Privacy policy
Last updated 1 April 2026. This policy explains how British Energy Compliance Ltd collects, uses, shares and retains personal data, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
British Energy Compliance Ltd is a company registered in England and Wales. Registered office: Compliance House, 20-22 Wenlock Road, London, N1 7GU. We are registered with the Information Commissioner's Office (ICO) and act as data controller for the personal data described in this policy.
What we collect
- Identity & contact data — name, business name, postal address, email, telephone.
- Utility data — supplier name, MPAN/MPRN/SPID, consumption history, tariff terms, copies of bills you send us.
- Communications — emails, call recordings (where notified), website enquiry form submissions.
- Technical data — anonymised analytics on website use (page views, referrer, device class). No cross-site tracking.
Why we collect it (lawful bases)
- Contract performance (UK GDPR Article 6(1)(b)) — to deliver the audit, procurement or compliance service you've engaged us for.
- Legitimate interests (Article 6(1)(f)) — to administer our business, prevent fraud and improve our services.
- Legal obligation (Article 6(1)(c)) — to comply with anti-money-laundering, financial reporting and Ofgem licence-condition obligations.
- Consent (Article 6(1)(a)) — where you opt in to marketing communications. You may withdraw consent at any time.
Who we share it with
We share personal data only with: (a) the licensed energy or water supplier you instruct us to obtain a quote from, where it is necessary to fulfil that instruction; (b) our retained solicitor panel where you have authorised us to escalate a compliance matter; (c) regulators, ombudsmen and courts where required by law. We never sell client data.
Retention
We retain client records for the period required to deliver the engagement plus six years thereafter for HMRC and limitation-period reasons. Marketing-list data is held until you unsubscribe or until two years of inactivity, whichever is earlier.
Your rights
Under UK GDPR you have the right to: access your personal data; have it corrected if inaccurate; have it erased in certain circumstances; restrict our use of it; data portability; object to processing based on legitimate interests; and complain to the ICO. To exercise any right, email compliance@britishenergycompliance.co.uk. We aim to respond within 30 days.
Cookies & analytics
See our cookie policy for details. Essential cookies keep the site working; optional analytics cookies are off by default and only set if you accept them in our cookie banner.
International transfers
Personal data is processed in the UK and the European Economic Area. We do not routinely transfer data outside this region. Where we do, we use Standard Contractual Clauses or another adequate transfer mechanism approved by the ICO.
Contact us
For any question about this policy or to exercise a data right, write to: Data Protection Officer, Compliance House, 20-22 Wenlock Road, London, N1 7GU, or email compliance@britishenergycompliance.co.uk. Our ICO registration number is published at the foot of this page on request.