| Measure our advertising and show our advertising to people likely to be interested | To run the business | Consent for the cookies and similar technologies involved (see “Cookies”); legitimate interests for analysing the results |
| Reply to a message you send us through the contact form or by email, including a request about your rights or a complaint | To answer you and to meet our obligations to you | Legitimate interests; legal obligation for rights requests and complaints |
| Keep the details of installers and heating engineers who contact us about working with us | To assess and run our relationship with them | Legitimate interests |
| Bill installers, resolve disputes about enquiries, prevent fraud and misuse, keep required records | To run the business and comply with law | Legitimate interests; legal obligation |
We do not use your personal data to send you our own marketing. If we ever want to, we will ask for your consent first and you will be able to withdraw it at any time.
Where we rely on legitimate interests you have the right to object (see “Your rights”). Where we rely on consent you can withdraw it at any time; withdrawing consent does not affect what was done before you withdrew it.
Who we share your personal data with
Installers
This is the main disclosure and the reason our service exists.
When you submit a quote request, we pass your name, contact details, property address and your answers to up to three installers who cover your area. Usually it is three; sometimes fewer, if fewer installers cover your area or have capacity. If an installer tells us they cannot help, we may replace them with another, so more than three installers in total may receive your details for one request. If you ask us for more than three quotes, we pass your details to the additional installers you ask for.
We tell you who has your details As soon as your enquiry has been passed on, we email and text you the names of the installers who received it and how to stop any of them contacting you.
Installers are independent businesses and are separate controllers of the copy of your details they receive. They are responsible for their own compliance with UK data protection law from that point. Our written agreement with every installer requires them to use your details only to contact you about your quote request and to provide and carry out the work if you engage them; not to pass your details to anyone else; to say they are responding to your Solar Market UK or Boiler Market UK request when they contact you; to comply with the rules on marketing calls, texts and emails, including the Telephone Preference Service, for any contact beyond your quote; to act on any request you make through us within five working days; and to stop contacting you when you ask.
Before an installer receives your details they see only your postcode district, the type of property and the type of work, so they can decide whether to take the enquiry. They do not see your name or contact details until they have accepted it.
Before an installer joins our platform we check that they hold the registration their trade requires: Gas Safe registration for heating engineers on Boiler Market UK, and MCS certification for solar and heat pump installers on Solar Market UK. We also check that they are registered with the Information Commissioner’s Office. We do not guarantee their work and we are not a party to anything you agree with them.
Service providers
We use other companies to run our business. They act on our instructions under contract and may only use your data to provide their service to us. They are:
- Amazon Web Services (Sydney, Australia): hosting for our lead management system
- Supabase (Sydney, Australia): our lead database
- Cloudflare (global network): website hosting, security, and the Turnstile anti-spam check on the form
- HubSpot (Germany): our customer relationship and email platform, and the record of your consent and of any request to stop
- Sinch: text messages, including the verification code and the message naming your installers
- ZeroBounce (United States): checking that an email address is real before we send to it
- Google, Meta and Microsoft (United States): analytics and advertising, only with your consent
- Kennedy Digital (Australia): our digital marketing agency
- Shore360 (Philippines): software development and customer support
- our payment provider for installers (which never handles consumer data), and our accountants, lawyers and other professional advisers
If we add a provider that handles your data we update this notice first.
Others
We may also disclose your personal data to regulators, courts and law enforcement where the law requires or permits it; to a buyer or prospective buyer of our business, who must agree to protect it; and where necessary to protect someone’s life or safety or to investigate unlawful activity.
We do not sell your personal data to data brokers or list sellers, and we do not give it to credit reference agencies.
Where your personal data is held, and international transfers
We are based in Australia and our main systems are there: our lead management system is hosted by Amazon Web Services in Sydney and our lead database by Supabase in Sydney. HubSpot holds our account in Germany. Other providers process data in the United States and the Philippines, as listed above.
Because we collect your details directly from you, UK law treats that collection as processing by us under UK GDPR, not as a transfer. When we pass your data to a service provider outside the UK, that is an international transfer and we protect it with a mechanism UK law recognises:
- for providers in the European Economic Area, the UK’s adequacy regulations for the EEA
- for providers in the United States, the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise the International Data Transfer Addendum to the EU Standard Contractual Clauses
- for providers in Australia, the Philippines and elsewhere, the International Data Transfer Agreement or the Addendum, together with a transfer risk assessment
Australia does not have a UK adequacy decision, so these contractual safeguards are what protect your data when it is held by our Australian providers. We remain responsible for it throughout. You can ask us for a copy of the relevant safeguards using the contact details above.
Installers are UK businesses. We do not send your details to installers outside the UK.
The messages we send you, and installers contacting you
Messages from us
We do not send marketing to consumers in the UK. The messages you receive from us are about your own enquiry: the code to verify your mobile number, the email and text naming the installers who received your details, and a follow-up to check that they contacted you. If we ever want to send you marketing we will ask for your consent first, and you will be able to withdraw it at any time. We never sell or rent contact details.
Installers contacting you
By submitting a quote request you are asking up to three installers to contact you by phone, email and text about your quotes. Those contacts are ones you have asked for, which is why they may happen even if your number is registered with the Telephone Preference Service. If you change your mind, tell the installer, or tell us and we will pass it on. An installer may only contact you about anything beyond your quote request if they have their own permission from you to do so.
Asking us to stop
Reply STOP to any text from us, or email our privacy contact, and we will stop all contact from us, tell every installer who received your enquiry to stop within two working days, and keep a permanent record so that neither we nor they contact you about that enquiry again. If you later submit a new quote request, that is a new request and we will act on it.
