Who we are
Net Zero Pipeline is a trading name of SAI Reserves Ltd, a private limited company registered in England and Wales (company number 17534122), registered office Ground Floor Kings House, 202 Lower High Street, Watford, WD17 2EH. We are the controller of the personal data described in this notice, except where we say otherwise.
Contact for anything about your data: hello@netzeropipeline.com. We deal with everything in writing, so please email us; we don't take phone calls.
We are not required to appoint a Data Protection Officer and have not done so.
Summary
- We help UK installers of commercial solar, heat pumps and EV chargers find business customers. We work business-to-business only.
- We collect business contact details from companies' own websites and from Companies House, and email those companies about our service.
- We only send unsolicited emails to corporate subscribers (such as limited companies and LLPs), never to sole traders, ordinary partnerships or consumers.
- Every email names us and lets you opt out by replying “remove”. We stop straight away and keep only what we need to make sure we don't contact you again.
- We pass a business's details to one installer only after that person has agreed, by email, to be introduced.
- Our website sets no cookies and uses no analytics.
Installers we contact about our service
Whose data: people working at UK limited-company installers that we think may want our service.
What we collect: company name; the business email address published on your website (which may include a person's name, such as jane@company.co.uk); a contact's name and job title if your website publishes them; your website address, town or region and the services you advertise; company status and registered details from Companies House; brief notes about publicly visible features of your website, which we use to personalise our first email; and a record of the emails we send you and any replies, including opt-outs.
Sources: your company's own website and the Companies House register. We may also use publicly available installer directories to identify businesses, but we only email addresses that businesses publish for business contact.
Why and lawful basis: to tell businesses about a service relevant to them. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): we have a legitimate interest in promoting our service to businesses likely to benefit, the data is limited to business contact details that companies publish themselves, and you can opt out at any time. We have carried out a legitimate interests assessment, which we can share on request.
Electronic marketing rules (PECR): we send unsolicited marketing emails only to corporate subscribers. Every email identifies us, gives our contact address and includes a simple way to opt out. Our emails are plain text, with no tracking pixels or tracked links.
People who enquire through our website or by email
What we collect: your company name, work email address, the services you offer, the regions you cover and anything you write in your message or email.
Why and lawful basis: to reply to you and, if you want to go ahead, to set up a pilot. Our lawful basis is legitimate interests in responding to business enquiries. If you are a sole trader and become a client, our basis is that processing is necessary to take steps towards, or perform, a contract with you (Article 6(1)(b)).
How the form works: our website is hosted on Netlify, so form submissions are received and stored by Netlify on our behalf and forwarded to our mailbox (see who we share data with).
Our clients
What we collect: names, job titles and business contact details of the people we deal with at client companies; your campaign brief (service area, ideal job size, the email address leads should go to); correspondence; invoices and payment records. Card payments are handled by Stripe, so we never see or store full card numbers.
Why and lawful basis: to provide and manage our service and get paid (legitimate interests in running our business, or contract where the client is an individual), and to keep accounting and tax records (legal obligation, Article 6(1)(c)).
Businesses we contact for our clients, and leads
Whose data: people at UK limited companies that may want commercial solar, heat pumps or EV charging (for example facilities, finance or operations managers and directors).
What we collect: business contact details published on the company's website or available from Companies House, and records of our emails. If someone is interested, we also collect their answers to our short qualification form: company name and (optionally) company number, their name, role and work email, the site postcode, site or roof ownership (or landlord consent), approximate annual energy spend, site details (such as roof type, heating system or number of parking spaces), whether they are the decision-maker (or who is), and their timescale. We also keep a record that they agreed, on the form and by email, to be introduced to an installer.
How the form works: the qualification form is on our website, so submissions are received and stored by Netlify on our behalf, like our enquiry form. It sets no cookies; a small script on that page only copies our reference from the link into the form.
