We take your personal data privacy very seriously and we're committed to protecting your personal data by complying with the relevant privacy legislation.

The purpose of this Data Privacy Policy is to make it easier for you to understand how we use and protect your personal data. It will help you understand your privacy rights, how, when and why we need to process your personal data, and how you can get in touch with us if you need to.

We ask that you read this Data Privacy Policy before providing us with any personal information.

Name: The Data Controller – Utilities Savings Limited

Address: The Old Coach House, 2a Chapel Street, Stretham, Cambridgeshire, CB6 3JG

Phone Number: 07801 428564

We currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details)
• Energy supply information such as consumption data, MPRNs/MPANs, meter read, information about your meter, and details of your gas and/or electricity consumption. Note that this information can be also provided by other market participants, such as ECOES and Xoserve.
• Financial data includes data to and from Credit Reference Agencies, bank account and payment card details.
• Personal data that has been processed in such a way that it can no longer be attributed to a specific person without the use of additional information. Such additional information must be kept carefully separate from personal data.
• Transaction data includes details about payments to and from you.
• Technical data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website. This will be done mainly through cookies. You will find the cookies policy on our website at: https://utilitiessavings.co.uk/cookie-policy/
• Usage data includes information about how you use the website and how you consume the services.
• Services Information: Energy usage information, payment details, order history, data to establish your current address.
• Direct point of contact: letter, email, fax, forms.
• Calls: Recorded telephone calls.
• Data from and to law enforcement agencies: such as the Police, Department for Work and Pensions, HM Revenues and Customs (HMRC), UK Visas and Immigration.
• We may also be provided with information about you by a previous tenant. We work closely with third parties, sub-contractors and regulatory bodies including the Office of Gas and Electricity Markets (“Ofgem”) and The Energy Ombudsman.

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• When you use our services.
• When we receive your personal data from third parties, such as credit reference agencies or fraud prevention organisations and previous suppliers.
• We may collect your personal data from anything you have provided us over the telephone, in a letter, by email or fax.
• From energy suppliers and industry specialists such as ECOES and Gas “Access data” but not exclusively, half-hourly data readings and consumption’s, full electricity MPAN numbers and Gas MPRN details, Authorise Supply Capacities, and meter information including smart metering.

We may collect your personal data from anything you have provided us on our website through a web form. These are known as personally identifying information. Here are the main circumstances when you will be asked for personal information on our website.

• Get a quote on your business gas or electricity form.
• Request site works and/or new connections form.
• Make an enquiry form or Contact us form.

We may supply your personal information to credit reference agencies (CRAs) and they will give us information about you, such as about your financial history. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations.

We may take credit scoring information into account when deciding the conditions placed upon your contract, including any premium to be added or security deposit required. In the majority of cases, we will also consider other information that we hold about you.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent. You are able to remove your consent at any time. You can do this by contacting enquiries@utilitiessavings.co.uk
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a legitimate interest.

Within the company, who sees or has access to your personal data will depend on why we need to process it. For example:

• Our Compliance Team for any disputes, complaints and requests for information.
• Our Accounts Payable Team for issuing or receiving payments.
• Our Account management Team and their contractors in relation to connections to your property and the energy network.

We use third-party organisations to help us provide our services to you and with whom we share data. These third parties can’t do anything with your personal information and won’t share your personal information with any other organisation unless they are instructed by us to do so. They will hold it securely. These third parties with whom we share your data are based in the United Kingdom.

These third parties associated are such as:

• Credit Reference Agencies.
• Police, Department for Work and Pensions, HMRC, UK Visas and Immigration and any other law enforcement agency to the extent necessary for purposes including preventing, investigating, detecting, and prosecuting criminal offences; or validating a claim.
• Business partners, suppliers and subcontractors for the performance of any contract we enter into with them.
• Agents we engage to perform functions on our behalf.
• Providers of services relating to the installation, maintenance and removal of meters and meter readers and anyone providing business services under a contract.
• Any contract aggregator we authorise to act on your behalf in relation to your energy supply contract(s).

We also have to provide data to other participants in the energy market.

• These include central data service providers such as Xoserve and ECOES network operators and other suppliers and shippers.
• Ofgem, BEIS, the Energy Ombudsman and any other regulatory authority we may be subject to for the purposes of demonstrating compliance with applicable law and regulations.

If we suspect someone has committed fraud or stolen energy by tampering with the meter, or diverting the energy supply, we will record these details on your account and may share this information with Ofgem, SPAA and other people who are interested such as other energy suppliers.

We may also disclose your personal information to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If the company or substantially all of its assets are acquired by a third-party, in which case personal data held by it about its customers will be one of the transferred assets.

Your information is securely stored. Your personal data is held in secure systems with controlled access and subject to cyber-security measures, whether we’re processing it in our offices or sites or working from home. We also apply strict physical security at all our sites and offices.

In line with our Retention and Schedules Policies, we take all reasonable steps to retain your information for only as long as is necessary for the provision of our services. We will not keep your personal data longer than is necessary. The law and our regulatory requirements determine the length of time information has to be kept. We adhere to the appropriate national standards and guidelines regarding data retention. When we delete your personal data, we do so securely.

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us via email to enquiries@utilitiessavings.co.uk or by post: The Old Coach House, 2a Chapel Street, Stretham Cambridgeshire CB6 3JG, if you wish to make a request.

If you have any concerns about our use of your personal information, you can make a complaint to us enquiries@utilitiessavings.co.uk or by post: The Old Coach House, 2a Chapel Street, Stretham Cambridgeshire CB6 3JG

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

This Data Privacy Policy will be reviewed and amended as required, and at least every year by the appointed compliance officer, to reflect changes in our services as well as to comply with changes in Data Protection Laws and Legislation. If we make any significant changes impacting your privacy, we'll make this clear on our website. Please remember to check from time to time. Therefore, we would encourage you to review this policy on a regular basis.