Privacy Notice

Contact details

• Post: Invisergy, Pioneer House, Pioneer Business Park, North Road, Ellesmere Port, CH65 1AD.
• Telephone: 03300 973 035
• Email: dataprotection@invisergy.co.uk

What information we collect, use, and why

To provide and improve products and services for clients:

• Names and contact details
• Addresses
• Occupation
• Date of birth
• Usage data (including how you interact with our website, products and services)
• Information relating to compliments or complaints
• Audio recordings (e.g. calls)
• Records of meetings and decisions
• Account access information
• Website user information
• Half-hourly energy consumption data obtained directly from the grid via secure API, under a read-only Letter of Authority that cannot be used to change anything on a supply contract

For the operation of client or customer accounts:

• Names and contact details
• Addresses
• Purchase or service history
• Account information, including registration details
• Information used for security purposes
• Marketing preferences
• Technical data, including information about browser and operating systems

For information updates or marketing purposes:

• Names and contact details
• Addresses
• Profile information
• Marketing preferences
• Purchase or account history
• Website and app user journey information
• IP addresses

To comply with legal requirements:

• Name
• Contact information
• Identification documents
• Client account information
• Any other personal information required to comply with legal obligations

For recruitment purposes:

• Contact details (e.g. name, address, telephone number, personal email)
• Date of birth
• National Insurance number
• Copies of passports or other photo ID
• Employment history (e.g. job application, employment references, secondary employment)
• Education history (e.g. qualifications)
• Right to work information
• Details of any criminal convictions (e.g. DBS, Access NI or Disclosure Scotland checks)
• Security clearance details (e.g. basic checks and higher security clearance)

For dealing with queries, complaints or claims:

• Names and contact details
• Address
• Account information
• Customer or client accounts and records

Lawful bases and your data protection rights

Under UK GDPR and the Data Protection Act 2018, we must have a lawful basis for collecting and using your personal information. The lawful basis we rely on may affect your rights, which are summarised below. You can find out more about your rights and any exemptions on the ICO's website.

• Right of access, ask for copies of your personal information.
• Right to rectification, ask us to correct inaccurate or incomplete information.
• Right to erasure, ask us to delete your personal information.
• Right to restriction of processing, ask us to limit how we use your information.
• Right to object to processing.
• Right to data portability, ask us to transfer information to you or another organisation.
• Right to withdraw consent, where consent is our lawful basis, at any time.
• Right to lodge a complaint with the Information Commissioner's Office (see "How to complain" below).

If you make a request, we will respond without undue delay and within one month. To exercise any of these rights, please contact us using the details above.

The lawful bases we rely on:

• Consent, you have given us permission after being fully informed (e.g. marketing communications).
• Contract, we need the information to enter into or perform a contract with you or your organisation.
• Legal obligation, we need the information to comply with the law.
• Legitimate interests, where it is necessary to operate, secure and improve our services, prevent fraud, and communicate with business contacts about relevant services, balanced against your rights and interests.

These bases apply across the processing activities described above. Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you have the right to object.

Where we get personal information from

• Directly from you or your organisation.
• From the electricity and gas networks via secure API, using the read-only Letter of Authority you sign.
• Publicly available sources (e.g. Companies House, business directories).
• Referees and previous employers (recruitment only).

How long we keep information

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory or contractual obligations. Indicative retention periods:

• Contract and client account records: duration of the relationship plus up to 7 years for tax and audit purposes.
• Energy consumption data: duration of the engagement plus a reasonable analytical period, then aggregated or deleted.
• Marketing data: until you withdraw consent or object.
• Recruitment data for unsuccessful applicants: typically 6 to 12 months.
• Complaints and queries: up to 6 years from resolution.

Who we share information with

We share personal information only where necessary, with the following categories of recipients, all bound by appropriate contracts and safeguards:

• Energy data and analytics platforms used to process consumption data.
• Payroll and HR providers.
• IT, hosting and infrastructure providers (including our website and database hosting).
• Email, communications and CRM providers.
• Professional advisors (e.g. accountants, auditors, legal advisors).
• Regulators, government bodies and law enforcement where required by law.

We do not sell your personal information.

International transfers

We store personal data in the UK and/or EEA wherever possible. Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, role-based permissions and regular review of our systems and suppliers. Our Letter of Authority is read-only, it cannot be used to switch suppliers, vary tariffs or change anything on your supply contract.

Cookies and analytics

Our website uses cookies that are strictly necessary to make it work. With your consent, we also use basic, privacy-respecting analytics to understand how the site is used. We do not use advertising or cross-site tracking cookies. You can accept or reject non-essential cookies via the banner shown on your first visit, and you can change your choice at any time by clearing your browser storage for this site.

Automated decision-making

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. Our analysis is reviewed by our team before any recommendation is shared.

Children

Our services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this notice

We may update this notice from time to time to reflect changes in our services, technology or the law. The "Last updated" date below shows when it was last revised. Material changes will be highlighted on this page.

How to complain

If you have any concerns about our use of your personal data, please contact us using the details at the top of this notice. If you remain unhappy after raising a complaint with us, you can also complain to the Information Commissioner's Office (ICO).

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
• Helpline: 0303 123 1113
• Website: ico.org.uk/make-a-complaint

Last updated: 30 June 2026.