Group Privacy Notice (CESUKL Single Controller)

Data Controller: Community Energy Scheme UK Limited (CESUKL)

Company Number: 10613447

Registered Office: Suite 6 Broadmeads Pumping Station, Hertford Road, Ware, Hertfordshire, SG12 9LH

Trading Address: Suite 6 Broadmeads Pumping Station, Hertford Road, Ware, Hertfordshire, SG12 9LH

Contact Email: stoke@communityenergyscheme.com

Contact Phone: 01782 438 427

Date of Issue: 15/01/2021

Version: 2.0 (Group Consolidated)

1.WHO WE ARE

This Privacy Notice is issued by Community Energy Scheme UK Limited (CESUKL) on behalf of the entire Community Energy Scheme Group. CESUKL is the sole Data Controller for all personal data processed across the Group.

Group Companies (Data Processors):The following companies process personal data only on behalf of and under the instruction of CESUKL:

  • Community Energy Scheme Stoke Limited - Company Number: [Insert]
    • Local delivery vehicle for the Stoke-on-Trent scheme.
  • Utility Community Energy Scheme Stoke Limited -
    • Utility operations and grid coordination.

Regardless of which Group company you interact with, CESUKL remains the Data Controller and is responsible for how your personal data is used.

2.THE DATA WE COLLECT 

We collect and process the following categories of personal data:

    • Identity and Contact: Full name, title, date of birth, property address, correspondence address, email, and phone numbers.
    • Property and Tenancy: Property reference numbers, tenancy type (e.g., Council, Right to Buy), landlord details (e.g., Stoke-on-Trent City Council), and roof/property suitability data.
    • Energy and Usage: Meter Point Administration Numbers (MPAN), meter serial numbers, solar generation data, grid consumption readings, and usage patterns.
    • Financial and Billing: Bank details for Direct Debits, payment history, PPA references, debt information, and rebate/discount entitlements.
    • Installation and Technical: Survey records, installation dates, system specifications, maintenance logs, and health and safety assessments.
    • Communications: Records of calls, emails, complaints, and your marketing preferences.

3. WHY WE USE YOUR DATA (LEGAL BASIS)

We use your data for the following reasons:

    • Contractual Necessity: To perform the Power Purchase Agreement (PPA) or Tenancy Variation Agreement (TVA) we have with you (e.g., billing you for energy and maintaining the solar panels).
    • Legal Obligation: To comply with energy regulations (Ofgem), tax laws, and health and safety requirements.
    • Legitimate Interests: To manage our business, prevent fraud, improve our energy systems, and manage our partnership with local authorities, provided this does not override your rights.
    • Consent: Where you have specifically opted in to receive marketing or have shared health data (e.g., for priority service or site access needs).

4. HOW WE SHARE DATA WITHIN THE GROUP AND OUTSIDE

    • Intra-Group Sharing: Your data is shared between CESUKL and the Group companies listed in Section 1 above to ensure your account is managed efficiently. For example, CESUKL holds your contract, but CESSL staff will access your data to answer your billing queries or fix your meter. All sharing is governed by internal data processing agreements.
    • Landlords: We share necessary data with Stoke-on-Trent City Council or your landlord to coordinate installations and verify tenancy.
    • Contractors: We share your contact details with accredited solar engineers and maintenance teams to visit your property.
    • Regulatory Bodies: We may share data with Ofgem, the ICO, or law enforcement if required by law.
    • Payment Providers: To process your energy payments securely.

We never sell your data to third parties for marketing purposes.

5. DATA SECURITY AND RETENTION

We use industry-standard encryption and access controls to keep your data safe. We generally keep your data for six (6) years after your contract ends to comply with UK financial and legal record-keeping requirements. Technical data regarding the solar installation is kept for the lifetime of the equipment.

6. YOUR RIGHTS

Under UK GDPR, you have the right to:

    • Access your data (Subject Access Request).
    • Correct inaccurate data.
    • Delete data (in certain circumstances).
    • Object to or Restrict certain processing.
    • Data Portability (moving your data to another provider).
    • Withdraw Consent at any time.

To exercise these rights, contact our Data Protection lead at stoke@communityenergyscheme.com.

7. COMPLAINTS

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):

8. UPDATES

We may update this notice as the Group expands. The latest version will always be available at www.communityenergyscheme.com.