Privacy & Data Protection Policy

1. Introduction

Energy Support Solutions Ltd (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Energy Support Solutions Ltd is the data controller for the purposes of data protection law.

2. Data We Collect

We may collect and process the following categories of personal data:

• Client Information: Name, business name, job title, email address, phone number
• Financial Data: Payment information for invoices, refunds or commissions
• Energy Service Data: Energy usage, billing information, contract details, CCL/levy data
• Marketing Data: Contact preferences, engagement with our website or social media
• Technical Data: IP address, browser type, cookies (see Cookie Policy)

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contract: To provide our services, process CCL claims, manage energy contracts
• Legitimate Interests: To improve our services, manage enquiries, prevent fraud
• Legal Obligation: To comply with tax, regulatory or audit requirements
• Consent: For marketing communications (you can withdraw at any time)

4. How We Use Your Data

We use personal data to:

• Deliver our services, including CCL recovery and energy brokerage
• Review energy bills and manage supplier interactions
• Provide customer support and handle complaints
• Comply with legal and regulatory obligations
• Send marketing communications (only where consent has been given)

We do not sell personal data.

5. Data Sharing

We may share your data with:

• Energy suppliers and industry partners for contract or claim processing
• Professional advisers (accountants, legal advisers)
• IT and software providers who support our systems
• Regulatory bodies or law enforcement where legally required

All third parties are required to protect your data and use it only for the purpose we specify.

6. International Transfers

Some of our service providers may store data outside the UK (e.g., cloud or email providers). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

7. Data Security

We use a range of technical and organisational measures to protect your data, including:

• Encrypted storage for financial and sensitive data
• Access controls and staff training
• Regular security reviews and monitoring

8. Data Retention

We retain personal data only for as long as necessary:

• Client and contract data: 6 years after the end of the service
• Financial records: 6 years (legal requirement)
• Marketing data: Until consent is withdrawn

9. Your Rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Object to or restrict processing
• Request data portability
• Withdraw consent (for marketing)

To exercise your rights, contact: info@energysupportsolutions.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk

10. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website.

11. Contact Us

Energy Support Solutions Ltd
Unit 6, Balfour Court, Leyland, PR25 2TF
info@energysupportsolutions.co.uk
01254 475751