At Ummah Energy we take the security of your data very seriously. We have created this policy to outline how we collect, handle, store and process your data in accordance with General Data Protection Regulation and the Data Protection Act 2018. We have a dedicated Data Protection Officer (DPO) who ensures anyone who handles your data at Ummah Energy is sufficiently trained to ensure your data is kept safe and handled correctly. Ummah Energy Ltd are the Data Controller.
We only use your data for the purposes laid out in this policy and our terms & conditions.

Data we collect

We collect and store your personal data for the purpose of providing quotations for energy comparisons, conducting energy efficiency assessments and sourcing renewable energy solutions. We may use your data to offer your new products and services we have if you have consented for us to do so.

For the purpose of providing the above-mentioned services we may require;

• Your Company Details – Ltd Number, Address, Credit Information and Accounts
• Business type
• Your full name
• Your Job title
• Contact telephone number
• Email address
• Meter Details and MPAN or MPRN number
• Consumption figures
• Date of Birth and Home Address (Sole Traders)
• Direct Debit Details, Card Details
• Property Floor Plan and Dimension
• Lease details or copy of lease
• Proof of address
• Photo Identification
• Marketing preferences
• Organisations Religious affiliation (only when dealing with places of worship energy reviews)

If you speak with us on the phone all of our calls are recorded for training and verification purposes.

How we collect your data

We will collect your data;

• Verbally – By speaking to you over the phone
• Via face-to-face meetings or virtual meetings on Microsoft Teams
• Email – by you emailing your requirements and details to us
• Website – By completing our online form
• Third Parties – We purchase renewal energy data records from a data aggregator for the purpose of offering our services. Names of such aggregators can be provided upon request.
• Publicly available information

How we use your data

We use your data;

• For contacting you to offer our services
• For comparing energy tariffs and contracts for your business we are required to supply the necessary details to different energy suppliers or aggregators that we partner with for the purpose of providing you with a competitive quotation.
• For submitting energy contracts to suppliers upon the acceptance of an energy quotation
• Providing details to solar installation specialists that we partner with for renewable energy solutions for your business
• For carrying out energy efficiency assessments, bill validations, VAT and CCL checks
• For Carrying out check with Credit Reference Agencies to see your eligibility for services
• For servicing and maintaining your account
• For raising, investigating and handling any complaints

security measure to keep our customers data safe.

How We Process Your DataTo provide services from our partners we need to share your information with them to provide you with accurate pricing. Joint Data Controllers we partner with may include any GB Energy Supplier and Powwr as an aggregator. All the Data Controllers we partner with all have similar Policies in place and to the best of our knowledge are fully GDPR and DPA18 compliant.

How we store your data
Your data is stored securely on our network. We try to minimise the amount of customer information that is kept in paper format and where possible we upload these documents onto our secure system and shred the hard copies. We follow robust cyber security measure to keep our customers data safe.
We will always do our best to keep your information accurate and up-to-date. You have the right to request that delete your data. Where possible we will comply. However, there are some circumstances where we must hold certain data types e.g invoices and contracts for VAT purposes for a minimum of 6 years.

Your rights
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

• Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
• Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here
• Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
• Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
• Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
• Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:           
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Abdal-Karim
Data Protection Officer
DPO@ummahenergy.co.uk
0115 865 8444

Change to our privacy notice
If we make any changes to our notice in the future, we’ll update our website and, where appropriate, notify you in writing.