Privacy Policy

THIS PRIVACY POLICY ("THE POLICY") APPLIES TO ANY PERSONAL INFORMATION YOU PROVIDE TO US ON THIS WEBSITE. PLEASE READ THIS POLICY CAREFULLY AS USING THIS WEBSITE INDICATES THAT YOU ACCEPT THE CONDITIONS SET OUT BELOW

 

Key Terms:

In this Privacy Policy:

  • "we", "us", "our" or "TotalEnergies Gas & Power" means TotalEnergies Gas & Power Limited, a company registered in England and Wales (company no: 2172239); 
  • "Group" means collectively TotalEnergies Gas & Power and any company or entity within our corporate group;
  • "you" or "your" means the person who accesses, visits and uses our Website (as defined below); 
  • our "Customer" means any business or company that we supply energy products and servicesto;
  • our "Broker" means the third party intermediary brokers that we work with and may introduce Customers to us;
  • our "Supplier" means any organisation that supplies goods or services to us; 
  • the "Website" means the website at Business Energy Supplier | TotalEnergies Gas & Power or any other website we may operate from time to time; and 
  • "personal data" means the information that is about you and other individuals you may tell us about and which identifies you or those individuals.

 

Privacy Policy:

This Privacy Policy sets out the basis on which we collect and use personal data about you through your use of the Website, where our Customers purchase energy products and services, where our Brokers provide services to us or where our Suppliers provide goods and services to us.  This Privacy Policy supplements our other notices and privacy policies and is not intended to override them. 

This Privacy Policy describes:

  • who is responsible for the personal data that we collect about you;
  • the personal data we collect about you; 
  • how we will use it;
  • who we may disclose it to; and
  • your rights and choices in relation to your personal data.

This is to make sure you have a full picture of how we collect and use your personal data.

You have the right to object to our use of your personal data in certain circumstances. A summary of your right to object (along with other rights under data protection law) and the details of who to contact if you want to exercise them can be found within the 'Queries' section below.

This Website is not intended for children and we do not knowingly collect personal data relating to children.

 

Who is responsible for the personal data that we collect? 

We are the data controller for the purpose of data protection law, in respect of the personal data we collect about you through your use of the Website. This is because we determine the purpose for which your personal data is used and how we use your personal data.

 

What personal data do we hold about you?

We collect and use personal data about you when you use our Website.  We also collect and use personal data about our Suppliers who provide us with goods and services.  The personal data we hold includes:

  • Personal data that you provide to us / we collect from you:

 

Type of Personal Data
Examples 
General
Contact detailsName, telephone number and email address. 
Information provided when you complete our 'Request a Quote' form

Where you have completed our 'Request a Quote' form, you may also share details relating your relevant business/company, including:

  • the preferred start date for us to supply energy to your business/company; 
  • details of how you heard about us; and 
  • confirmation of whether your business/company is interested in Eco Renewable Energy; and 
  • your contact preferences for us to contact you with a quote.
Account detailsLogin credentials used to access your business/company Customer account with us, including email address and password.   
Communications between us

These include:

  • communications with our Customer contacts in relation to the supply of energy products and services to our Customers (including with contacts of prospective Customers);  
  • communications with our Brokers in relation to introductions to and communications with potential and existing Customers; and 
  • communications with our Supplier contacts in relation to the goods and/or services our Supplier provide to us. 

We may record our telephone calls with you for quality and compliance purposes. 

Information relating to our business Customers, Brokers and Suppliers
Nature of our Customer businessesThis will include confirmation of the type of Customer business and relevant requirements.  For example, if we are supplying energy to a care home, this will be relevant as we need to understand that there are vulnerable individuals residing at the relevant Customer premises (although note that we cannot identify individuals from this information). 
Consumption data 

This will include:

  • volume of energy used and when the energy was used;
  • details of the Customer's site/premises/address at which the energy was used; and 
  • the Customer's consumption profile based on the Customer's industry type and location area. 
Financial information Billing address and bank information relating to our Customers, Brokers and Suppliers. 
Transaction information

Details about payments and refunds:

  • from and to our Customers relating to the supply of energy products and services by us;
  • from and to our Brokers relating to services provided to us; and 
  • to and from our Suppliers relating to goods and services supplied to us. 
  
Marketing
Marketing preferences (including details of subscriptions to any newsletters)Details of any marketing preferences that you express including any opt outs you provide. 
Other
SurveysYour views and opinions about the services we provide to our Customers.
Online activity information (to the extent that it constitutes personal data).

  • Technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.

     

  • Information about your visit to the Website, including the full Uniform Resource Locators (URL) clickstream to, through and from the Websites (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

 

This information will be provided:

  1. when you visit our Website, including when you interact with our chatbot, complete our Website forms or login to your Customer account; 
  2. in the course of communications between you and us (including by phone, email or otherwise);
  3. via our social media pages, other social media content, tools and applications; and 
  4. when you give us feedback or contact us.

 

  • Personal data that we receive/collect from other sources:

When we carry out a limited credit check on our Customers (including prospective Customers), we may receive personal data from the provider of these checks such as the names of directors, their addresses, details of previous roles they have held and, where applicable, details confirming that the directors have previously been disqualified and/or declared bankrupt. No credit checks will be undertaken on you individually.

