Privacy notice.

I am the data controller for personal data collected through this website. I trade as Business Energy Agency and I am the sole operator.

• Controller: Business Energy Agency
• Email: hello@businessenergyagency.co.uk
• Location: United Kingdom

I don’t publish a postal address for this business. If you need to correspond by post for a specific legal reason, email me and I’ll arrange it.

Contact and audit request forms. When you fill in a form on this site I collect your website URL, your email address and, where you choose to give them, a phone number and a message describing what you need. I use this to reply to your enquiry and to prepare the audit or quote you asked for. The lawful basis is legitimate interests — responding to a business enquiry you initiated — or, where you’ve subscribed to anything beyond a one-off reply, your consent.

Server logs. The hosting platform that runs this site records standard technical logs: IP address, browser type, the page requested and a timestamp. This is collected automatically for every visitor, for security, troubleshooting and abuse prevention. The lawful basis is legitimate interests in keeping the site secure and working.

Analytics. Where analytics is enabled on this site, it uses Google Analytics 4 to understand which pages get read and how visitors arrive at them. This only runs where you have given consent through the site’s cookie controls, and the lawful basis is that consent. If you decline or haven’t consented, analytics does not run.

I do not collect financial information, special category data, or any data from children through this site, and this site is not directed at children.

Enquiry and form data is kept for as long as needed to respond to you and, if we go on to work together, for the duration of that relationship plus six years to meet UK tax and contract record-keeping obligations. If your enquiry doesn’t turn into work, I delete it after 24 months of inactivity.

Server logs are retained by the hosting provider on a rolling basis, typically for a small number of weeks, before being overwritten. Analytics data, where it runs, is retained inside Google Analytics on Google’s standard retention settings, and I don’t extend that retention.

I use a small number of processors to run this website and my business. I don’t sell personal data, and I don’t share it with anyone for their own marketing.

• Lovable Cloud — provides hosting and the database that stores form submissions for this site.
• Google Analytics 4 — used only where analytics is enabled and you’ve given consent, to measure site usage.

Each processor is contractually required to protect data in line with UK GDPR and to use it only for the purpose I’ve instructed.

Some processors, including Google, may process data on servers outside the UK. Where that happens, it relies on a recognised transfer mechanism, such as the UK International Data Transfer Addendum or an equivalent adequacy arrangement, so that your data keeps an equivalent level of protection wherever it’s processed.

Under UK GDPR you have the right to:

• Ask what personal data I hold about you and get a copy of it.
• Ask me to correct data that’s inaccurate or incomplete.
• Ask me to delete data I no longer have a lawful reason to keep.
• Ask me to restrict how your data is used while a query is resolved.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, where processing depends on consent.
• Ask for data you’ve given me in a portable format, where technically feasible.

To exercise any of these, email hello@businessenergyagency.co.uk. I’ll respond within one calendar month.

If you think I’ve mishandled your data, you have the right to complain to the UK’s independent regulator, the Information Commissioner’s Office, at ico.org.uk. I’d appreciate the chance to put things right first, but the choice is yours.