Notice

Green Heat Network Fund: privacy notice

Updated 9 September 2025

© Crown copyright 2025

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/green-heat-network-fund-privacy-notice/green-heat-network-fund-privacy-notice

This privacy notice was updated on 9 September 2025.

This privacy notice sets out how the Green Heat Network Fund (GHNF) collects, uses and protects any information that you submit to us as part of applying for GHNF funding using the GHNF application process. It is made under Articles 13 and 14 of the UK General Data Protection Regulation (‘UK GDPR’). 

It is important that you read this notice, together with any other privacy notice that is provided to you on specific occasions when we are collecting or processing your personal data, so that you are aware of how and why we are using it. 

This notice does not form part of any contract. This notice can be updated at any time; we will inform you if the way we handle your personal data changes.

Personal data: Personal data is any information that can be used to identify a living individual, either on its own, or in combination with other pieces of data. Examples of personal data include your name and address.

Processing: The term ‘processing’ in relation to personal data, means any operation or set of operations which is performed on personal data or on sets of personal data (whether or not by automated means, such as collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure, dissemination, restriction, erasure or destruction).

Purpose 

This Privacy Notice relates to personal data processed as part of the delivery of the Green Heat Network Fund (‘GHNF’), a capital grant fund managed by a consortium of entities for the provision of funding for the commercialisation and construction of new low and zero carbon (LZC) heat networks. 

For the avoidance of doubt, the Department for Energy Security and Net Zero (DESNZ) and Triple Point Investment Management LLP are the joint data controller and will have full access to all data that you submit when enquiring about the GHNF, within your  GHNF application form, supplementary information, the GHNF application process, monitoring and reporting data, GHNF communication activities and data collected through cookies on our website for the purposes set out in this privacy policy.

Roles of parties under the UK GDPR 

In addition to the Department for Energy Security and Net Zero (DESNZ) and Triple Point Investment Management LLP accessing your data as a joint data controllers, we are working with a number of processors.

The following organisations are sub-contractors to Triple Point Investment Management LLP;

  • Gemserv (a Talan company)
  • AECOM
  • Amberside Advisors
  • Asteros Advisers
  • Lux Nova Partners

They will be able to access all information you submit when enquiring about the GHNF, within your GHNF application form, supplementary information, the GHNF application process and monitoring and reporting.

DESNZ, Triple Point Investment Management LLP, and Gemserv (a Talan Company) will be able to access the personal data for GHNF communication activities and data collected through cookies on our website for the purposes set out in this privacy policy.

National Wealth Fund (NWF) 

As instructed by DESNZ, we offer applicants the opportunity as part of the application process to opt-in to be contacted by NWF or consent for GHNF Relationship Managers to facilitate an introduction. Applicants will opt-in by email to apply@tp-heatnetworks.org or via their relationship manager. Contact information will be passed to NWF which works with both private sector and public sector applicants that may be suitable for debt or equity support at Final Investment Decision (FID) from NWF. By applying to the GHNF, applicants who opt-in agree to their data being processed by NWF. This includes our instruction to NWF to process your data, including;  

  • personal data, for the purpose of considering the suitability of your project for a NWF loan
  • offering you a loan
  • the monitoring of compliance with the terms of the loan if it is agreed 

We are committed to ensuring that your personal data is protected and will make sure to use it only in accordance with this privacy policy. 

This website is not intended for children, and we do not knowingly collect data relating to children. This website is also not intended to cover personal data processed for recruitment or employment purposes. 

Who we are

There are 2 joint data controllers:

  • Department for Energy Security and Net Zero (DESNZ)
  • Triple Point Heat Networks Investment Management

How to contact us.

DESNZ

Full company details of DESNZ are as follows:

Department for Energy Security and Net Zero (DESNZ), previously the Department for Business, Energy and Industrial Strategy (BEIS).

