Energy & Carbon Management (E&CM) respects your privacy and is committed to the protection of your personal data. This privacy notice will inform you as to how we look after your personal data when you interact with us or visit our website www.ecm.co.uk and tell you about your privacy rights and how the law protects you.
Who we are
Energy & Carbon Management Limited (E&CM), Unit 29, Progress Business Park, Orders Ln, Kirkham, Preston PR4 2TZ (‘Company’) is the ‘data controller’ of this site and gathers and uses certain information about you. This information may also be used by our affiliated entities trading as ‘E&CM’ namely Inprova Energy, Energy Team (UK) Ltd and Energy Team (Midlands) Ltd (our ‘group companies’) and so, in this notice, references to ‘we’, ‘us’ or ‘our’ mean the Company and our group companies.
What personal data we collect about you
Depending upon your use of our website we may collect, use, store and transfer different kinds of personal data about you, including:-
- Contact and identity data including first and last name, email and postal address and telephone numbers.
- Technical data including internet protocol (IP) address browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Marketing and communications data including your preference to receive marketing from us or our third parties.
- Professional and company data including any information we may collect in the course of providing our services to you.
- A recording of your voice.
We collect this data from you through voluntary communications with you where you may give us your identity, contact and professional data by filling in forms or by corresponding with us by phone or otherwise. This includes personal data you provide when you submit an enquiry or request marketing to be sent to you.
How we use your personal data
We use your data to:-
- Improve and support the services we provide to you.
- Perform the contract we have entered or are entering into with you.
- Promote our services and personalise your experience with our website by sending you information and promotional material.
- Analyse the use of our website.
- Protect, investigate and deter against fraudulent, unauthorised, or illegal activities.
- Maintain our legitimate interests (or those of a third party).
- Comply with a legal or regulatory obligation.
If you are a client then the lawful basis for which we rely on to collect and process your data is typically the performance of our contractual obligations.
We do not rely on consent as a legal basis for processing your personal data other than in relation to sending non-clients direct B2B marketing communications. You have the right to withdraw consent to marketing at any time by contacting us at [email protected].
How we may share the information
We will share your personal data with the following recipients:-
- Employees and agents (or those of energy providers, our contractors, sub-contractors and intermediaries who are involved in introducing your business to us or in providing part of our services to you on our behalf) to administer any accounts, products and services provided to you.
- On the legal basis of legitimate interests to third parties, such as procurement services, where the additional services they provide may be of interest to you. This includes E&CM and its legal entities.
- Third party suppliers involved in website hosting, database management and website
- Professional advisors or lawyers in relation to credit and debt management.
- With your permission we may share information about you for publicity and marketing purposes online, in print and on social media.
- Our successor, to whom we may transfer our rights, assets and duties and to professional advisers advising us on such transfer.
We will only disclose information about you to third parties if we are legally obliged to do so or where we need to comply with our contractual duties to you.
We may also be required to share some personal information as required to comply with the law.
Transfer of personal data to other countries
Your personal data will be held on secure servers with all reasonable technological and operational measures in place to safeguard it from unauthorised access.
Where data is shared within the UK, or the European Union (EU), the third party will be required to comply with and safeguard the data under the terms of the Data Protection Act and appropriate EU regulations.
Your personal information will only be transferred to countries outside of the EU whose data protection laws have been assessed as adequate by the European Commission, or where adequate safeguards, such as the EU-US Privacy Shield, are in place.
How long we keep your data
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, to provide services to you and satisfy any legal obligations or reporting requirements.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.
Under certain circumstances, by law, you have the right to:-
- Request access to your personal information (commonly known as a ‘data subject access request’).
- Request correction of the personal data when incorrect, out of date or incomplete.
- Request erasure of your personal data.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal data.
In limited circumstances, where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
To exercise your rights please contact Teresa Dilley, Director of Operations in writing at [email protected].
If we receive notification that you wish to withdraw your consent we will no longer process your information for the purpose or purposes you originally agreed to unless we have another legitimate or lawful basis for doing so.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. We may refuse to comply with your request in such circumstances.
We hope that we can resolve any concern you raise about our use of your information. However, the General Data Protection Regulation (GDPR) gives you the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner Office (ICO).
Changes to this privacy notice
How to contact us
If you have any questions about this privacy notice or the information we hold about you please email Teresa Dilley, Director of Operations at [email protected].