Privacy Policy

Energunite Ltd
Company Number: 14785432
95 High Street, Beckenham, BR3 1AG, United Kingdom

Last Updated: 6th September 2026

Introduction

1.1 Important information and who we are

Welcome to Energunite Ltd’s Privacy and Data Protection Policy (“Privacy Policy”).

At Energunite Ltd (“we”, “us” or “our”), we are committed to protecting and respecting your privacy and Personal Data in accordance with the UK General Data Protection Regulations (“UK GDPR”), the Data Protection Act 2018 and other applicable UK data protection legisliation.

This Privacy Policy explains how we collect, use, store and otherwise process your Personal Data, how we keep it secure, your privacy rights and how the law protects you.

The individuals whose Personal Data we may collect and process include:

  • Customers and prospective customers;

  • Suppliers;

  • Business contacts;

  • Employees and staff members;

  • Individuals connected with our customers or their energy supplies; and

  • Other individuals with whom we have a business relationship or whom we may reasonably need to contact in connection with the provision of our services.

This Privacy Policy applies to Personal Data processed by Energunite Ltd in connection with our business activities and services.

1.2 Data Controller and contact details

Energunite Ltd is the Data Controller responsible for your Personal Data.

Energunite Ltd is not currently required to appoint a Data Protection Officer under the UK GDPR and has not voluntarily appointed one. Responsibility for data protection is managed internally by Energunite Ltd.

If you have any questions about this Privacy Policy, our use of your Personal Data, or wish to exercise your data protection rights, you can contact us at:

Email: data-protection@energunite.com
Post: Energunite Ltd, 95 High Street, Beckenham, BR3 1AG, United Kingdom

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.


2. Personal Data we collect and our legal bases

2.1 Types of Personal Data

“Personal Data” means any information relating to an identified or identifiable individual. It does not include information where an individual can no longer be identified, such as properly anonymised data.

We may collect, use, store and transfer different kinds of Personal Data. Not all of the following categories will apply in every case, but depending on your relationship with Energunite, we may process:

  • Profile/Identity Data: including your first name, last name and other information used to identify you.

  • Contact Data: including your address, email address and telephone number.

  • Marketing and Communications Data: including your preferences for receiving marketing and other communications from us.

  • Billing Data: including information required for billing and payment purposes.

  • Financial Data: including bank account and payment details where required.

  • Transactional Data: including details and records of payments made for our products or services.

  • Technical Data: including your IP address, browser type and version, time zone setting and location, operating system, platform and other technology on the devices you use to interact with our website and services.

  • Customer Support Data: including enquiries, correspondence, feedback and survey responses.

  • Usage Data: including information about how you use our website, products and services.

  • Utility Usage Data: information relating to electricity, gas and/or water supplies and consumption, including meter and supplier identifiers, consumption information and, where applicable, half-hourly consumption data.

We may also collect, use and share Aggregated Data, such as statistical or analytical information relating to the use of our services. Aggregated Data may be derived from Personal Data but is not considered Personal Data where it does not directly or indirectly identify an individual.

Where we combine or connect Aggregated Data with Personal Data in a way that means an individual can be identified, we will treat the combined information as Personal Data and process it in accordance with this Privacy Policy.

We do not intentionally collect Special Categories of Personal Data through the ordinary provision of our services. This includes information concerning race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, health information, or genetic and biometric data. We also do not intentionally collect information relating to criminal convictions and offences.

2.2 Legal bases for processing Personal Data

We will only process Personal Data where we have a lawful basis for doing so under applicable data protection law. Depending on the circumstances, we may rely on one or more of the following:

  • Consent: where you have given us clear consent to process your Personal Data for a specific purpose. Where we rely on consent, you may withdraw that consent at any time.

  • Contract: where processing is necessary to enter into or perform a contract with you, including where information is required for us to provide services you have requested.

  • Legal Obligation: where processing is necessary for us to comply with a legal or regulatory obligation.

  • Legitimate Interests: where processing is necessary for our legitimate business interests, or those of a third party, provided those interests are not overridden by your rights and interests. This may include activities reasonably necessary to operate and administer our business, provide and improve our services, communicate with business contacts, and protect our business and systems.

Where appropriate, we will determine the applicable lawful basis having regard to the particular purpose for which the Personal Data is being processed.

