Privacy Policy

1. Introduction

This Privacy Policy explains how Energy Bubble Limited (“ENERGYbubble”, “we”, “us”, “our”) collects, uses, processes and protects personal data in accordance with the UK GDPR, Data Protection Act 2018 and PECR.

We operate as a B2B energy consultancy and intermediary between business energy consumers and energy suppliers.

2. Data Controller

Energy Bubble Limited
Foundry, 6 Brindley Place, Birmingham, B1 2JB
Email: hello@energybubble.co.uk

Managing Director & Data Protection Officer:
Aaron Dardi – aaron@energybubble.co.uk

ICO Registration: ZB956089

3. Personal Data We Collect

We may collect:

A. Contact Data

• Name
• Job title
• Company name
• Business email address
• Business phone number

B. Energy & Site Data

• Meter numbers (MPAN/MPRN)
• kVA capacity
• Half-hourly data
• Billing history
• Consumption data
• Contract information

C. Website Data

• IP address
• Device and browser data
• Analytics data via Google Analytics
• Meta Pixel engagement data

D. Call Data

• Call recordings (where applicable)
• Webinar attendance records

4. How We Collect Data

• Website enquiry forms
• Webinar registrations
• Customer portal uploads
• Letters of Authority
• Direct email correspondence
• B2B data providers (e.g., Cognism)
• Legitimate interest outbound contact
• Energy suppliers and network operators

5. Lawful Basis for Processing

We rely on:

• Legitimate Interest – B2B prospecting, AI calling, marketing communications
• Contractual Necessity – Delivering consultancy and procurement services
• Legal Obligation – Regulatory compliance
• Consent – Where required under PECR (cookies, certain marketing activities)

6. AI & Automated Processing

We use AI-powered systems for:

• Outbound calling
• Internal analytics
• Client portal data processing

AI tools assist decision-making but do not independently execute binding contracts.

7. Data Sharing

We may share data strictly for service delivery with:

• Energy suppliers
• MOP/DCDA providers
• Distribution Network Operators
• Third-party billing validators
• Legal advisers
• IT infrastructure providers (including Supabase, WordPress hosting providers)

We do not sell personal data.

8. International Transfers

We do not transfer personal data outside the UK except where required for secure hosting infrastructure used in operating our client portal. Appropriate safeguards are in place where applicable.

9. Data Retention

We retain data:

• For the duration of client engagement
• Up to 6 years following termination (for legal and regulatory purposes)
• Marketing data until opt-out

10. Your Rights

Under UK GDPR, you have rights to:

• Access your data
• Rectify inaccuracies
• Request erasure
• Restrict processing
• Object to processing
• Data portability

Requests should be sent to: aaron@energybubble.co.uk

11. Security

We implement:

• Secure hosting via Siteground
• Role-based access controls
• Encrypted data transmission
• Restricted executive-level financial access controls

12. Complaints

If you are dissatisfied with how we handle your data:

Email: aaron@energybubble.co.uk

You may also complain to the Information Commissioner’s Office.