Cenergist Privacy Notice

Introduction

Cenergist are working in partnership with UK water companies delivering home water efficiency audits to domestic customers. We may need to collect some of your personal information and share this with other organisations. We will only collect and use personal data in ways that are described here, in a way that is consistent with our obligations and your rights under the law (UK GDPR and The Data Protection Act 2018).

The personal data we collect and use:

We collect your data directly and this data may include:

• Your name and address.
• Your phone number and email address (so you can be contacted as necessary for the Purpose outlined in this notice);

Providing your personal data:

We will tell you if providing some of your personal data is optional.

Using your personal data: legal basis and purpose

We will process your personal data:

• As necessary to fulfil our contract with you e.g. to manage and undertake the contract (including the installation of water saving measures into your property).
• As necessary to pursue our legitimate interests.
• To share your data with third parties who may be working in partnership with us to carry out the work (as specified under ‘sharing your personal data’).
• As necessary to comply with a legal obligation e.g. where you exercise rights to make requests under data protection law.

Where your data is processed based on your consent, you can withdraw your consent at any time. In all other cases, we will tell you about the condition upon which we are processing your special category data.

Sharing your personal data

We may be required to share your personal data with:

• The engineer visiting your property to complete the works.
• The water company.
• The landlord (Ashford Borough Council).
• Technical Monitoring agents.
• Anyone else where it is required by law, where you have been notified of the sharing or for whom we have your consent.
• Your data will only be processed for purposes relating to the home water efficiency audit, unless you have specifically consented otherwise.

Criteria used to determine data retention periods

• We may retain your personal data for up to seven years after the scheme ends.

Your rights, including accessing your data or amending incorrect data

You have rights regarding information held about you by the Controller (these do not apply in all circumstances). These include the right:

• to access your personal data;
• to be informed about our processing of your personal data;
• to have incorrect data corrected;
• to data portability (to move, copy or transfer your personal data);
• to have your personal data deleted;
• to have the processing of your personal data restricted, or to object to processing of your personal data;
• to complain to the Information Commissioner’s Office (https://ico.org.uk/concerns/)