2.3 Energy consumption and smart meter data

Where you ask us to provide services that require access to your smart meter or energy consumption information, we may obtain information about you and your energy supply from third-party energy data providers and energy industry systems.

The information we receive may include your name and contact details, supply address and postcode, electricity or gas supply identifiers (such as your MPAN or MPRN), smart meter information, tariff information and current or historic energy consumption data.

Where required, we will obtain your consent or appropriate authority before requesting access to your smart meter data. We will only obtain and process this data for the purposes explained to you when your consent or authority is obtained and in accordance with applicable data protection laws.

3. How we use your Personal Data

3.1 Our use of Personal Data

We will only use your Personal Data where the law allows us to do so and for the purposes for which it was collected.

We may use Personal Data to:

  • provide, manage and support the services we offer;

  • communicate with customers, prospective customers, suppliers, business contacts and other relevant parties;

  • manage our contractual and commercial relationships;

  • administer billing, payments and financial records;

  • respond to enquiries, requests, complaints and support matters;

  • maintain and improve our website, systems and services;

  • comply with legal and regulatory obligations; and

  • protect our business, systems and legal rights.

3.2 Energy Consumption Data

Where you engage Energunite to provide energy-related services, we may obtain and process information relating to the electricity, gas and/or water supplies associated with your premises. This may include meter and supplier identifiers, consumption information and half-hourly energy consumption data.

This information may be provided directly by you or obtained, where we have the appropriate authority to do so, from energy suppliers, industry participants and energy industry data services.

We use this information for the purpose of providing our energy-related services. Depending on the services you have asked us to provide, this may include verifying your association with an energy supply, analysing and monitoring energy consumption, carrying out calculations and analysis, producing reports and other information relating to your energy supplies, providing energy management or switching-related services and providing support in connection with those services.

In providing these services, your information may be obtained from or processed using authorised energy industry systems, energy suppliers, energy data service providers and other service providers involved in delivering the services you have requested. Access to energy consumption and smart meter data is restricted to those who require it for the relevant purpose.

3.3 Marketing and communications

You may receive marketing and other communications from us where you have requested them consented to receive them, or where we are otherwise permitted to send them under applicable law.

From time to time, we may make suggestions or recommendations about products or services that we believe may be relevant to you.

You can ask us to stop sending marketing communications at any time by contacting us using the details set out in this Privacy Policy.

3.4 Change of purpose

We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another purpose that is compatible with the original purpose.

If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so, unless the law permits or requires us to process the information without providing such notice.

If you would like further information about how we determine whether a new purpose is compatible with the original purpose, please contact us.


4. Your rights and how we protect your Personal Data

4.1 Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your Personal Data. These include:

  • Right to be informed: You have the right to be informed about how and why we collect and user your Personal Data, how long we retain it and who we may share it with. This Privacy Policy is intended to provide you with this information.

  • Right of access: You have the right to request a copy of the Personal Data we hold about you and to check that we are processing it lawfully. This is commonly known as a Data Subject Access Request.

  • Right to rectification: You have the right to request correction of Personal Data that we hold about you if it is inaccurate or incomplete. We may need to verify the accuracy of any new information you provide to us.

  • Right to erasure: In certain circumstances, you have the right to ask us to delete or remove your Personal Data where there is no lawful reason for us to continue processing it. This right is not absolute, and there may be circumstances in which we are legally entitled or required to retain your Personal Data.

  • Right to restrict processing: In certain circumstances, you have the right to ask us to restrict the processing of your Personal Data, for example while we establish its accuracy or consider an objection you have raised.

  • Right to data portability: In certain circumstances, you have the right to receive Personal Data you have provided to us in a structured, commonly used and machine-readable format and to request that it is transferred to another organisation. This right generally applies where processing tis automated and is based on your consent or the performance of a contract.

  • Right to withdraw consent: Where we rely on your consent to process Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

If you wish to exercise any of these rights, please contact us at data-protection@energunite.com.

4.2 How Energunite protects Personal Data

We are committed to protecting Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or disclosure.

We use appropriate technical and organisational measures designed to protect Personal Data, taking into account the nature of the information we process and the risks associated with that processing.

Access to Personal Data is limited to authorised Energunite personnel and relevant service providers who require access for legitimate business purposes. Persons acting under Energunite’s authority are required to handle Personal Data appropriately and maintain its confidentiality.

