Privacy notice

Smart Energy Markets Ltd is registered in England and Wales, company number 17509967. Registered office: Suite 6, Brecon House, William Brown Close, Llantarnam Industrial Park, Cwmbran NP44 3AB. In this notice “we” and “us” mean Smart Energy Markets Ltd, which is the controller responsible for the personal data you give us through this website.

We share staff and an office with our sister company, Smart Energy Group. The people who read and reply to your enquiry may be employed by Smart Energy Group and work for us. When they do, they use your details only to handle your enquiry for us, and only as we instruct.

The enquiry form asks different questions depending on what you’re interested in. Depending on your answers, we collect:

• what you’re looking for: a Solar PPA or an SSOA, buying renewable electricity, selling what you generate, or something else;
• the site postcode;
• for solar: the building type, whether you own or lease it and how long is left on the lease, the roof area, the site’s annual electricity spend, how many sites you have, how long the business has been trading and whether most of its electricity is used in daytime hours;
• for buying: your sector, how many sites, when your current electricity contract ends, your annual consumption and whether the site has a half-hourly meter;
• for selling: the generator’s technology, capacity and status, its current export arrangements and whether you own it;
• any message you write to us;
• your name, company or organisation, email address and, if you give it, phone number;
• how you’d like us to reply, and whether you’d like occasional updates;
• a record of the notice the form showed you about how your details are used, kept with your enquiry.

The short message form on our contact page collects your name, company, email address, phone number if you give it, your message and how you’d like us to reply. Please don’t include sensitive personal information in a message. Our website host may also keep standard server logs, such as IP addresses and the pages requested, to run and protect the site.

The lawful bases below are our proposal, for legal review before launch.

• To reply to your enquiry and look at whether a Solar PPA, an SSOA, buying or selling could suit your site. Lawful basis: steps taken at your request before entering into a contract (UK GDPR Article 6(1)(b)) (proposed, for legal review).
• If your site fits, to share your enquiry with our funding company (SPV) for a Solar PPA or an SSOA, or with our licensed supplier partner for buying or selling, so it can assess the site. Lawful basis: our legitimate interests in arranging the service you asked about (Article 6(1)(f)) (proposed, for legal review).
• To send occasional updates about solar and renewable electricity, only if you ask for them. Lawful basis: your consent (Article 6(1)(a)), which you can withdraw at any time (proposed, for legal review).
• To run and protect the website, including the server logs above. Lawful basis: our legitimate interests in keeping the site working and secure (Article 6(1)(f)) (proposed, for legal review).

We don’t sell your personal data.

Only as far as we need to in order to respond to your enquiry. By category:

• our sister company, Smart Energy Group, which provides the staff who handle enquiries for us. Its staff use your details only to handle your enquiry on our behalf, as our processor, under a written agreement with us (proposed, for legal review);
• our funding company (SPV), which funds and owns the systems installed under a Solar PPA or an SSOA, if you’re interested in one and your site may fit, so it can assess the site;
• our licensed supplier partner, if you’re interested in buying or selling electricity through the private energy market;
• service providers that store your enquiry and send our replies, such as our customer relationship management (CRM) and email providers;
• our website host (currently Netlify, Inc., based in the United States).

Our website host is a US company, so data it processes may be transferred outside the UK. The safeguard we propose to rely on for that transfer is the UK International Data Transfer Addendum to the EU standard contractual clauses, or the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”) if the host is certified under it (proposed, for legal review). If any other recipient stores data outside the UK, we’ll say so here and name the safeguard.

If you go ahead with a Solar PPA or an SSOA, our funding company (SPV) will run credit checks on your business, which may involve credit reference agencies. It will tell you how it uses that information before it runs them.

We keep enquiry details for two years after our last contact with you (proposed, for legal review), so we can follow up your enquiry and keep a record of what was said. If your enquiry leads to an agreement, we keep what we need for as long as the agreement and the law require.

If you ask for updates, we keep your name and email address for that purpose until you unsubscribe.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct it if it’s wrong or incomplete;
• ask us to delete it;
• ask us to restrict how we use it, or object to our using it, including where we rely on our legitimate interests;
• ask for it in a portable format, where that applies;
• withdraw your consent at any time, where we rely on it. This doesn’t affect anything we did before you withdrew it.

Some rights apply only in certain circumstances. We’ll respond within the time the law allows.

By post: write to Smart Energy Markets Ltd at our registered office, Suite 6, Brecon House, William Brown Close, Llantarnam Industrial Park, Cwmbran NP44 3AB, and mark the envelope “Data protection”.

Online: send a message through our contact page and say it’s about data protection.

If you’re unhappy with how we’ve handled your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk ↗ (opens in a new tab).

We’ll update this page, and the date at the top, if what we collect or why we use it changes, for example if we add a measurement tool. Our cookies page explains what the site stores on your device.