Privacy Policy
Effective date: 1 May 2026. This policy explains how ENERGYbubble Limited collects, uses and protects personal data.
1. Who we are
ENERGYbubble Limited is registered in England and Wales under company number 14505891. We are registered with the Information Commissioner’s Office under registration ZB956089.
2. Data controller
ENERGYbubble Limited is the controller of your personal data. Contact us at hello@energybubble.co.uk or Foundry, 6 Brindley Place, Birmingham, B1 2JB.
3. Information we collect
We may collect identity, contact, business, contract, consumption, billing, technical and communications data supplied directly by you or generated through your use of our services and website.
4. How we collect information
Information is collected through enquiries, strategy reviews, service delivery, website interactions, cookies, suppliers, public sources and business partners.
5. How we use personal data
We use data to respond to enquiries, provide and improve services, analyse energy arrangements, manage contracts, meet legal obligations, protect our systems and communicate relevant market information.
6. Lawful bases
Our lawful bases include performance of a contract, steps taken before a contract, compliance with legal obligations, legitimate interests and consent where required. You may withdraw consent at any time.
7. AI and automated processing
We use AI-supported analytics to interpret energy and market data, identify patterns and support recommendations. Material decisions are subject to appropriate human oversight and are not made solely by automated means where they produce legal or similarly significant effects.
8. Sharing personal data
We may share data with energy suppliers, network operators, professional advisers, technology providers, regulators and other service partners where necessary. Providers are required to protect personal data and use it only for agreed purposes.
9. International transfers
Where information is transferred outside the United Kingdom, we use approved safeguards such as adequacy regulations or the UK International Data Transfer Agreement.
10. Retention
We retain personal data only for as long as needed for the stated purpose, legal and regulatory requirements, dispute resolution and the establishment or defence of legal claims.
11. Your rights and security
You may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. We use proportionate organisational and technical security measures to prevent unauthorised access, loss, alteration or disclosure.
12. Complaints and updates
Contact us first so we can address any concern. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk. We may update this policy and will publish the current version on this page.