 

How do we use the personal data we collect about you? 

We use your personal data for a variety of different purposes in connection with your use of the Website.  The main purposes for which we use your personal data are set out below.  Under data protection law, we can only use your personal data if we have a legal basis to do so. Examples of where we have a legal basis to process your personal data, includes when: 

  • we have your consent;
  • it is necessary to enter into or perform a contract we have with you (or to take steps at your request prior to entering into that contract);
  • it is necessary to comply with a legal obligation;
  • it is necessary in order to protect your vital interests; or
  • it is in our legitimate interests to process your personal data.

We have set out the main purposes for using your personal data in the table below together with our legal bases for doing so.  Where we rely on our legitimate interests, we have set out those interests in the table below. 

Purpose
Legal Basis
To communicate with you and other individuals.We rely on our legitimate interests. We require your personal data in order to communicate with you on behalf of our Customers (including prospective Customers), Brokers and Suppliers in relation to the supply of services in accordance with the terms of the contract.
To analyse the services we provide to our Customers, improve the quality/performance of our services and develop our products within the UK energy market.We will rely upon our legitimate interests. It is in our legitimate interest to carry out this analysis to ensure our services and products are of high quality and that we identify areas of improvement.
To manage any service or quality related issues, complaints, feedback and queries in relation to the supply of services in accordance with the terms of the supply contract. We rely on our legitimate interests. We require your personal data in order to ensure the services we supply are fit for purpose.
To carry out credit reference checks on our Customers and prospective Customers. We rely on legitimate interests.  We undertake these checks to verify and assess our Customers' financial standing to help ensure we receive payment for the provision of energy products and services.  We may undertake these checks on an ongoing basis from time to time, including, for example, before we renew a Customer's contract. 
To analyse our Customer's use of our energy products and services to enable us to detect and prevent theft or fraudulent activity. 

We rely on our legitimate interests. We require your personal data in order to detect and prevent theft or fraudulent activity,

We may also process your personal data for these purposes where doing so is necessary for compliance with a legal obligation to which we are subject.

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.We rely on our legitimate interest to help us to understand how individuals and Customers use our Website.   
To send direct marketing communications about our supply of energy products and services. This includes sending our newsletters to Customers and contracts.  These newsletters typically contains market updates, industry news and regulatory information.   

Typically we will rely upon our legitimate interests. It is in our legitimate interest to contact our Customers and prospective Customer contacts about the services that we offer.

However, in some circumstances we are required by law to obtain your consent in order to send direct marketing communications to you.

To communicate with you and other individuals in relation to (i) goods and services that we have been provided with by our Suppliers; and/or (ii) intermediary services that we have been provided with by our Brokers. 

We rely on our legitimate interests. We require your personal data in order to communicate with you or the Supplier/Broker in relation to the supply of goods or services in accordance with the terms of the contract.

If you are providing services to us as an individual, we require this information in order to enter into or perform a contract with you when receiving goods or services from you.

To carry out our obligations arising from any contracts entered into between you and us for the provision of (i) goods and services to us by our Suppliers; and/or (ii) intermediary services to us by our Brokers.

Typically, where we have been communicating with you as an employee or representative of the Supplier/Broker, we rely upon our legitimate interests. It is in our legitimate interest to comply with the terms of a contract we have in place with our Supplier/Broker and to carry out our business functions.

If you are providing services to us as an individual, we require this information in order to enter into or perform a contract with you when receiving goods or services from you.

For energy forecasting and procurement purposes. We rely on our legitimate interests. We have a legitimate interest in forecasting and procuring energy to ensure the supply of energy products and services to our Customers. 
To comply with any legal or regulatory obligations (including in connection with any court order).Necessary for compliance with a legal obligation to which we are subject.
To administer and protect our business and the Website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).We rely on our legitimate interests. We have a legitimate interest in the running of our business, provision of administration and IT services, network security and to prevent fraud.

 

We may be required to obtain your personal data to comply with our legal requirements, to enable us to fulfil the terms of our contract with you or your employer (as applicable) or in preparation of us entering into a contract with you or your employer (as applicable).  If you do not provide the relevant personal data to us, we may not be able to perform our obligations pursuant to your contract with us.

 

Who may we share your personal data with? 

We may share your personal data with:

  • our business partners, service providers and Suppliers; 
  • other organisations within our Group; 
  • our meter asset provider, meter operator, meter reader (including our provider of automated reading services or smart or advanced metering services), consumption data collector and aggregator for the purpose of obtaining our Customers' consumption data (including interval data such as half-hourly readings where applicable) and providing our energy products and services to you; 
  • Exexon, the organisation that oversees the strategic management of the Balancing and Settlement Code.  This may include sharing our Customers' consumption data (including interval data such as half-hourly readings where applicable); 
  • third-party agents for the purposes of preventing against and detecting the theft of energy;
  • the police and other regulatory bodies where there is a relevant police or regulatory investigation, including allegations relating energy theft and/or fraud;
  • third parties if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or instructions of a regulatory body (including in connection with a court order);
  • other third parties to enforce or apply the terms of any agreement we have with our Customers, Brokers and/or Suppliers that concerns you or to protect our rights, property or safety of our Customers, employees or other third parties; and  
  • our credit risk insurers to enable us to determine whether to enter into, or continue with, our contracts with our Customers;
  • our professional advisors (including accountants, lawyers and auditors) that assist us in carrying out our business activities.      

