Privacy notice
This site republishes Energy Performance Certificate records at address level, which under UK data protection law makes its operator a data controller. This notice sets out who that is, what is processed, why it is lawful, where it came from, and what you can ask for. It covers this website only.
Who controls this data
The controller is the operator of PerSquare. [Controller identity and postal address to be confirmed before launch] — the registered name and address will be published here, and this notice is not complete until they are.
Contact for anything in this notice: [Contact address to be confirmed before launch]
What personal data is processed
Two public registers, and nothing else. There are no accounts on this site, no sign-up, no newsletter and no login.
- Energy Performance Certificate records from the Energy Performance of Buildings Register, published by the Ministry of Housing, Communities and Local Government. What this site takes from them is the address, the postcode, the total floor area in square metres, the habitable-room count, the built form and the UPRN. Address-level EPC records are treated as personal data by the register's own publisher, which is why this notice exists.
- Price Paid Data from HM Land Registry — the price, date, address, property type, tenure and new-build flag of registered residential sales. HM Land Registry states that price paid information "is not personal, but property-related information"; it is described here because it is displayed alongside the EPC evidence and because it is what the EPC data is joined to.
Neither register records bedrooms, and this site publishes no bedroom counts, no valuations, no estimates and no photographs. It holds nothing about the people who lived at, bought or sold any property: no names, no contact details, no occupancy.
What is done with it
Each sale is matched to the Energy Performance Certificate for the same address and divided: price ÷ floor area. The result is published as a price per square metre on the area page for that town or postcode district, and on a page for that address. The join, its passes and its exclusions are described in full on the About the data page.
There is no profiling and no automated decision-making with legal or similarly significant effects. Nothing on this site is a valuation, a credit decision or advice.
Lawful basis
Legitimate interests (UK GDPR Article 6(1)(f)). The interest is publishing accurate, free, non-commercially-gated information about residential property prices and sizes, from data the state already publishes openly for that purpose. The processing uses only data that is already public, adds no new personal information, concerns property characteristics rather than individuals, and is limited to what a price-per-square-metre figure needs. The address-data terms attached to both registers were written for exactly this use: Royal Mail and Ordnance Survey permit display of Price Paid address data "for the purpose of providing residential property price information services", and the EPC address notice permits use for the "promotion and better understanding of the current energy efficiency of buildings and potential improvement in the building sale or rental markets".
Against that, the impact on any individual is low: the information is already published by government, is searchable at source, and describes a building rather than a person. No special category data (Article 9) is processed, and nothing here is used for marketing.
Where the data comes from
Both sources are public registers, not collected from you (UK GDPR Article 14):
- Energy Performance of Buildings Register — Ministry of Housing, Communities and Local Government, get-energy-performance-data.communities.gov.uk.
- Price Paid Data — HM Land Registry, gov.uk price paid data downloads.
The current build uses an extract running to 29 Jun 2026, holding 38,714 sales.
Who it is shared with
Nobody. There is no advertising network, no analytics account, no third-party embed and no data sale. The site is a set of static files; the pages you are reading fetch nothing from any third-party host except Google Fonts, which serves the typefaces and receives the request for them. There is no tracking cookie and no cookie banner because there is nothing to consent to.
There is no export, no bulk download and no API. Address data is displayed and never redistributed as data — that is a licence condition of both registers as well as a choice.
How long it is kept
The site is rebuilt from a fresh extract each month and holds only the current extract. It keeps no historical copies of removed records: once a record leaves the source register, the next rebuild drops it from this site permanently. No server-side logs of individual visitors are kept by this site.
Removals and opt-outs
The most effective route is the register itself. The Energy Performance of Buildings Register operates its own opt-out for address-level publication. A record removed there is absent from the next monthly extract this site takes, and therefore absent from this site from the following rebuild — permanently, and from anyone else republishing the register too. Every refresh honours removals in this way; nothing is retained after it leaves the source.
Requests can also be made directly to the contact address above and will be honoured on the same cadence.
Your rights
Under UK GDPR you can ask for access to the personal data held about you, its rectification or erasure, restriction of its processing, and — because the lawful basis is legitimate interests — you have the right to object under Article 21. There is no right to data portability here, as that applies only to consent and contract. Requests are free and answered within one month.
A correction to a sale record or a floor area has to happen at source to stick: HM Land Registry and the EPC register are what this site rebuilds from each month. If a figure here does not follow from those registers as described on the About the data page, that is a bug on this site, and it should be reported at the address above.
Complaints
If you are unhappy with how a request has been handled you can complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint, helpline 0303 123 1113. Raising it here first is welcome but not required.
Changes
This notice is versioned with the site build. Current build: June 2026 data, pages generated 27 Aug 2026.