ENGIE Power Limited (“ENGIE UK”, “we”, “our”) describes how and why we collect, store, use, and/or share (‘process’) your personal data and information when you use our services or visit our website.
We keep this Notice under review in order to reflect any updates or changes in operations and how we process your personal data.
1.What personal data we collect about you
We collect, use, store and transfer different kinds of personal data about you.
When we provide you with our Products and Services, there are several categories of personal data which may be collected, including:
- your name and contact details including your contact number and email address;
- the organisation or business you may represent;
- any additional personal data that has been provided to us throughout the duration of your engagement with us.
When you use our Website, or get in touch with us, there are several categories of personal data which may be collected, including:
- your name and contact details including your contact number and email address;
- the organisation or business you may represent;
- any additional information you may have provided to us;
- cookies and usage data – for more information, please see below (section 11).
- How we process your personal data
We need to collect and use your personal data to:
- provide you with our products and services;
- comply with our legal and contractual obligations;
- respond to your enquiries and requests for assistance;
- allow us to resolve any disputes and complaints;
- comply with our legal, contractual and industry obligations and/or processes;
- for the detection and prevention of fraud.
When using our Website, we need to collect and use your personal data to:
- allow you to make full use of our Website features;
- create, operate and maintain your account;
- respond to your queries and requests for assistance;
- manage and improve our Services and aid in the detection, prevention and resolution of any technical issues;
- track your journey across our website to help us improve our services;
- potentially pass your data onto other parts of the ENGIE Group to respond to queries;
- comply with our legal, contractual and industry obligations and/or processes.
3.Lawful basis for processing of personal data
In accordance with the Applicable Data Protection Legislation in the United Kingdom, we may rely on more than one lawful basis for processing of your personal data.
- the lawful basis for processing your personal data is contract or commercial legitimate interest where you or your employer has a contract with us;
- the lawful basis for processing of your personal data is compliance with legal obligation (where relevant) or consent in other instances.
- How we will collect your personal data
- Personal data we collect directly from you: when you use our website or platforms; throughout the provision of our products, services and customer support as well as exchanging communication and correspondence with you. This data is also collected when you register to receive marketing communications or participate in our events.
- Personal data we collect automatically: when you visit our website and platforms. This data is also collected when you leave a comment or complete our website contact form.
- Personal data we collect from other sources: we may obtain your personal data from a relevant third party, such as an outgoing party at the premises that you and your business/organisation has moved into or a broker for the purpose of the provision of products and services.
- Recipients of the data
Only authorised recipients receive and have access to personal data, in compliance with current regulations and the Applicable Data Protection Legislation. These will be:
- our employees involved in the provision of our Products and Services;
- our legal representatives or other concerned parties in circumstances where we reasonably believe that disclosing your personal data is necessary to help identify, contact or bring legal action against anyone damaging, injuring, or interfering with our rights or property, users or anyone else who could be harmed by such activities;
- our sub-processors and
- where we are otherwise authorised or required by law, regulation or industry process to do so.
- Data retention time
We will only process personal data for as long as is necessary to meet our contractual or legal obligations, or where there is a legitimate business reason for doing so.
- Storage and transfer of data
The majority of our personal data is stored and processed in the UK. We may however need to process or transfer personal data in the EEA or worldwide under an adequacy decision ,binding corporate rules or other appropriate safeguards, for example, in situations where another part of the ENGIE Group would be better suited to responding to your query.
ENGIE UK verifies that its sub-processors use appropriate technical and organisational measures necessary to ensure that your personal data is protected.
- Automated Decision Making
We undertake very limited automated decision making.
If you are an energy supply customer and are in contract with us or owe us a debt, in accordance with the terms of our contract with you, we are entitled to object to another supplier registering your energy supply. We use an automated system to check your details and to object if necessary or allow the other supplier to register your supply. We do use manual decisions in some instances, and you can ask us to undertake a manual decision by contacting our Customer Services Team on support.customerservice.uk@engie.com
- Your rights
If you reside in United Kingdom, you have extensive statutory rights regarding the manner in which your personal data is processed. These are:
- Right to be Informed – you must be told how your data is used (usually through a Privacy Notice).
- Right of Access – you can request a copy of your personal data.
- Right to Rectification – you can ask for inaccurate data to be corrected.
- Right to Erasure – you can request deletion of your data in certain cases.
- Right to Restrict Processing – you can limit how your data is used.
- Right to Data Portability – you can request your data in a portable format.
- Right to Object – you can object to processing, especially for direct marketing.
- Rights related to Automated Decision-Making – you can challenge decisions made solely by automated means.
If you have agreed, we and/or selected third parties may use your personal data to provide you with details about offers, promotions, products or services which we believe may be of interest to you. This may include other members of the ENGIE Group or UK/EEA based companies offering related services. If you change your mind about this at any time, please let us know by getting in touch with us by emailing marketing.es.uk@engie.com
- Contacting Us
For queries related to personal data, please use the following details:
Attention: Data Protection Officer
Email: dataprivacy.uk@engie.com
Address:
ENGIE Power Limited
No. 1 Leeds
26 Whitehall Road
Leeds
LS12 1BE
UK
If you are not satisfied with the response which you receive, you can contact the Information Commissioner’s Office (“the ICO”) , who are the Data Protection Regulatory Authority in the United Kingdom. You can do this by:
Visiting their website https://www.ico.org.uk
Phone: 0303 123 1113
Writing to: Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5A
11. Cookies
When visiting the Website, a cookie may be installed on your browser.
Cookies are small text files that are stored on your machine primarily to ensure that the Website can manage our users’ session correctly (“necessary cookies”). You can also allow us to place “statistical cookies” on your browser. These are cookies which improve your user experience through services such as autocomplete functions or provide Website analytics. We may also request your permission to install marketing cookies.
You can approve the statistical or marketing cookies by pressing the ‘Accept’ button. If you’d prefer to use our website without accepting these cookies, please note that it may impact your user experience and limit your access to some of our offers. You can disable these cookies through your browser settings.
Cookies are kept for a maximum period of 12 months and then deleted.
- Analytics
The Website uses Matomo Analytics, a web analytics service provided by Matomo (‘Matomo’). Matomo Analytics uses cookies (text files placed on your computer) to help the website operators analyse how users use the site. The information generated by the cookie about your use of the Website (including your IP address) will be transmitted to and stored by Matomo on servers in the EU. Matomo will use this information for the purpose of evaluating your use of the Website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Matomo may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Matomo’s behalf. Matomo will not associate your IP address with any other data held by Matomo. By using the Website, you consent to the processing of data about you by Matomo in the manner and for the purposes set out above.
The necessary cookies used within this context are:
AWSALB
Provided by Formstack, this registers which server cluster is serving the visitor. This is used in context with load balancing, in order to optimise user experience
AWSALBCORS
Provided by Formstack, this registers which server cluster is serving the visitor. This is used in context with load balancing, in order to optimise user experience
CookieConsent
Provided by Cookiebot, this stores the user’s cookie consent state for the current domain
PHPSESSID
Provided by ENGIE, this preserves user session state across page requests
Rc::a
Provided by Google, this cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website
Rc::b
Provided by Google, this cookie is used to distinguish between humans and bots
Rc::c
Provided by Google, this cookie is used to distinguish between humans and bots
- Updates
ENGIE UK may update this Privacy and Cookies Notice at any time. Consequently, you are invited to regularly consult the Privacy and Cookies Notice that is currently being applied.
- Version Control – 27/06/25