Privacy Policy

1. Introduction

EnergyMart Network Ltd ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website energysmart-network.com or use our services.

We are registered in England and Wales under company number 12345678. Our registered office is at 25 Canada Square, Canary Wharf, London E14 5LQ, United Kingdom. We are the data controller for the purposes of UK data protection legislation.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, postal address
• Account Information: Username, password, billing information
• Property Information: Property type, current energy supplier, energy usage data
• Communication Data: Messages sent through our contact forms, customer service interactions
• Marketing Preferences: Your consent for marketing communications

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, click-through rates
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Information collected through cookies and similar technologies

2.3 Information from Third Parties

• Energy usage data from smart meters (with your consent)
• Credit reference information for billing purposes
• Information from our business partners and service providers

3. How We Use Your Information

3.1 Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our energy services and fulfill our contractual obligations
• Legitimate Interests: To improve our services, prevent fraud, and for business operations
• Legal Compliance: To comply with regulatory requirements and legal obligations
• Consent: For marketing communications and non-essential cookies

3.2 Purposes of Processing

• Providing energy supply services and customer support
• Processing payments and managing billing
• Personalizing your experience and improving our services
• Sending service updates and important notifications
• Marketing our services (with your consent)
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring security
• Analyzing usage patterns and optimizing our website

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

• Payment processors for billing and transaction processing
• Customer service platforms for support operations
• Marketing platforms for communication delivery
• Cloud hosting providers for data storage and processing

4.2 Legal Requirements

• Compliance with legal obligations, court orders, or subpoenas
• Regulatory reporting to Ofgem and other authorities
• Law enforcement requests when legally required

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law:

• Customer Account Data: For the duration of your account plus 7 years for regulatory compliance
• Billing Information: 7 years from the end of the tax year for HMRC requirements
• Marketing Data: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months maximum
• CCTV Footage: 30 days maximum

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

6.1 Right of Access

You have the right to request copies of your personal data. We may charge a small fee for this service.

6.2 Right to Rectification

You have the right to request correction of any information you believe is inaccurate or incomplete.

6.3 Right to Erasure

You have the right to request deletion of your personal data under certain conditions.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions.

6.5 Right to Object

You have the right to object to our processing of your personal data for direct marketing purposes.

6.6 Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

6.7 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected] or use the contact information provided at the end of this policy.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please see our Cookie Policy.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how you use our website
• Marketing Cookies: Used to deliver relevant advertisements

7.2 Managing Cookies

You can control cookies through our cookie banner and your browser settings. Please note that disabling certain cookies may affect website functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and staff training on data protection
• Secure data centers with physical access controls
• Regular backup and disaster recovery procedures

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.

9. International Data Transfers

We primarily process your data within the UK and EEA. If we need to transfer your data outside these regions, we ensure appropriate safeguards are in place:

• Adequacy decisions by the UK government
• Standard Contractual Clauses approved by the UK authorities
• Binding corporate rules or codes of conduct
• Certification schemes with binding enforcement

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting a notice on our website
• Sending an email to registered users
• Updating the "Last updated" date at the top of this policy

Your continued use of our services after any changes indicates your acceptance of the updated policy.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer

Email: [email protected]
Phone: 0203 808 5200
Data Protection Queries: [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

Phone: 0303 123 1113
Website: ico.org.uk