Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Hestora Limited ("Hestora", "we", "us") collects, uses and protects your personal information when you use our website (hestora.net) and register your interest with us. We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Hestora Limited is a company registered in England & Wales (Company No. 16856062). We are the "data controller" responsible for your personal data.
- Registered office: Hestora Ltd, The Old Rectory, Bishampton Road, Flyford Flavell, Worcester, WR7 4BT, UK
- Contact: hello@hestora.net
What information we collect
We only collect information you choose to give us. When you complete our "Register your interest" form, ask us for one of our published documents, or contact us by email, we may collect:
- Your name and contact details (email address, phone number);
- Your home details (address / postcode and information about your property and heating system) that you provide so we can assess suitability and estimate savings;
- Which of our documents you have asked for — when you request a white paper or briefing from our Resources page we record which document it was, alongside your name and email;
- Any other information you include in messages to us.
We ask for a name and email address before sending a document so that we can send it to you, answer any questions it raises, and understand which topics our readers care about. Ticking the "keep me updated" box on that form is entirely optional and is never a condition of receiving the document — if you leave it unticked we will not add you to our updates.
You only need to give those details once. Your browser remembers them on your device so that later documents open straight away, and each one you open is added to your record so we can see which documents have been useful to you. We do not ask again unless you clear your browsing data or use the Sign out button on that page to sign in with different details. See our Cookie Policy for what is stored on your device.
We also collect limited technical information automatically through cookies — see our Cookie Policy.
How we use your information
We use your information to:
- Keep you updated about Hestora — product availability, grants and pricing;
- Respond to your enquiry and, where you've asked, offer you a place in our pilot or commercial rollout;
- Provide a tailored savings estimate based on the home details you give us;
- Send you the documents you request, and see which of our documents are most read so we can write more of what people find useful;
- Improve our website and services.
Our legal basis
We rely on your consent when you submit the register-interest form and ask us to keep you updated, and on our legitimate interests in responding to your enquiry and developing our products. You can withdraw consent at any time (see "Your rights" below).
Who we share it with
We do not sell your personal data. We share it only with trusted service providers who help us run the business, and only as needed:
- Our contact form provider (Chilli Pepper / chillipepper.online), which processes and stores form submissions on our behalf as a data processor;
- Our website host (Netlify), which serves this site and processes the technical request data needed to do so;
- Our analytics providers — Cloudflare (Web Analytics: aggregate page views and page-speed measurements, no cookies and no identification of individuals) and Microsoft (Clarity: how pages are used, only where you have accepted analytics on our cookie banner). See our Cookie Policy for exactly what each one does;
- Professional advisers and IT/hosting providers where necessary;
- Authorities or regulators where we are legally required to do so.
Where your data is held
Your form submissions are held within the UK/EEA. Some of our service providers — Netlify, Cloudflare and Microsoft — are US-based and operate global networks, so limited technical or analytics data may be processed outside the UK. Where that happens we rely on the UK's international data transfer safeguards (the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework) to keep your data protected to UK standards.
Embedded content
Our site includes an explainer video and an embedded contact form. These may load content from, or set cookies via, third parties. See our Cookie Policy for details.
How long we keep it
We keep your information only for as long as needed to keep you updated and to run our pilot and rollout, after which it is securely deleted or anonymised. You can ask us to delete your data sooner at any time.
Your rights
Under UK data-protection law you have the right to: access the personal data we hold about you; ask us to correct or delete it; object to or restrict how we use it; withdraw consent; and request a copy of your data in a portable format. To exercise any of these, email hello@hestora.net.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed.
Contact us
Questions about this policy or your data? Email us at hello@hestora.net.