Where we use third-party service providers to process or store Personal Data on our behalf, we take appropriate steps to ensure that relevant data protection and contractual requirements apply.

While we take appropriate measures to protect Personal Data, no method of transmitting or storing information can be guaranteed to be completely secure. If you believe that Personal Data you have provided to us may have been compromised, please contact us at data-protection@energunite.com.

4.3 Opting out of marketing communications

You can us us to stop sending you marketing communications at any time by contacting us at enquiries@energunite.com or by using any unsubscribe facility provided within the relevant communication.

Where you opt out of receiving marketing communications, we may continue to process Personal Data for other legitimate purposes arising from your relationship with us, including where necessary to provide our services, maintain appropriate records or comply with our legal obligations.

4.4 How to exercise your rights

You will not normally have to pay a fee to exercise your data protection rights. However, where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request where permitted by law.

We may need to request specific information from you to help us confirm your identify and establish your entitlement to exercise the relevant right. This is a security measure intended to prevent Personal Data from being disclosed to a person who is not entitled to receive it.

We may also contact you for further information where reasonably necessary to understand or respond to your request.

We will respond to requests within the timeframes required by applicable data protection law.


5. Your data and third parties

5.1 Sharing your Personal Data with third parties

We may share Personal Data with third parties where necessary to provide our services, operate our business, comply with our legal obligations or otherwise where permitted by applicable data protection law.

This may include:

  • energy suppliers, industry participants and energy industry data service providers where necessary to provide our energy-related services;

  • IT, software, cloud hosting, data storage and other technology service providers;

  • professional advisers and other service providers who support our business; and

  • regulatory authorities, law enforcement agencies or other organisations where disclosure is required or permitted by law.

Where third parties process Personal Data on our behalf, we require appropriate contractual and data protection requirements to be in place and require Personal Data to be processed only for the relevant purposes and in accordance with our instructions, where applicable.

We may also share Personal Data with relevant parties in connection with a proposed or actual sale, transfer, merger, acquisition or restructuring of all or part of our business or assets. Where Personal Data is transferred as part such a transaction, we will take appropriate steps to ensure that it continues to be protected in accordance with applicable data protection law.

We may disclose Personal Data where necessary to comply with a legal or regulatory obligation, enforce our contractual rights, establish, exercise or defend legal claims, or protect the rights, property or interests of Energunite Ltd or others.

5.2 Third-party links

Our website may contain links to third-party websites, plug-ins or applications. Clicking on those links or enabling those connections may allow third parties to collect or process information about you.

We do not control third-party websites and are not responsible for their privacy practices or privacy statements. Whey you leave our website, we encourage you to review the privacy policy of any third-party website you visit.


6. How long we retain your Personal Data

We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements.

When determining the appropriate retention period, we will consider the amount, nature and sensitivity of the Personal Data, the purposes for which we process it, whether those purposes can be achieved by other means, the potential risk of harm from unauthorised use or disclosure, and any applicable legal or contractual requirements.

We may retain Personal Data for a longer period where necessary in the event of a complaint, dispute or legal claim, or where we reasonably believe there is a prospect of litigation relating to our relationship with you.

Where Personal Data is no longer required, we will securely delete or anonymise it in accordance with our applicable retention requirements.


7. International transfers of Personal Data

Some of the third-party service providers we use may process or store Personal Data outside the United Kingdom.

Where Personal Data is transferred outside the United Kingdom, we will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protections law.

Where required, this may include transferring Personal Data to countries recognised as providing an adequate level of protection for Personal Data or implementing appropriate safeguards or other lawful transfer mechanisms permitted under UK data protection law.


8. Changes to this Privacy Policy

We keep this Privacy Policy under regular review and may update it from time to time to reflect changes to our services, business practices, legal obligations, ore the way in which we process Personal Data.

Any updated version will be published on this page and the “Last Updated” date at the top of this Privacy Policy will be amended accordingly.

Where appropriate, we may also take reasonable steps to bring material changes to your attention.


9. Interpretation

References in this Privacy Policy to “including” or “includes” are illustrative and do not limit the scope of the relevant provision.

References to applicable data protection law include the UK GDPR, the Data Protection Act 2018 and any other applicable legislation or regulations relating to the protection of Personal Data, as amended, replaced or supplemented from time to time.