Centrica Business Solutions is a part of Centrica plc’s Distributed Energy and Power business (which we call “DE&P”), the data controller is Centrica Business Solutions UK Limited.
This privacy notice explains your statutory rights and how we collect and use your personal data. It describes the processing activities that are carried out by DE&P, the purposes for which these activities are performed and the legal bases that DE&P relies upon for these processing activities.
This notice applies to personal data we hold about individuals (such as company directors, or contacts on business accounts), including sole traders and partners. It does not apply to information which we hold about companies and other legal organisations
We may update this privacy notice from time to time to ensure it is always up to date and accurate. Any changes we may make to our privacy notice will be posted on this page, and we will communicate any significant changes to you.
You can contact Centrica’s data protection officer by writing to The Data Protection Officer, Centrica Plc, Millstream, Maidenhead Road, Windsor, Berkshire, SL4 5GD.
You can also contact our data protection officer at firstname.lastname@example.org.
We collect the following types of personal data from all customers:
You are not required to provide to us any of the personal data described above, however, if you do not do so, you may not be able to purchase our products and services or the functionality of our products may be reduced.
Where we process your personal data because we have a legitimate interest to
We process these items of your personal data because we have a legitimate interest to do so. We process the following categories of personal data, including:
Assess which of our products and services that may be of interest to you, e.g. To understand regional demographics and take up, tailor offers and recommendations to customers’ needs and reward loyal customers. This includes matching your data with data we obtain from other companies.
- Your contact details and the contact details of people associated with your business account
Direct marketing. If you have not specifically consented to receive direct marketing, we will only send you direct marketing materials where we are allowed to because of law. However we will never send you direct marketing where you have opted out of receiving direct marketing communications
Management information reporting
Protection of our staff
Maintain accuracy and relevance of your data
For the establishment, exercise or defence of legal claims
- Your contact details and the contact details of people associated with your business account- Exercising your rights
Assist law enforcement agencies
Where we process your personal data so you can’t be identified any more
We may anonymise and aggregate any of the personal data we hold (so that it does not identify you). We may use anonymised and aggregated information for purposes that include testing our IT systems, research, data analysis, improving our site, apps and developing new products and services.
We will collect personal data from a number of sources. These include:
We share personal data with the following parties:
Companies in the same group of companies as us
Our parent company, Centrica Plc
Any party if you have provided your prior consent
Any competent law enforcement body, regulatory, government agency, court or other third party
Companies that help us run our business, support our IT infrastructure and to further understand our customers
- Salesforce -Auditors, advisors, legal representatives and similar agents
Potential buyers of our business
Centrica Business Solutions is part of a global organisation and in common with other organisations, we use third parties located in other countries to help us run our business. As a result, personal data may be transferred outside the countries where we and our customers are located. This includes countries outside the European Economic Area ("EEA") and to countries that do not have laws that provide specific protection for personal data. We have taken steps to ensure all personal data is provided with adequate protection and that all transfers of personal data outside the EEA are done lawfully. Where we transfer personal data outside of the EEA to a country not determined by the European Commission as providing an adequate level of protection for personal data, the transfers will be under an agreement which covers the requirements for the transfer of personal data outside the EEA, such as the European Commission approved standard contractual clauses.
We will keep your personal data for as long as necessary in order to achieve the processing purposes.
You may have the following rights in relation to your personal data:
You only have the benefits of some of the above rights in limited circumstances, which depend on the legal reason why we collected your personal data.
To exercise any of the above rights, or if you have any questions relating to your rights, please contact us using the details below.
If you have any privacy-related questions or comments, please contact Centrica’s data protection officer by writing to The Data Protection Officer, Centrica Plc, Millstream, Maidenhead Road, Windsor, Berkshire, SL4 5GD.
If you are unhappy with the way we are using your personal data you can also complain to the UK Information Commissioner’s Office or your local data protection regulator. We are here to help and encourage you to contact us to resolve your complaint first.
Version 1.1. March 2020