Advertising
With your consent, we use advertising tools from Google, Meta and Microsoft to measure our advertising and to show our advertising to people who have visited our sites or who resemble our customers. We do not send those platforms your email address or phone number, hashed or otherwise. If that changes, we will update this notice and ask for your consent through the cookie banner first. You control advertising cookies through the banner and through each platform’s own settings.
Cookies and similar technologies
Our sites use cookies and similar technologies. Under UK law we need your consent before setting any that are not strictly necessary. When you first visit, a banner asks you to accept or reject cookies by category. Rejecting is as easy as accepting. Nothing outside the “necessary” category is set until you choose. You can change your choice at any time using the “Cookie settings” link in the footer.
| Category | Cookie | Set by | Purpose | Lifetime | Consent needed |
|---|---|---|---|---|---|
| Necessary | __cf_bm, cf_clearance | Cloudflare | Security and bot protection | Up to 1 year | No |
| Necessary | Turnstile challenge token | Cloudflare | Anti-spam check on the form | Session | No |
| Necessary | CookieConsent (or the equivalent set by our consent tool) | Us | Remembers your cookie choice | 6 months | No |
| Analytics | _ga, _ga_* | Google Analytics | How visitors use the site, in aggregate | Up to 2 years | Yes |
| Advertising | _gcl_au, _gcl_aw | Google Ads | Measures whether our adverts lead to enquiries | 90 days | Yes |
| Advertising | _fbp | Meta | Measures our Facebook and Instagram adverts | 90 days | Yes |
| Advertising | _uetsid, _uetvid, MUID | Microsoft Advertising | Measures our Microsoft adverts | Up to 13 months | Yes |
| Advertising | hubspotutk, __hstc, __hssc, __hssrc | HubSpot | Links your visit to your enquiry so we can see which page you came from | Up to 6 months | Yes |
We use Google Tag Manager to load these tools. It sets nothing itself and it respects your banner choice. Google’s advertising tags run in a consent-respecting mode that sets no cookies until you accept.
How long we keep your personal data
- Your enquiry, including the record of what you were shown and agreed to: 24 months after our last contact with you, then anonymised so it can no longer identify you
- Our records of what we charged installers: six years, with your identity removed and only a reference number, postcode district, product, price and dates kept
- Requests to stop: a permanent record of your email address and mobile number, and nothing else, so that we never contact you again and can tell installers not to
- Messages sent through the contact form or by email: 24 months after our last reply, then deleted, unless they relate to a quote request, in which case they are kept and anonymised with it
- Details of installers and heating engineers who contact us about working with us: for as long as we are in discussion or working with them, then six years for records of any agreement
- Website analytics: 14 months, aggregated after that
We deleted or anonymised the enquiries we held from our earlier UK operation (2015 to 2018) before relaunching these sites. We do not use that data. Where someone in that earlier data had asked not to be contacted, we kept only their email address or mobile number so that we honour that request.
How we keep your personal data secure
We keep your data in systems run by established providers with their own security certifications, protected by access controls so only people who need it for their role can see it, multi-factor authentication, encryption in transit, logging and monitoring, and a password manager for every company credential. Our staff and contractors are bound by confidentiality obligations. If a breach happens that is likely to put you at risk, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of it, and tell you without undue delay if the risk to you is high.
Automated processing
A member of our team decides which installers receive your enquiry, using your location, the work you want, installers’ service areas and availability, their performance with our customers, and the price they have agreed to pay us. Our system checks automatically whether an enquiry is genuine, complete and not a duplicate, and whether your mobile number has been verified. None of those automated checks is a decision with legal or similarly significant effects on you: an enquiry that fails a check is not passed on, and if you think yours was wrongly rejected, contact us and a member of our team will look at it. If we start using a system to decide which installers receive enquiries, we will update this notice first.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you and receive a copy
- have it corrected if it is inaccurate or incomplete
- have it erased in certain circumstances, for example where we no longer need it
- restrict how we use it while a question about it is resolved
- object to our use of it where we rely on legitimate interests; we will stop unless we can show compelling grounds that override your interests
- withdraw consent at any time where we rely on it, which on these sites means cookies
- receive the data you gave us in a portable format where we process it by automated means on the basis of consent
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you
To exercise any right, email our privacy contact. We will need to confirm your identity. We respond within one month, free of charge; if a request is complex we may take up to two further months and will tell you why.
Installers Once an installer has received your details, they are a separate controller and you can exercise your rights directly with them. We tell you who they are when we pass your enquiry on, and we will tell you again on request. If you prefer, tell us: under our agreement with every installer we pass your request to each installer who received your enquiry within two working days and they must act on it within five.
Complaints
If you are unhappy with how we have handled your personal data, please complain to us first. Email our privacy contact. We acknowledge every complaint within 30 days and tell you the outcome without undue delay. UK law asks you to give us that chance before going to the regulator.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. The ICO also handles complaints about marketing calls, texts and emails.
Changes to this notice
We review this notice at least once a year and whenever our forms, systems or the law change. The date at the top shows when it was last updated. If we make a change that materially affects how we handle your personal data, we will post a notice on our sites and, where we have your email address and are in contact with you, tell you by email.
Contact
The Quote Company Pty Ltd, trading as Solar Market UK and Boiler Market UK Australian company, ACN 154 910 004 Suite 6B, 103 Rokeby Road, Subiaco, Western Australia 6008, Australia
Privacy contact: privacy@solar-market.co.uk or privacy@boiler-market.co.uk