The effective date for this policy was the 1st June 2018.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting: essutility.co.uk you are accepting and consenting to the practices described in this policy. For the purpose of the Data Protection Act 2018, the data controller is ESS Utility Consultants Ltd of Monarch House, 7-9 Stafford Road, Wallington, Surrey SM6 9AN and governs the privacy of its users who choose to use it. It also explains how we comply with the GDPR (General Data Protection Regulation), the DPA (Data Protection Act) [pre GDPR enforcement] and the PECR (Privacy and Electronic Communications Regulations) are adhered to.
This policy not only relates to any personal information you provide to our website; it also relates to our use of any personal information you provide to us via phone or text, by email, in letters, our social media or other correspondence.
ESS Utility Consultants Ltd is committed to safeguarding your personal information. Whenever you provide such information, we are legally obliged to use your information in line with all laws concerning the protection of personal information, including the Data Protection Act 2018 (these laws are referred to collectively in this policy as the “data protection laws”).
ESS Utility Consultants Ltd is an energy management and consultancy company. We are primarily located in the UK. When we refer to “we”, “us” or “our”, we are referring to ESS Utility Consultants Ltd.
3. What personal data will ESS Utility Consultants Ltd collect and why we collect it?
Here at ESS, we take your privacy seriously. We collect and use personal data mainly to perform contractual obligations, energy procurement, supplier management, energy bureau services, customer service, direct sales and direct marketing. We also collect data about suppliers, partners and persons seeking a job (we collect the data you provide during the application process) or working in our company. We will do this on either the basis of consent or legitimate interest. Where we use legitimate interest, we will carefully weigh your rights against our legitimate business interests before we contact you. You will be able to opt out of communication from us at any time.
We collect data when:
Where we process personal information for purposes which are not directly to comply with our contractual or legal obligations we do so for certain legitimate business purposes. Whenever we process data for these purposes we will always ensure that we give your personal data rights due consideration and hold them in the highest regard.
ESS does not collect or process any special categories of personal data, such as public unique identifiers or sensitive personal data. You will be able to opt out of communication from us at any time.
We will never pass your information on to anyone outside of ESS unless the law requires us to do.
Information you give us. You may give us personal information when you access or sign up to any of our products, services, visit our website and/or complete any of our online forms, or by corresponding with us by phone, email or otherwise. This can consist of information such as your name, email address, postal address, landline telephone or mobile number. Information we collect about you. With regard to each of your visits to our website we may automatically collect the following data about you:
We will use your personal information for a number of purposes including the following:
We may contact you:
We will keep your information confidential except where disclosure is required or permitted by law (for example to government bodies and law enforcement agencies) or as described in this section.
We may share your personal information with other members of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006.
In addition, sometimes we share your information with selected third parties as follows:
We may disclose your personal information to third parties:
If you post or send offensive, inappropriate or objectionable content anywhere on or to our website or otherwise engage in any disruptive behaviour with regards to any of our services, we may use your personal information to stop such behaviour.
Where ESS Utility Consultants Ltd reasonably believes that you are or may be in breach of any applicable laws (e.g. because content you have posted may be defamatory), we may use your personal information to inform relevant third parties such as your employer, school, email/internet provider, or law enforcement agencies about the content and your behaviour.
The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”), such as cloud based storage. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this policy, though we must state that, unfortunately, the transmission of information via the internet can never be guaranteed as being completely secure. Therefore, although we will always do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
10. What rights you have over your data?
Under new data protection regulations, individuals (you) have enhanced rights:
11. How long we retain your data?
We store personal data for as long as we find it necessary to fulfil the purpose for which the personal data was collected, while also considering our need to answer your queries or resolve possible problems, to comply with legal requirements under applicable laws, to attend to any legal claims/complaints, and for safeguarding purposes.
If you are aged 16 or under, please get your parent/guardian’s permission before you provide any personal information to us. Users of this nature and without this consent are not allowed to provide us with personal information.
Under the Data Protection Act 2018, you have the right to request a copy of the personal information we hold about you and to have any inaccuracies corrected. We charge £10 for information requests and require you to prove your identity with two pieces of approved identification. We will use reasonable efforts to supply, correct or delete personal information about you on our files.
We and this website complies to the DPA (Data Protection Act 1998) and already complies to the GDPR (General Data Protection Regulation) which comes into effect from May 2018. We will update this policy accordingly after the completion of the UK’s exit from the European Union (i.e. post Brexit as required).
This website may contain sponsored links and adverts. These will typically be served through our advertising partners, who may have detailed privacy policies relating directly to the adverts they serve.
Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third party anti-virus software or similar applications.
We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third party anti-virus software or similar applications.
Users contacting us through this website do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use.
Where we have clearly stated and made you aware of the fact, and where you have given your express permission, we may use your details to send you products/services information through a mailing list system. This is done in accordance with the regulations named in ‘The policy’ above.
We may operate an email mailing list program, used to inform subscribers about products, services and/or news we supply/publish. Users can subscribe through an online automated process where they have given their explicit permission. Subscriber personal details are collected, processed, managed and stored in accordance with the regulations named in ‘The policy’ above. Subscribers can unsubscribe at any time through an automated online service, or if not available, other means as detailed in the footer of sent marketing messages (or unsubscribe from all Mailchimp lists). The type and content of marketing messages subscribers receive, and if it may contain third party content, is clearly outlined at the point of subscription.
Email marketing messages may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.
We do not use an EMS (email marketing service) at this time, if we do at any point then this information will be added to this policy.
Although we only look to include quality, safe and relevant external links and embedded content (e.g. videos, images, articles, etc.), users are advised to adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text / banner / image links to other websites, similar to; the BBC News Homepage.
Shortened URL’s; URL shortening is a technique used on the web to shorten URL’s (Uniform Resource Locators) to something substantially shorter. This technique is especially used in social media and looks similar to this (example: http://bit.ly/zyVUBo). Users should take caution before clicking on shortened URL links and verify their authenticity before proceeding.
We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned.
We adopt a Social Media Policy to ensure our business and our staff conduct themselves accordingly online. While we may have official profiles on social media platforms users are advised to verify authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.
There may be instances where our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile feed or page. You can find further information about some social media privacy and usage policies in the resources section below.
ESS Limited is a data controller and our Data Protection Lead can be contacted by email.
Please address requests and questions about this or any other question about this policy to the Data Protection Officer, ESS Utility Consultants Ltd, Monarch House, 7-9 Stafford Road, Wallington, Surrey SM6 9AN or email us.