CEC Logo

Privacy statement

Last updated 8th February 2023

Control Energy Costs Ltd (CEC) is committed to ensuring that your privacy is protected. Any information provided by you, or gathered by us, will only be used in accordance with this privacy statement. This statement will be updated from time to time to reflect any changes required to remain compliant with the General Data Protection Regulation (GDPR) effective from 25th May 2018 and other legislation.

In reference to this statement, the following definitions apply. Personal data means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier, as gathered by CEC. Special Category Data means personal data which is more sensitive and so needs more protection.

Personal data we collect

Please note: CEC does not process any special category data.

We may hold any of the following information for the marketing of our services, if your company becomes a client of CEC, you are a third-party working with CEC on our client’s behalf, or, you have contacted us for any other reason:

  • Your name and job title
  • Contact information including email address and phone numbers
  • Company information such as name, address and postcode
  • Other information relevant to the work we undertake for you in your professional capacity, customer surveys and consultations.

Controlling your personal data

If you have previously agreed to Control Energy Costs Ltd using your personal data for direct marketing purposes, you may change your mind at any time by writing to our office at Kingsgate, 62 High Street, Redhill, Surrey, RH1 1SH or emailing help@cec.uk.com. Our data protection officer is Daniel Oman (Operations Director).

We will not sell or lease your personal data to third parties unless we have your permission or are required by law to do so. We will only share your personal data with third parties where we either hold your consent or there is a legitimate interest to do so as part of our dealings with you in your professional capacity.

You may request details of the personal data we hold about you. If you would like a copy of the information held on you, please write to our office at Kingsgate, 62 High Street, Redhill, Surrey, RH1 1SH.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

Processing of your personal data

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

  • To contact you to explain our services
  • To communicate with you in response to an enquiry from you, in your professional role as an employee of a client, or, if you work for a supplier, in connection with work undertaken by CEC on behalf of a client
  • Internal record keeping
  • We may use the information to improve our services
  • We may periodically send out promotional emails and newsletters about services that we think you may find relevant using the email address you have provided. Please note: if you are a sole trader or a non-limited partnership, we will require specific consent from you to send emails and other electronic communications under the terms of the Privacy and Electronic Communications Regulations (PECR).

Where we are marketing to incorporated businesses our lawful basis for processing your data is legitimate interest. However, in certain cases, such as dealings with sole-traders and non-limited partnerships, we will process information based on consent. Personal data relating to employees of a client is processed under a legitimate interest, provided processing is required to fulfil our obligations under our agreement with that client. We will also process personal data of third-parties (e.g. employees of utility suppliers) under a legitimate interest in representing our clients.

We store and retain your personal data for as long as necessary to fulfil the purposes described in this privacy statement, such as to fulfil the agreement between CEC and our client (where you are an employee), respond to your enquiries or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our agreements, or until you object to our use of your personal data (if our use of your personal data is based on a legitimate interest) or you withdraw your consent (if our use of your personal data is based on your consent).

For clarity, in circumstances where we are required by law to retain your personal data longer, such as for tax, legal, accounting or other purposes, or where we need your personal data to assert or defend against legal claims, we will retain such information until the end of the relevant retention period or the resolution of such claims.

Third Party Processors

Our carefully selected partners and service providers may process personal information about you on our behalf as described below:

Digital Marketing Service Providers

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:

(i)Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in to place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.