Data Controller
This site (lookinto.co.uk) is owned and operated by WhitoMedia Ltd, registered in the United Kingdom with company registration number 10918465. For the purposes of UK GDPR and the Data Protection Act 2018, WhitoMedia Ltd is the data controller.
Contact: contact@whitomedia.com
What Data We Collect
We collect and process the following categories of personal data:
Data you provide directly: If you contact us via email or a contact form, we collect your name, email address, and any information you include in your message. If you subscribe to our newsletter, we collect your email address. If you submit a quote request form (for example, for solar panels, heat pumps, or boiler installations), we collect your name, email address, telephone number, postcode, and details about your property and requirements.
Data collected automatically: When you visit our site, we may collect your IP address (anonymised where possible), browser type and version, operating system, referring URL, pages visited on our site and time spent, and approximate geographic location derived from IP address.
Cookies and tracking: We use cookies for site functionality, analytics, and advertising. See our Cookie Policy for full details.
How We Use Your Data
We process personal data for the following purposes and on the following legal bases:
To respond to your enquiries (legal basis: legitimate interest) — when you contact us, we use your information to reply and resolve your query.
To send marketing communications (legal basis: consent) — if you opt in to our newsletter, we send periodic emails about new guides, deals, and product recommendations. You can unsubscribe at any time using the link in every email.
To connect you with service providers (legal basis: consent) — if you submit a quote request form, we share your details with vetted service providers (such as solar panel installers or heating engineers) who can provide the quotes you have requested. We only share your data with providers after you have given explicit consent via the form. We clearly identify which providers will receive your data before you submit.
To analyse site performance (legal basis: legitimate interest) — we use analytics tools to understand how visitors use our site so we can improve our content and user experience.
To display relevant advertising (legal basis: consent) — where we use advertising cookies, we obtain your consent before they are set.
Lead Generation and Data Sharing
When you request quotes through our site, your personal data may be shared with third-party service providers. Before any data is shared, you will be clearly informed which categories of providers will receive your data, you will be asked for explicit consent via a clear opt-in mechanism, and you will have the option to withdraw consent at any time.
We vet our service provider partners and require them to handle your data in accordance with UK GDPR. We maintain data processing agreements with all partners who receive personal data from our forms.
Data Retention
We retain personal data only for as long as necessary for the purpose it was collected. Contact form enquiries are retained for up to 12 months, then deleted. Newsletter subscriber data is retained until you unsubscribe. Quote request data is retained for up to 24 months for audit and complaint resolution purposes. Analytics data is retained in anonymised form for up to 26 months.
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of access: You can request a copy of all personal data we hold about you.
Right to rectification: You can request that we correct any inaccurate data.
Right to erasure: You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing: You can request that we limit how we use your data.
Right to data portability: You can request your data in a structured, machine-readable format.
Right to object: You can object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at contact@whitomedia.com. We will respond within 30 days.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our site uses SSL/TLS encryption for all data transmission.
Third-Party Services
Our site uses the following third-party services that may process personal data: Google Analytics (website analytics), Amazon Associates (affiliate tracking), and advertising networks (display advertising). Each of these services has its own privacy policy governing how it handles data.
International Transfers
Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
Children
Our site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Changes to This Policy
We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.
Last updated: 17 April 2026