We will also disclose your personal data to other third parties, for example:

  • in the event that we sell or buy any business or assets, we will disclose your personal data to the prospective seller or buyer of such business or assets; 
  • if we or substantially all of our assets are acquired by a third party, personal data held by us will be one of the transferred assets; and
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation.

 

For a full list of the third parties with whom your particular personal data may be shared, please contact us using the details within the 'Queries' section below. 

 

Where will we transfer your personal data? 

Due to the international nature of our business, we may transfer your personal data outside of the UK. If we need to share your personal data with any recipient outside the UK, including with any of those third parties listed above, we will implement appropriate safeguards to ensure such personal data will be protected as required by applicable data protection law.

 

How long will we keep your personal data? 

We will retain your personal data for no longer than is necessary for the purposes for which the personal data are processed.  The length of time we hold on to your personal data will vary according to what that information is and the reason for which it is being processed.   

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

For further information about how long we keep your personal data, please contact us using the details in the 'Queries' section below.

 

Data security

We have put in place appropriate security measures to guard against your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. For further information about these measures, please contact us using the details in the 'Queries' section below.

We have also put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

 

Your rights

You have certain rights with respect to your personal data.  The rights will only apply in certain circumstances and are subject to certain exemptions.  Please see the table below for a summary of your rights. Details of who to contact if you wish to exercise any of the rights set out below can be found in the 'Queries' section below. 

Summary of your rights
Right of access to your personal data
You have the right to receive a copy of your personal data that we hold about you and information about how we use it, subject to certain exemptions. 
Right to rectify your personal data
You have the right to ask us to correct your personal data that we hold where it is incorrect or incomplete.
Right to erasure of your personal data

You have the right to ask that your personal data be deleted in certain circumstances.  For example:

  • where your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise used; 
  • if you withdraw your consent and there is no other legal ground for which we rely on for the continued use of your personal data; 
  • if you object to the use of your personal data (as set out below); 
  • if we have used your personal data unlawfully; or
  • if your personal data needs to be erased to comply with a legal obligation.
Right to restrict the use of your personal data

You have the right to suspend our use of your personal data in certain circumstances.  For example:

  • where you think your personal data is inaccurate but only for so long as is required for us to verify the accuracy of your personal data; 
  • the use of your personal data is unlawful and you oppose the erasure of your personal data and request that it is suspended instead; 
  • we no longer need your personal data, but your personal data is required by you for the establishment, exercise or defence of legal claims; or 
  • you have objected to the use of your personal data and we are verifying whether our grounds for the use of your personal data override your objection.
Right to data portability

You have the right to obtain your personal data in a structured, commonly used and machine-readable format and for it to be transferred to another organisation, where it is technically feasible. 

The right only applies:

  • to personal data you provided to us;
  • where we rely on the following legal bases:
  • consent; or 
  • for the performance of a contract; and 
  • when the use of your personal data is carried out by automated (i.e. electronic) means.
Right to object to the use of your personal data

You have the right to object to the use of your personal data in certain circumstances and subject to certain exemptions. For example:  

  • where you have grounds relating to your particular situation and we use your personal data for our legitimate interests (or those of a third party); and

     

  • if you object to the use of your personal data for direct marketing purposes.
Right to withdraw consent
You have the right to withdraw your consent at any time where we rely on consent to use your personal data.
Right to complain to the relevant data protection authority
If you think that we have processed your personal data in a manner that is not in accordance with data protection law, you can make a complaint to the relevant data protection regulator.  In the UK this is the Information Commissioner's Office (ICO) and they can be contacted on 0303 123 1113 or please see www.ico.org.uk. If you live or work in an EEA member state, you may complain to the regulator in that state.

 

 

Third Party Links

Our Website may include links to third party websites, plug-ins and applications.  Clicking on those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control these third party websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

 

Cookies

When you visit our Website, you can choose to 'accept' or 'refuse' all cookies. You can also click the 'Manage my cookies' button to manage your cookie preference. If you disable or refuse cookies, some parts of our Website may become inaccessible or not function properly. For more information about the cookies we use, please see our Cookie Policy (also available through a link at the footer of our Website). 

 

Changes to our Privacy Policy

We keep our privacy policy under regular review.  Any changes we make to this Privacy Policy in the future will be posted on this page and, where appropriate, we will give you reasonable notice of any changes.

 

Queries

Any queries regarding personal data we hold relating to you and additionally, any requests for copies or rectification of such data should be sent by:

  • Email: [email protected]
  • Post: Legal and Compliance, TotalEnergies Gas & Power Limited, Beech Gate, Kingswood Fields, Millfield Lane, Lower Kingswood, Tadworth, Surrey KT20 6RP

This policy was last updated in June 2026