Privacy Policy
Last updated: 26 September 2026
This policy explains how Energy Optimiser collects, uses and protects your personal data when you use our energy audit service. It is written to meet our obligations under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
Energy Optimiser is an independent energy consultancy based in the United Kingdom. We are responsible for the personal information you share with us (the “data controller”). If you have any questions about your data, email hello@energyoptimiser.co.uk and we’ll get back to you.
2. What personal data we collect
We collect the following categories of personal data:
- Contact details — your name, job title, work email address and phone number.
- Company details — company name, industry, number of sites, site postcode, current supplier and contract end date.
- Energy data — annual electricity and gas spend, agreed kVA capacity, government schemes you are enrolled in (such as EII, CCA or BICS) and your sustainability goals.
- Uploaded energy bills — and the data we extract from them, including MPAN/MPRN meter numbers, consumption, charges, unit rates and billing periods.
- Callback booking details — your preferred date, time and whether you would like the consultation by Teams, Zoom or phone.
- Payment details for paid weekend appointments — these are processed by Stripe; we never see or store your card number.
- Usage and device data — collected from cookies and the Meta Pixel (see the cookies section below).
- Answers submitted through our Facebook/Instagram lead forms — when you use those forms, we receive the information you provide to Meta.
3. How and why we use your data, and the lawful basis for each
- Preparing your AI energy audit report — necessary to take steps to enter into a contract with you, and our legitimate interests in providing the service.
- Contacting you by phone or email about the audit and business energy costs — our legitimate interests in B2B marketing of relevant energy services.
- Arranging and taking payment for appointments — necessary to perform the contract we have with you.
- Measuring and improving our advertising and website — based on your consent, given via the cookie banner.
- Meeting our legal and accounting obligations — necessary for compliance with a legal obligation to which we are subject.
4. AI analysis of your data
Your uploaded bills and the answers you provide are analysed by an AI model to extract figures and produce your savings report. A senior energy consultant reviews the results before any advice is given to you. No decisions with legal or similarly significant effects are made solely by automated means.
6. International data transfers
Some of our providers may process personal data outside the United Kingdom. Where they do, we rely on the UK adequacy regulations, or where no adequacy decision applies, on the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
7. How long we keep your data
- Leads who do not become clients: 24 months from your last contact with us.
- Clients: for the length of our relationship, plus 6 years for record-keeping.
- Uploaded bills: 24 months, unless they are needed for an active contract.
- Analytics and cookie data: in line with your cookie settings, up to a maximum of 13 months.
9. Your data protection rights
Under UK data protection law you have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erase your personal data;
- Restrict processing;
- Object to processing — including to direct marketing at any time;
- Data portability; and
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, contact us at hello@energyoptimiser.co.uk. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk or by phone on 0303 123 1113.
10. Security
We protect your personal data using encrypted connections in transit, and limit access to the people who need it to provide the service. No method of transmission or storage is completely secure, but we apply measures appropriate to the sensitivity of the data.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will always show when it was last revised. We will notify you of any significant changes where required by law.
User journey tracking
As you move through our site and audit, we record first-party analytics events (such as the pages you view and the audit steps you reach) using a per-session identifier, your device type, and the marketing source that brought you here. This helps us understand where we can improve the service and is essential for running it — it does not require the cookie banner and does not store anything beyond what is described in section 2 and this policy. When you accept the Meta Pixel, we also send a custom event for each audit step so we can build retargeting audiences of visitors who did not complete a particular step.