Privacy Policy
Last updated: 17 October 2026
This policy explains how Cleeo — the trading name of CLEEO GROUP LTD, company number 17474213, registered in England & Wales ("we", "us") — collects and uses personal information through cleeo.uk. We're a UK lead-generation and marketing business providing search engine optimisation and Meta advertising services to solar, insulation and energy-efficiency installers. We are the controller of the personal data described here.
Who we are
Cleeo is a trading name of CLEEO GROUP LTD, a company registered in England and Wales (company number 17474213). Registered office: 32 Sherborne Road, Basingstoke, United Kingdom, RG21 5TQ. Email hello@cleeo.uk.
What we collect
When you apply through the form on this site we collect what you type in: your name, company name, email address and mobile number, the towns or postcodes you cover, what you install, how many installs you could take on, and which service you're interested in.
With the form we also receive how you found us: the page you sent it from, the page you first landed on, the referring site, any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), Google and Meta click IDs (gclid, fbclid), Meta's browser identifiers (_fbp, _fbc) if you have accepted marketing cookies, and a random reference number for the enquiry.
Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from abuse. To limit repeated form submissions we keep a one-way, salted hash of your IP address (not the address itself) for one hour.
How we use it
- To contact you about the leads and services you've asked about
- To set up and deliver leads, marketing campaigns or a website for you
- To respond to your questions and provide support
- To see which of our adverts and pages bring enquiries, so we can spend on what works
- To keep the site and the form secure and free of spam
We don't send newsletters and we don't pass your details on to anyone to market to you.
Our lawful basis
- Taking steps at your request before entering into a contract: dealing with your application and discussing your area, price and leads.
- Legitimate interests: responding to genuine business enquiries, measuring which of our adverts produce enquiries (using the attribution details above), and keeping the site secure.
- Consent: analytics and marketing cookies, and the Meta pixel (see our cookie policy). You can withdraw consent at any time with the "Cookie settings" link at the bottom of every page.
Who we share it with
We don't sell your data. We share it only with the providers that help us run the business, under contracts that require them to protect it:
- GoHighLevel (LeadConnector), United States: our CRM. Your application goes straight into it, and it sends our emails and texts to you.
- Cloudflare, worldwide: hosting, content delivery and security for this site. If our CRM can't be reached, a copy of your application is held in Cloudflare's storage for up to 90 days so it isn't lost.
- Google: the site's font (JetBrains Mono) is loaded from Google Fonts, which means Google receives your IP address and browser details when a page loads. Google Analytics is used only if you accept analytics cookies.
- Meta (Facebook and Instagram): the Meta pixel loads only if you accept marketing cookies. When you apply, our CRM may also send Meta your email address and phone number in hashed (scrambled) form, with the enquiry reference, through Meta's Conversions API, so Meta can tell us which advert led to the enquiry. Meta can only match that to an existing Meta account.
- Google Workspace: our business email, calendar, file storage and internal chat. Applications and our correspondence about them are held there.
- Anthropic (Claude), United States: an AI assistant our team uses under a business subscription. It is connected to our CRM, Google Workspace and website hosting, so it may process application details when we use it to help manage enquiries and our systems. Anthropic acts as our processor under its commercial terms, which do not allow it to use our data to train its models.
- Professional advisers where needed, and authorities where the law requires it.
Where we run advertising on your behalf, relevant details may be processed through platforms such as Meta, under their own terms.
International transfers
GoHighLevel, Google, Anthropic and Meta are based in the United States, and Cloudflare operates worldwide, so your data may be processed outside the UK. Where it is, we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Applications and enquiries: for as long as we need them to deal with your enquiry, and up to 2 years after our last contact with you, unless we go on to work together, in which case we keep business records for as long as the law requires (normally 6 years after the contract ends).
- Copies of applications held because our CRM couldn't be reached: deleted automatically after 90 days.
- The salted IP hash used to limit repeat submissions: 1 hour.
- Cookies and browser storage: see the cookie policy.
Your rights
Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it (including our legitimate interests), to data portability, and to withdraw consent at any time where we rely on it. To exercise any of these, email us at privacy@cleeo.uk and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we'd appreciate the chance to sort it out first.
Cookies
We use essential browser storage to remember your cookie choice and how you arrived, and analytics and marketing cookies only if you accept them. The details are in our cookie policy.
Contact
Questions about your privacy or this policy? Email privacy@cleeo.uk.