Triple Point

Full company details of Triple Point Heat Networks Investment Management are as follows:

Triple Point Heat Networks Investment Management is a trading name of Triple Point Investment Management LLP registered in England & Wales no. OC321250, authorised and regulated by the Financial Conduct Authority no. 456597, of 1 King William Street, London EC4N 7AF, UK.

Responsibilities

As part of these joint data controller arrangements, the parties process personal data in relation to the delivery and management of the GHNF. The arrangements cover the following processing activities:

  • the processing of names and business contact details of staff of Applicants and prospective Applicants to GHNF to deliver GHNF funding and to undertake contract and performance management
  • the processing of names and business contact details of interested individuals to provide send news, updates, invites to events or other communications
  • the processing of names and business contact details of individuals responding to surveys for evaluation and research purposes

With these arrangements, the following responsibilities will apply:

  • delivery and maintenance of privacy notice referenced in the GHNF Application Form and provided on the GHNF website (DESNZ and Triple Point)
  • due diligence of software providers which Parties use to process the GHNF Personal Data locally and appropriate contractual data processing arrangements in place (DESNZ and Triple Point)
  • maintaining a single point of contact for data subject requests (Triple Point)
  • notification of a personal data breach originating from or affecting the usage of GHNF databases to the Information Commissioner’s Office and, in appropriate, Data Subjects (DESNZ and Triple Point)
  • establishing retention periods for personal data processed for GHNF purposes (DESNZ and Triple Point)
  • conducting Data Protection Impact Assessments on relevant GHNF databases (DESNZ and Triple Point)

The data we collect

The data to be collected will include different types of personal information that is defined as personal data under the UK GDPR and Data Protection Act (DPA) 2018 and any other relevant legislation (together ‘Data Protection Legislation’). It does not include aggregated data where your identity details have been removed and the data cannot be attributed to you any longer.

We may collect the following personal information from you, either via your application for GHNF funding for your project, through information gathering channels deployed at events and online, as collected through the GHNF website, as provided through enquiries, or as otherwise voluntarily provided:

Purpose of processing Data types Retention period Lawful basis
To process your GHNF application (including storing and scoring applications) Name
Salutation
Role and organisation
Email address
Physical address
Phone number		 7 years since the feedback in relation to the application was communicated + 1 year for back up systems Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy)
To respond to enquiries in relation to the GHNF Name
Salutation
Email address
Company name
Phone number
Details of your query		 1 year since the last engagement Performance of a task in the public interest (responding to enquiries and claims in relation to GHNF funding within the UK’s decarbonisation policy)
To provide information to subscribers to GHNF press releases, newsletters and invites to attend events Name
Salutation
Email address
Company name
Phone number
Details of your preferences		 Duration of the GHNF project (unless you opt-out);
Ongoing until unsubscribing;
1 month following unsubscribing;
1 year for the list of unsubscribed Data Subjects		 Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy)

Consent (separate subscribers)
To conduct surveys and for evaluation and research purposes Name
Salutation
Company name
Email address
Physical address
Phone number		 7 years since the publication of the last evaluation report + 1 year for back up systems Consent (as received from each party)
Fulfilling reporting obligations on the GHNF project Name
Salutation
Company name
Email address
Physical address
Phone number		 Duration of the GHNF project Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy)
To ensure the security and operation of the GHNF website IP Address
Device ID
Browsing time		 Up to 2 years (see GOV.UK Cookies) Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy)
To analyse and present project data via Power BI dashboards Business contact details:
Names
Email addresses
Phone numbers
Job tiles/ roles		 Duration of the GHNF project Performance of a task in the public interest (supporting applications for GHNF funding within the UK’s decarbonisation policy)
To assess projects that may be suitable for debt support from the NWF Name
Salutation Role and organisation
Email Address
Physical address
Phone Number		 Duration of the GHNF project Consent (received from applicants in writing)

We may also conduct data processing to comply with a legal obligation, when for example, we need to retain your data for a certain time for financial obligations, or where requested by law enforcement or other public authorities. 

