Privacy and document access

What we collect

For customers, we collect sign-in identity, contact details, property and energy information, uploaded documents and photographs, and project messages. Installer applicants provide business identity and trading history, named representative and role, contact and complaints email, service area, selected work, certification numbers, insurance declarations and documents, and application messages.

Who can see it

You and authorised Freddie’s Future administrators can access your records. A currently eligible invited supplier can see the customer’s postcode, technical brief, reviewed assessment and supporting uploads chosen for sharing after the assessment is accepted. The supplier API omits saved direct contact fields and full address before a handoff. Check documents before uploading, because their contents may include personal details.

Postcode distance checks

To determine whether a job is within an installer’s stated travel radius, the site sends only the supplier and property postcodes to the Postcodes.io lookup service and stores their coordinates. Full addresses and contact details are not sent for this check.

Optional address finder

If enabled, the postcode entered on the customer or installer form is sent to Ideal Postcodes to return a list of premises. The API key stays on our server. Choosing an address fills the form, and you can edit it or enter an address manually instead. We do not store the full lookup list in the project database.

How it is stored

While you complete an enquiry or installer application, draft answers and selected files are saved on this device so you can return from the secure email link without starting again. These local drafts expire after 24 hours and are removed after submission. Submitted records are stored in this project’s separate database and files in its separate file storage. Loobookers’ customer and supplier records are not used. Operational decisions are logged. Required supplier evidence is checked again when new opportunities are released; missing or expired evidence can pause a supplier’s access.

Your choices

Only upload information relevant to your project. Your dashboard shows saved documents and updates. An Energy Performance Certificate is optional at enquiry stage; you can find one through the official register and choose whether to upload it. Use your dashboard message area to ask about correcting or removing information; self-service deletion is not currently available.

This page describes the project’s current product behaviour. A full legal privacy notice, operator identity and retention schedule must be approved before public launch.