Skip to content

Privacy policy

Last updated 16 October 2026.

This policy explains how LCT Fulfilment Services Limited ("we", "us", "our") collects, uses, shares and protects personal data when you contact us, when you enquire about becoming a partner, when you apply to join our installer network, or when you use our website. We are committed to handling your personal data lawfully, fairly and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

LCT Fulfilment Services Limited is the data controller responsible for the personal data described in this policy. We are a company registered in England & Wales, with our registered office at Floor 3, 207 Regent Street, London, W1B 3HH. Our company number is 17343135.

For any privacy matter, including to exercise your rights, you can contact us by email at privacy@lowcarbon.services, by telephone on 020 4538 9356, or by post at the registered office address above.

What personal data we collect

Most of the personal data we hold comes directly from you when you complete our Become a partner enquiry form or otherwise get in touch. This typically includes:

  • your name, work email address, telephone number and job role;
  • your company or organisation name and business segment;
  • information about your installation volumes, the low-carbon technologies you are interested in, and any message or details you choose to share with us.

When you visit our website, our hosting and security systems also process limited technical data, such as your IP address. This is used transiently to keep the site secure and to rate-limit form submissions, and is not used to build a profile of you.

Why we use your data and our lawful bases

We use your personal data to:

  • respond to your enquiry and discuss whether our service is a good fit;
  • set up, manage and deliver our managed-fulfilment service to business clients;
  • keep records of our communications and meet our legal and regulatory obligations;
  • protect our website and systems against misuse, fraud and security threats.

Our lawful basis for most of this processing is our legitimate interests in responding to business enquiries, running and improving our service, and keeping our systems secure, balanced against your rights and expectations. Where the law requires it, or where you have given it, we rely on your consent, for example for certain optional cookies or marketing. Where we have a contract or legal obligation, we rely on those bases instead.

Who we share it with

We do not sell your personal data. We share it only where necessary to run our service and our website. Most of the providers below process data only on our instructions, under contracts that require it. Two are different: Mapbox and Onroute Intelligence, named below and under "Installer applicants", decide for themselves how they handle the data they receive, under their own privacy policies. The providers we use are:

  • Website hosting and security (Vercel), which serves the site and applies rate limiting to protect it.
  • Email delivery (Resend), which sends your confirmation email and routes your enquiry to our team.
  • Calendar and scheduling (Google), used only if you choose to book an intro call, to create the meeting and send you the invitation.
  • AI-assisted drafting (Anthropic). When you ask us to draft an indicative scope, the business details you provide are sent to Anthropic's API to generate that draft. We do not send your name for this step, the output is advisory only, and a person here reviews every enquiry. Your input is not used to train AI models.
  • Maps (Mapbox, Inc.). The coverage map on our installer application form is drawn by Mapbox. When that step of the form is shown, your browser requests map tiles from Mapbox's servers, which receive your IP address, the page address and your browser details, and Mapbox records a randomly generated identifier for billing and usage statistics. Mapbox says it deletes IP addresses within 30 days and does not use this data for advertising or profiling. Mapbox acts as an independent controller of that data under its own privacy policy at https://www.mapbox.com/legal/privacy. Our cookie policy describes what Mapbox stores in your browser.

Some of these providers, including Mapbox, are based in the United States, as is Onroute Intelligence, named under "Installer applicants"; see "International transfers" below. We may also disclose data where we are required to do so by law, or to establish, exercise or defend legal claims.

International transfers

Some of our service providers process personal data outside the United Kingdom. Mapbox, Inc. and Onroute Intelligence Inc. are United States companies. Mapbox may process the technical data described above in the United States. Onroute Intelligence holds the guest accounts of installers who join our network, and its own privacy policy says that it is subject to UK GDPR and explains where it processes data and the safeguards it relies on. Where a provider acting on our instructions transfers data outside the UK, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement, so that your data continues to receive an essentially equivalent level of protection. Where a provider is an independent controller, such as Mapbox or Onroute Intelligence, its own privacy policy governs that processing.

How long we keep it

We keep the enquiry details you submit for up to 24 months from our last contact, unless a business relationship forms, in which case we keep them for the duration of that relationship and for as long afterwards as we need to meet our legal, accounting and regulatory obligations. When we no longer need your data, we securely delete or anonymise it.

Installer applicants

This section applies if you apply to join our installer network through the application form on our For installers page. It adds to, and should be read with, the rest of this policy.

What we collect. We collect the details you give us in the application:

  • the name, position, email address and mobile number of the person making the application;
  • your business details, including its name, trading name, type, address, website, whether it is VAT registered, its Construction Industry Scheme (CIS) status, and its Companies House number and VAT number where they apply;
  • the trades you work in, your scheme registrations and registration numbers, certifications, qualifications and manufacturer approvals, your test equipment and your track record;
  • your public liability and employers' liability insurance details, including the insurer, the level of cover and the renewal date;
  • your health and safety record, including any reportable incidents in the last three years, and the name and telephone number of your health and safety lead;
  • the postcode areas you cover, the number of qualified installers you have, your capacity and your lead times;
  • the job management or field service software you use to run jobs, or that you use none.

If your application progresses, we will ask you by email for supporting documents, such as insurance schedules, scheme certificates and qualification cards, and we may take up references. We hold those documents and any reference responses with your application.