Why and lawful basis: to find businesses that may benefit from an installer's services, and to introduce interested businesses to that installer. Our lawful basis is legitimate interests. As with our own outreach, we only send unsolicited emails to corporate subscribers, every email identifies the sender and offers an opt-out, and campaigns are sent from sending domains registered in the installer's business name.
Passing details on: we send a lead's details to one installer only, and only after the person has agreed by email to be introduced. From then on the installer uses those details as an independent controller under its own privacy notice.
Website visitors
Our website sets no cookies, uses no analytics or advertising tools and loads no third-party content: fonts and images are served from our own site. See our cookie policy.
Like any website host, our hosting provider automatically processes technical data, such as your IP address, browser type and the pages requested, to deliver the site and protect it from abuse. Our lawful basis is legitimate interests in running a secure website. We don't use this data to identify or profile visitors.
Opt-outs and our suppression list
If you ask us not to contact you, we stop immediately. We keep a minimal record (the email address or company domain, the date and the fact that you opted out) on a suppression list, so that we never contact you again, including on behalf of clients. Our lawful basis is legitimate interests in respecting your objection, and this record is kept for as long as we carry out email outreach.
Software, AI and automated decisions
We use software, including AI-assisted tools, to research public company information, draft and send emails, and organise replies. These tools work for us under contract, and we remain responsible for how your data is used.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Deciding whether a business might be interested in an installer's service is not that kind of decision, and a person can review any outreach on request.
Who we share data with
We don't sell or rent contact lists. We share personal data only with:
| Recipient | Role and purpose | Location |
|---|---|---|
| IONOS | Processor: email mailbox and domain services | UK / EEA |
| Netlify, Inc. | Processor: website hosting and website form handling | USA |
| Stripe | Payment processing. Stripe acts as a controller for some processing, such as fraud prevention and regulatory checks. | UK / EEA / USA |
| AI and automation service providers | Processor: research, drafting, sending and organising email | UK / EEA / USA |
| The installer a lead agreed to be introduced to | Independent controller: to contact the lead about their project | UK |
| Professional advisers, such as accountants and lawyers | Under a duty of confidentiality | UK |
| Regulators, law enforcement and courts | Where the law requires it | UK |
If our business is ever sold or restructured, data may pass to the new owner under the same protections.
International transfers
Some of our providers may process data outside the UK. Transfers to the EEA are covered by UK adequacy regulations. Where data goes to the USA or another country without UK adequacy, we rely on the safeguards in the provider's data processing terms: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the ICO's International Data Transfer Agreement or Addendum.
How long we keep data
| Data | How long |
|---|---|
| Prospect contact details where there's no reply or no interest | Deleted within 12 months of our last contact |
| Suppression list (opt-outs) | As long as we carry out email outreach, so we can keep honouring it |
| Website and email enquiries that don't lead to a contract | 12 months from the last message |
| Client contracts, invoices and payment records | 6 years after the end of the financial year they relate to (tax and company law) |
| Lead qualification answers and introduction records | 12 months after the introduction, or longer if needed to resolve a dispute |
| Website hosting logs | As set by our hosting provider, Netlify |
Your rights
Under UK data protection law you have the right to:
- object to our use of your data based on legitimate interests and, at any time and without giving a reason, to object to direct marketing; we will then stop;
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- data portability, where processing is based on contract and carried out by automated means;
- not be subject to decisions based solely on automated processing with legal or similarly significant effects.
To use any of these rights, email hello@netzeropipeline.com. The quickest way to stop our emails is to reply “remove” to any of them. We'll respond within one month (extendable in limited cases) and won't usually charge a fee. We may ask for information to confirm your identity.
Complaints
If you're unhappy with how we've handled your data, please email hello@netzeropipeline.com first. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint.
Security
We use reputable providers, encrypted connections (HTTPS/TLS), strong unique passwords with access limited to what each tool needs, and we keep the data we hold to a minimum.
Changes to this notice
We'll update this notice when our processing changes, and change the date at the top. This version was published on 2 November 2026.