Privacy Policy The Energy Company (UK) Ltd respect the need to protect your privacy. In order to process your quotes and contracts and to provide you, if required, with details of those contracts at a later stage we do need to collect a certain amount of personal data. Our policy is to collect and retain only the information we require to enable us to carry out our obligations to you and, for the avoidance of doubt, we have detailed below the information we retain. We collect data when you apply for our services either direct or via a third party (sub-broker) When we collect the following information: i) Personal Details - Your Name, Address , Postcode, E-Mail Address, Daytime Telephone Number. This information enables us to process your quotes and contracts and to advise you of the status of your them. ii) Bank Details - Account details,Sort Codes and Account Name. This information is required by suppliers to process contracts and credit checks. We will not collect any personal data from you we do not need in order to provide and oversee this service to you. iii) Cookies - The Energy Company (UK) Ltd do use temporary Cookies to track our customers use of the website. We use this information solely for the purpose of ensuring that the content of the website meets our customer's requirements. iv) Data Protection Responsibility - The Energy Company (UK) Ltd accepts responsibility as Data Controller for all information collected via this website. In its capacity as Data Controller, The Energy Company (UK) Ltd has written undertakings from all third party Data Processors that it will protect all personal data received as required by the Data Protection Acts of 1984 and 1998. AS REQUIRED BY THE UK DATA PROTECTION ACTS OF 1984 AND 1998, WE FOLLOW STRICT PROCEDURES IN THE STORAGE AND DISCLOSURE OF ALL INFORMATION WHICH YOU HAVE GIVEN US IN ORDER TO PREVENT UNAUTHORIZED ACCESS. THE MAILING LIST INFORMATION WILL NOT, UNDER ANY CIRCUMSTANCES, BE PASSED ON TO ANY OTHER THIRD PARTY. ALL PERSONAL DATA IS STORED ON SECURE,ENCRYPTED SERVERS WITH THE EUROPEAN UNION. NO THIRD PARTIES HAVE ACCESS TO YOUR PERSONAL DATA UNLESS THE LAW ALLOWS THEM TO DO SO. Our privacy policy only extends to The Energy Company (UK) Ltd and The Energy Company. Any links to 3rd party web pages are not covered by our privacy policy and you would need to consult their own privacy policy. The Energy Company takes no responsibility for any content on 3rd party websites including sub-agents. Organisation Contact - What are your rights? If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact our Data compliance Team who will investigate the matter. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office (ICO). Our Data compliance team can be contacted via john@theenergycompany.co.uk. The named contact for any data compliance is John Davies and he can be contacted on the above email address or by calling our office on 01824 703 253. Data Breaches Policy Under GDPR from 25th May 2018, there is a breach notification duty across the board. The Energy Company UK Ltd / The Energy Company Ltd are required to notify the ICO (Information Commissioners Office) within 72 hours of any relevant data security breach. Your right to complain Should you wish to make a complaint in relation to Data Protection issues relating to our companies, you can contact us at our office address. If you are not happy with any aspect of our Data security measures/responses, you can contact the regulator... The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone 0303 123 1113(local rate) or 01625 545 745 national rate number. www.ico.org.uk

Tel: 0800 027 0020 | Email: info@theenergycompany.co.uk