Your health and safety lead's details. The name and telephone number of your health and safety lead are that person's personal data. We use them to contact that person about health and safety on work we assign to your business and, if you join the network, we pass them to Onroute Intelligence with the rest of your application, as described under Onroute Intelligence below. By providing them you confirm that you have told that person you are sharing their details with us, that we will pass them on in that case, and have pointed them to this policy.

Why we use it and our lawful bases. We use installer applicants' data to:

  • assess whether your business is suitable to join our installer network and to carry out work as our subcontractor;
  • carry out due diligence on your competence, qualifications, insurance and safety record, which the Construction (Design and Management) Regulations 2015 require of anyone who appoints a contractor;
  • contact you about your application, about documents and references, and about work that matches your trades, postcode areas and capacity;
  • understand how you run jobs, including the software you tell us you use, so that we can work alongside your systems, and compile aggregated, anonymised statistics about the software installers use;
  • keep a register of vetted installers, and a record of the checks we made, for as long as we may assign work to you;
  • if you join the network, set up your guest account on Onroute Intelligence, the software we use to share jobs with installers, by passing it your application, so that we can offer you jobs through it;
  • meet our legal, regulatory and insurance obligations.

Our lawful bases are: taking steps at your request before entering into a contract with you, and performing the subcontractor agreement once you have signed it, which includes setting up your Onroute Intelligence guest account and passing it your application; our legitimate interests in building and vetting a competent installer network, in understanding and working alongside the systems installers use, in giving the software we share jobs through the same health and safety contact we hold, and in evidencing the checks we have made; and compliance with our legal obligations, including those under the Construction (Design and Management) Regulations 2015. Where your business is a sole trader or a partnership, these bases apply to your business details as well as to your personal details.

Who receives it. In addition to the providers listed under "Who we share it with", installer applications are recorded in a spreadsheet held on our company account with Google Workspace, with access limited to the people who assess applications. Resend sends your confirmation email and notifies our team of your application, and Vercel hosts the form and applies rate limiting to protect it. The coverage map on the application form is provided by Mapbox; what Mapbox receives when the map is shown is described under "Who we share it with" and in our cookie policy. Where we assign you work for a client, we may share your business name, your qualifications and your insurance details with that client as part of evidencing the installer on their job. We never sell your application.

Onroute Intelligence. LCT uses Onroute Intelligence, job sharing software provided by Onroute Intelligence Inc. (onrouteintelligence.ai), to share jobs with installers. If you join the network, we create you a free guest account on Onroute Intelligence as part of onboarding. To set it up we pass Onroute Intelligence your application in full, when you join and not before: your business and contact details, the trades you work in, your scheme registrations and qualifications, your insurance and CIS details, your health and safety record, including the name and telephone number of your health and safety lead, the postcode areas you cover, your capacity and lead times, the software you use, and anything you added under Anything else. Our lawful basis is taking steps at your request before entering into the subcontractor agreement, and then performing it. For your health and safety lead's details, which are another person's personal data, our lawful basis is our legitimate interest in giving the software we share jobs through the same safety contact we hold, and we ask you to tell that person. Your Onroute Intelligence account is held under Onroute Intelligence's own terms of service and privacy policy, which Onroute Intelligence will ask you to accept, and Onroute Intelligence is responsible for the personal data it holds in that account. Jobs we share with you through Onroute Intelligence carry the job details our clients' customers have given us, which you may use only to carry out that job.

Companies we work with. Apart from Onroute Intelligence, which receives your application in full if you join the network, as described above, no company we work with receives personal data from installer applications. We do share with companies we work with, such as providers of job management software and other tools or services for installation businesses, aggregated, anonymised statistics about the software installers use, for example how many applicants use a given product. Those statistics contain no personal data and do not identify you or your business.

How long we keep it. If we do not take your application forward, or you withdraw it, we keep it for up to 24 months from our last contact with you, so that we can reconsider it as our network grows, and then delete it. If you join the network, we keep your application, your supporting documents and our vetting records for the duration of our relationship and for six years after the last job we assigned to you, so that we can evidence the checks we made and meet our legal, accounting and insurance obligations.

Your rights. The rights set out under "Your rights", and the way to exercise them, apply to installer applicants in the same way. If you would prefer that we did not keep your application on file, tell us and we will delete it, unless we need to keep it for a job you carried out.

How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include access controls, encryption in transit, and limiting access to those who need it to do their job.

Your rights

Under UK GDPR you have the right to:

  • request access to the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data (rectification);
  • ask us to erase your data in certain circumstances;
  • ask us to restrict how we use your data;
  • object to processing based on our legitimate interests;
  • request portability of data you have provided to us, where applicable.

To exercise any of these rights, please contact us at privacy@lowcarbon.services. We will respond within the statutory time limits and will not charge a fee in most cases.

Complaints

If you have a concern about how we handle your data, please tell us first so we can put it right. You also have the right to complain to the ICO, the UK supervisory authority, at ico.org.uk.

Cookies

Our website uses a limited number of cookies and similar technologies. For details of what we use and how to manage your preferences, please see our Cookie policy.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "last updated" date at the top of this page, and any significant changes will be made clear here.