Privacy Policy

---

HCP Energy Solutions Limited ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website, use our services, or otherwise interact with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The data controller responsible for your personal data is HCP Energy Limited, Registered in England & Wales. Company No. 17360989. You can contact our Data Protection Officer at info@hcpenergy.co.uk.

We may collect the following categories of personal data:

• Identity data: name, job title, and company name.
• Contact data: email address, telephone number, and postal address.
• Technical data: IP address, browser type, operating system, and usage data collected via cookies and similar technologies.
• Energy consumption data: meter references (MPAN/MPRN), consumption figures, and contract details provided in connection with our energy supply services.
• Communication data: records of correspondence and enquiries submitted through our website or email.

We use your personal data for the following purposes:

• To supply gas and electricity to your business premises and administer your account.
• To communicate with you regarding quotes, contracts, billing, and account management.
• To send you market updates and marketing communications where you have given consent or where we have a legitimate interest.
• To improve our website, services, and customer experience through analytics.
• To comply with legal obligations, regulatory requirements, and Ofgem licence conditions.

We process your personal data on the following legal bases under UK GDPR:

• Contractual necessity: where processing is necessary to perform a contract with you or to take steps at your request prior to entering a contract.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services and marketing to existing clients.
• Consent: where you have given explicit consent, for example when subscribing to our newsletter.
• Legal obligation: where processing is required to comply with a legal obligation.

Your personal data is stored securely on servers located within the United Kingdom and European Economic Area. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typically, client data related to energy contracts is retained for six years following the end of the contractual relationship. Website analytics data is retained for 26 months.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restrict processing: to request limitation of how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at info@hcpenergy.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses a small number of cookies to make essential features work. We measure site traffic with privacy-first, cookieless analytics, which set no cookies, store no personal data on your device, and do not track you across other websites. Because our analytics are cookieless, they require no consent banner.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Office 767

275 New North Road

Islington

N1 7AA

info@hcpenergy.co.uk