Privacy policy

Last updated 26 August 2026

Who we are

This site is operated by Qualis Energy Limited ("we", "us", "our"), registered in England & Wales, company number 16320369, registered office Unit 10, Brailwood Close, Bilsthorpe, Nottinghamshire, NG22 8UG.

We are registered with the Information Commissioner's Office as a data controller, registration number ZC196044. You can check that on the ICO's public register at ico.org.uk.

Nord Group, ArcticNord, EmberNord, AuraNord and ZenithNord are all trading names of Qualis Energy Limited. They are not separate companies, so a single privacy policy covers all of them and Qualis Energy Limited is the data controller for personal data collected through any of them.

If you contacted one brand and receive a reply from a group address, that is why, brand enquiries are handled by one central team.

What we collect

This website has no enquiry form, no account area and no login. We do not collect personal data through the pages themselves.

You give us personal data when you choose to contact us, by phone, by email, or through one of the brand websites. Depending on how you get in touch, that may include:

• Your name, and the name of your business if you have one
• Email address and telephone number
• The address of the property or site the work relates to
• What you have told us about the building, the system and what you want doing
• Where we have quoted or carried out work: appointment records, survey findings, photographs of the installation, commissioning readings, service history and payment records

We do not ask for special category data. Occasionally a customer volunteers health or access information (that someone in the household is housebound, for instance) so that we can plan a visit. We record only what is needed for that purpose.

Why we use it, and our lawful basis

What for	Lawful basis
Answering an enquiry and preparing a quotation	Steps taken at your request before entering a contract
Carrying out work you have instructed, and invoicing it	Performance of a contract
Statutory records, F-Gas logbooks, Gas Safe notifications, MCS and building control certification	Legal obligation
Warranty registration with a manufacturer	Performance of a contract
Service reminders to existing customers	Legitimate interests: keeping systems you bought from us safe and working
Marketing to people who are not yet customers	Consent
Accounting and tax records	Legal obligation
Defending or bringing a legal claim	Legitimate interests

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights. You can object at any time and we will stop unless we have compelling grounds to continue.

Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing.

We share it only where the work requires it:

• Manufacturers: to register an extended warranty on equipment we have installed.
• Certification and scheme bodies: MCS, our certification body, RECC, Gas Safe and the F-Gas register, where a notification or certificate is required by law or by the scheme.
• Sub-contracted specialists: for example the NAPIT-registered partner who carries out and certificates electrical work outside our MCS scope. They see only what is needed for their part.
• Our software suppliers: email, accounting, scheduling and file storage. They process data on our instructions under a contract.
• Finance providers: only if you apply for finance through us.
• Professional advisers, insurers and regulators: where we are required or entitled to.

Some of our software suppliers process data outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum.

Website analytics and advertising

This is separate from everything above, because it is the only part of this policy that runs on consent rather than on contract or legitimate interests, and consent you can withdraw at any moment, with no consequences.

If you accept optional cookies, we and the platforms below receive information about your visit: pages viewed, roughly where in the country you are, the device and browser you used, and whether you arrived from an advert.

• Google (Analytics 4, Tag Manager, Ads): how the site is used, and whether advertising leads to enquiries.
• Meta (Facebook and Instagram): advertising measurement and audiences.
• LinkedIn: advertising measurement and audiences.
• Microsoft Advertising: advertising measurement.

All four are in the United States. Those transfers rely on the UK extension to the EU–US Data Privacy Framework, or on the International Data Transfer Addendum where the framework does not apply.

If you refuse, none of it happens. No script loads, no cookie is set, and none of those companies learns anything about your visit. Refusing changes nothing about how the site works or how we treat your enquiry.

You choose when you first arrive, and you can change your mind at any time from our cookie policy or the Cookie settings link in the footer of every page. The full detail of every cookie is in that policy.

How long we keep it

• Enquiries that do not become work: up to 2 years, then deleted.
• Customer and job records: 6 years from the end of the contract, which matches the limitation period for a claim.
• Installation, commissioning and certification records: for the life of the system plus 6 years, because they are the evidence behind warranties and statutory compliance.
• F-Gas logbooks: at least 5 years, as the regulations require.
• Accounting records: 6 years after the end of the accounting period.
• Marketing consents: until you withdraw, and we keep a record of the withdrawal itself so we do not contact you again by mistake.

Your rights

Under the UK GDPR you have the right to:

• Ask what personal data we hold about you and get a copy
• Have inaccurate data corrected
• Ask us to delete data, where we have no continuing reason to hold it
• Ask us to restrict how we use it while a dispute is resolved
• Object to processing based on legitimate interests
• Receive data you gave us in a portable format
• Withdraw consent at any time, where consent is the basis

Exercise any of these by emailing hello@nord-group.co.uk. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Note that some rights are limited where we have a legal obligation to keep a record, we cannot delete a statutory F-Gas or Gas Safe entry on request.

Complaints

If you are unhappy with how we have handled your data, tell us first at hello@nord-group.co.uk and we will look into it.

You can also complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113. We would rather you gave us the chance to put it right first, but you do not have to.

Changes to this policy

We update this policy when what we do changes. The date at the top of the page tells you when it last changed. Material changes affecting existing customers will be notified directly.