We will neither collect, nor process any special categories of personal data in the GHNF application form. 

Should you provide any special category data to us through any additional information supplied either to support your application, or for the purpose of accessing our events and resources it will only be processed for the specific purpose that it was supplied. 

We may also collect personal data through Cookies. Please see the Cookies section below for more information.

Cookies and technologies

Gemserv (A Talan Company), as instructed by Triple Point, use cookies and similar technologies on our website (www.tp-heatnetworks.org) to provide essential functionality, improve your browsing experience, and to help us understand how our website is used. Some cookies are strictly necessary for the operation of the site, while others require your consent.

We typically use the following cookies:

  • Functional Cookies: Cookies that are strictly necessary to enable you to move around our websites or to provide certain basic features. This includes basic features such as playing videos, and storing information already entered (such as, username, language, location and consent preferences). These include:
    • Complianz cookies (cmplz_stats, cmplz_choice, cmplz_id, cmplz_marketing, cmplz_policy_id): These record which cookies you consent to. Max duration: 365 days
  • Statistics: These are cookies that monitor the popularity of sections of our website. We do not deploy Statistics cookies on the GHNF website
  • Marketing: These cookies may track users and display advertisements relevant to them but can also include some otherwise functional cookies. We do not deploy Marketing cookies on the GHNF website

For detailed information about the cookies, we use, their purposes, duration and how you can manage your preferences, see our Cookie Notice.

How we use your data

We require the information covered in the ‘The data we collect’ section above for the following purposes:

  • evaluating projects for GHNF funding
  • processing GHNF applications
  • evaluation, development and continuous improvement of GHNF and heat network policies e.g., the application process, assessment process, engaging with third party investors etc
  • sending press releases, news and invites to events in relation to GHNF and DESNZ heat decarbonisation policy
  • providing reporting to DESNZ
  • fulfilling statutory and regulatory reporting obligations
  • responding to your enquiries and assisting with handling them
  • creating sampling frameworks and contacting for further evaluation and research purposes
  • evaluating or researching the effectiveness of the GHNF as a whole
  • carrying out surveys in relation to GHNF funding and application process
  • analysing and presenting project data via power tools

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use it for a new purpose, we will notify you and we will explain the legal grounds which allows us to do so.

We will only use your personal data when the law allows us to. We process the data covered in ‘The data we collect’ section above primarily to allow us:

  • Article 6 (1) (e ) to perform a task carried out in the public interest or in the exercise of the official authority given to us, or;
  • Article 6 (1) (a) with your consent

Automated decision making

We do not make any automated decision making (making a decision solely by automated means without any human involvement) or profiling (automated processing of personal data to evaluate certain conditions about an individual) that would have a ‘legal or similarly significant effect’ for individuals.

When we will share your personal data

We will share your personal data information with third-party service providers, where they are contracted by Triple Point to provide specific services in order to facilitate delivery of our services for the purposes set out in the “How we use your data” section.

We will allow the following third parties to process your personal data:

  • back-office service providers for data storage services, including Microsoft SharePoint (for collaboration and storage), Microsoft Power BI (for dashboards and reporting) Power Query (data preparation) and Email Octopus (email marketing platform)
  • the web hosting provider for the GHNF website
  • email management providers for assisting with email queries, including Microsoft
  • research organisations for research, evaluation and statistical archiving purposes – including for the construction of sample frames
  • our data sub-processors which include Gemserv Limited (a Talan company), AECOM, Amberside Advisors, Asteros Advisers, Lux Nova Partners
  • applicants will be able to opt-in to be contacted by NWF as part of the application process. Applicants are required to confirm in writing (by emailing apply@tp-heatnetworks.org) that they are interested in being contacted by NWF and to discuss its financing offer and that their application data and any supplemental information provided to DESNZ thereafter can be shared to facilitate this. This information will be used by NWF to understand projects and consider financing needs ahead of any engagement to assess whether the project could benefit from NWF’s financing offer.

