Privacy Policy

Who we are (controller)

The data controller for this website and the Home Resilience Passport beta is Eran Hertz, trading as Evolving Home (evolvinghome.ai), currently operating as an unincorporated sole trader. A limited company has not yet been incorporated at Companies House; when formation is completed we will publish the company name, number, and registered office here. For privacy and service correspondence, email hello@evolvinghome.ai. A postal service address is available on request via that email (we do not publish a home address on this site).

Our approach

Evolving Home is building a privacy-first Home Resilience Passport. Your home record is meant to be user-owned and consent-based — we do not sell home data to advertisers or hidden data brokers.

What we collect in beta

• Free Health Score: quiz answers or address lookups use public records where available. Addresses are not stored without your consent.
• Accounts: if you sign in, we store account details needed to save your estimate and Passport progress.
• Beta waitlist: email address if you join the beta list.
• Feature wishlist votes:if you vote on “what should we build next,” we store the feature you chose, an optional short note, and a page source tag (e.g. beta page). This is functional product feedback submitted by you — not optional browsing analytics. We do not attach user agent, country, or referrer to these votes. Votes do not create an account.
• Portfolio Readiness Pilot applications: if you apply on /portfolio-pilot(or a related partner form), we collect name, organisation, email, optional phone/region, organisation type, approximate property count, stock location (e.g. England & Wales / Scotland / NI), portfolio-management method, EPC mix notes, and the operational problem you describe. Tenant names are not required and should not be submitted. Purpose: respond to your commercial enquiry, qualify a five-property feedback diagnostic or full pilot, and (if you later accept a quote) coordinate manual delivery. Legal basis: steps prior to a contract / legitimate interests in responding to B2B enquiries. Internal access: founder and operators responding to the enquiry only (manual process). Processors may include our database host (e.g. Supabase) and email delivery (e.g. Resend or SMTP). Application data is stored for enquiry handling and is separate from product account Passport records unless you later create an account and claim homes. Payment, if any, is via Lemon Squeezy only after a qualification quote — Lemon Squeezy processes payment details under their terms. We do not sell pilot lead data and do not use portfolio application data to train public foundation models. We do not share portfolio addresses with assessors or third parties unless you instruct us for a facilitated review and we confirm that step with you. A formal DPA is available on request for organisational applicants where appropriate; process is manual. Retention: applications and order ledger rows are kept for operational follow-up and accounting for a limited period (typically up to 24 months unless a longer legal obligation applies); you may request erasure where applicable by emailing hello@evolvinghome.ai.
• Partner applications: similar contact and service-interest fields submitted via /partners for partnership discovery, with the same controller and request rights.
• ROI paid-report interest: on /roi, clicking the interest control alone does not store your postcode or create a lead. Only if you complete the explicit request form and submit do we collect your email address, record durable product interest under key roi-premium-report (separate from a general beta waitlist join), and may tag acquisition source roi-premium on a first waitlist row so we can follow up about a paid detailed report. We do not store the full postcode from that form for lead capture; the calculator may still use a postcode in-session for live tariff lookups. Optional analytics (if you accepted cookies) may record coarse events such as outward postcode area only — never a full postcode. Legal basis: steps prior to a contract / legitimate interests in responding to your request. Processors may include our database host (e.g. Supabase) and email delivery. Retention: interest emails are kept for operational follow-up for a limited period (typically up to 24 months unless a longer legal obligation applies); request erasure via hello@evolvinghome.ai. Historic rows that may have been written under an older click-to-store behaviour are not automatically deleted by this notice — contact us if you want those reviewed.
• Usage analytics (optional): product events and performance metrics (PostHog, Vercel Analytics, and Google Analytics 4 when configured) only after you click Accept on the cookie banner. You may Reject with equal ease; we do not load those tools until you accept. Wishlist vote totals are not written through this optional analytics path.

Legal bases (UK GDPR summary)

• Contract / steps prior to contract: providing the score, account, and Passport features you request.
• Legitimate interests: securing the service, preventing abuse, and prioritising the product roadmap from explicitly submitted wishlist votes (balanced against your rights; data is minimised to the vote fields).
• Consent: optional analytics cookies and similar technologies (you can refuse without losing core score access or the ability to cast a wishlist vote).

Processors and recipients

Depending on features you use, we may share data with infrastructure providers such as hosting (e.g. Vercel), authentication/database (e.g. Supabase), optional analytics (PostHog, Vercel Analytics, and Google Analytics 4 — consent-gated), maps (Google Places when you enter an address), and payments (Lemon Squeezy when you start checkout). We do not sell home data to advertisers.

International transfers

Some providers may process data outside the UK. Where required, we rely on appropriate safeguards (such as standard contractual clauses) offered by those providers. Ask us for current details at hello@evolvinghome.ai.

Sharing and control

Passport sharing, export, and professional collaboration are rolling out with explicit homeowner consent. Nothing in the sample Passport preview sends data or creates public links.

Retention

We keep account and Passport data while your account is active or as needed to provide the service. Feature wishlist votes are kept while useful for roadmap prioritisation (typically through the active beta / soft-launch period) and then deleted or aggregated so individual votes are no longer identifiable. You can request deletion by emailing hello@evolvinghome.ai.

Your rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. To exercise rights or withdraw analytics consent, email hello@evolvinghome.ai. You can also clear site data / change cookie choice in your browser.

Complaints

If you are unhappy with how we handle personal data, you may contact the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint. We hope you will contact us first so we can help.

Not legal advice

This page is a plain-language beta notice and will keep expanding as features ship. It is not a substitute for formal legal counsel. Questions: hello@evolvinghome.ai.