We take steps to ensure our partners protect your personal data in keeping with the UK GDPR, including:

  • we do not allow our service providers to use your personal data for anything else besides delivering the service they provide to us
  • other partners, including the other GHNF organisations and entities and the NWF, are responsible for the use of your personal data for their own purposes. You will need to review their privacy notices separately

We may also need to share your personal data with Public Authorities (such as the police) or to otherwise comply with the law, which are separately responsible for how they use your personal data.

We will only store your personal data within the UK. We will take steps to ensure your privacy rights are protected and your personal information is treated in a way that is consistent with and which respects Data Protection Legislation, by putting in place appropriate measures, including requiring appropriate security measures.

How long we keep your data

We will only retain your personal information as for as long as necessary to fulfil the purposes we collected it for, including for the purpose of satisfying any legal or reporting requirements.

These retention periods are provided in accordance with the “The data we collect” section above.

In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you.

International data transfers

Some of the digital tool we use are provided by Microsoft and the other service providers who may transfer data outside the UK and European Economic Area (EEA). For example, limited support and back up services may involve transfers to the United States.

When this happens, we make sure that appropriate safeguards are in place to protect your information, such as UK addendum to the EU Standards Contractual Clauses and encryption.

Your rights over your personal information

It is important that the personal information we hold about you is accurate and current. If you believe that any information, we are holding about you is incorrect or incomplete, please contact us.

In accordance with the Data Protection Legislation, under certain circumstances, you have the right to:

  • request access to your personal data: this enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it
  • request correction of your personal data: this enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us
  • request erasure of your personal data: this enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it
  • object to processing of your personal data: this enables you to object to the processing of your personal data in certain circumstances, including where data is processed under public task or legitimate interests
  • request restriction of processing your personal data: this enables you to ask us to suspend the processing of your personal data in specific circumstances
  • request transfer of your personal data to you or to a third party: we will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format
  • withdraw your consent, where consent has been given to processing

You may also set your browser settings to attempt to reject all cookies or manually delete the Cookies and may still use this website.

NWF

You have the right to withdraw your consent to being contacted by the NWF or to withdraw your consent to data sharing with the NWF. To do so, please email enquiries@tp-heatnetworks.org.

You can also request to limit the information in your application submission that should be shared with NWF (for example, commercially sensitive information relating to third parties). To do so, please contact apply@tp-heatnetworks.org.

Marketing

You can opt out of receiving marketing from Triple Point Heat Networks Investment Management such as sending press releases, news and invites to events by:

How to contact us

DESNZ

The first data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).

If you have any questions about this privacy notice or our privacy practices, email us at dataprotection@energysecurity.gov.uk.

You can also contact us at:

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place
London
SW1A 2EG

You will not have to pay a fee to exercise any of your rights. However, we may charge a ’reasonable fee’ for the administrative costs of complying with a request if it is manifestly unfounded or excessive, or if an individual requests further copies of their data. If we refuse your access to personal data, we will explain the reasons in our response to you.

Triple Point

The second data controller for your personal data Triple Point Investment Management LLP.

If you have any questions about this privacy policy or our privacy practices, email us at contact@triplepoint.co.uk.

You can also contact us at:

Triple Point Investment Management LLP
Company number OC321250
1 King William St
London
EC4N 7AF

How to complain

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.

Contact the Information Commissioner's Office (ICO):

Email icocasework@ico.org.uk

Contact form https://ico.org.uk/mak...

Telephone 0303 123 1113

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.

Changes to this privacy notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial changes. We will also notify you in other ways from time to time about the processing of your personal data.

We keep this privacy notice under regular review to make sure it is up to date and accurate. We may change it at any time and will inform you if any substantial changes take place.

This notice is effective from 9 September 2025.

Change of purpose

We will process your personal data for the purpose for which we collected it. If we process your personal data for another purpose that we reasonably consider to be compatible with the original purpose, we will notify you and explain the legal basis which allows us to do so.

Back to top