Privacy Policy

Last updated: 25 March 2025

WattsWatt Technologies Ltd — User privacy notice

Registered name: WattsWatt Technologies Ltd

This privacy notice explains what personal information we collect, how we use it, and your rights.

Contact details

CEO: Contact via email at Lisa@wattswatt.co.uk

What information we collect, use, and why

We collect and use personal information to provide and improve our products and services, for research and archiving, and to handle queries, complaints or claims.

To provide and improve products and services for clients

  • Names and contact details
  • Addresses
  • Pronoun preferences
  • Marital status
  • Usage data (including information about how you interact with and use our website, products and services)
  • Website user information

For research or archiving purposes

  • Names and contact details
  • Addresses
  • Website and app user journey information

For dealing with queries, complaints or claims

  • Names and contact details
  • Address
  • Account information
  • Purchase or service history
  • Photographs
  • Customer or client accounts and records

Lawful bases and data protection rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. You can learn more about lawful bases and your rights on the ICO’s website.

Your data protection rights (in brief)

  • Right of access: Ask us for copies of your personal information. Learn more.
  • Right to rectification: Ask us to correct or complete information you think is inaccurate. Learn more.
  • Right to erasure: Ask us to delete your personal information. Learn more.
  • Right to restrict processing: Ask us to limit how we use your information. Learn more.
  • Right to object: Object to our processing of your personal data. Learn more.
  • Right to data portability: Ask us to transfer your data to another organisation or to you. Learn more.
  • Right to withdraw consent: Where we rely on consent, you can withdraw it at any time. Learn more.

If you make a request, we will respond without undue delay and within one month. To make a request, contact us using the details above.

Our lawful bases

For providing and improving products and services for clients

  • Consent — we have permission from you after giving you relevant information. All your data protection rights may apply, except the right to object. You can withdraw consent at any time.
  • Legitimate interests — we are using your information because it benefits you, our organisation, or someone else, without undue risk of harm. All your rights may apply, except the right to portability. Our legitimate interests include:
    • Receiving energy bills information to help low-income households identify potential savings.
    • Identifying eligibility for government decarbonisation schemes by accessing address data from the energy bill, helping improve energy efficiency and protect people from fuel poverty.

For research or archiving purposes

  • Consent — we have permission from you after giving you relevant information. All your rights may apply, except the right to object. You can withdraw consent at any time.

For dealing with queries, complaints or claims

  • Consent — we have permission from you after giving you relevant information. All your rights may apply, except the right to object. You can withdraw consent at any time.

Where we get personal information from

  • Directly from you

How long we keep information

Data is categorised based on sensitivity and operational necessity, each with a defined retention period:

  • Personal Data (Users): Names, emails, addresses, account login info — 3 years from last activity.
  • Financial Data: Payment details, billing records — 7 years (for legal compliance). Not currently used.
  • Tariff Results History: Tariff comparison details, saved searches — 1 year (or until user deletion).
  • Marketing Data: Newsletter signups, email preferences — until opt-out or user deletion.
  • Cookies & Analytics: Website behaviour, cookie data, user sessions — 6 months to 1 year (based on consent).
  • Support Communication: Emails, chats, or other customer service logs — 2 years from resolution.
  • Employee Data: Contracts, payroll, performance data — 6 years after employment ends.
  • Third-party API Logs: API calls, interactions with third-party services — 1 year from transaction.

Legal and regulatory compliance

  • UK GDPR: Personal data is not stored longer than necessary and is processed lawfully.
  • Data Protection Act 2018: Personal data is handled, protected and disposed of carefully.
  • Financial regulations: Financial records and contracts are retained for 7 years to meet tax and audit requirements.

Data retention procedures

Data collection and consent

  • Personal data collected is associated with user consent, specifically for marketing, cookies and analytics.
  • Users are informed of data retention policies through this Privacy Policy at the point of data collection.

Storage and access

  • Data is stored on secure servers with industry-standard encryption and access controls (e.g. ISO/IEC 27001).
  • Access to personal data is restricted to authorised personnel only.

Retention periods

  • Retention is managed through automated and manual processes to keep data only as long as necessary.
  • Personal data of inactive users is archived after 3 years and deleted after 5 years unless legal obligations dictate otherwise.
  • Financial and contractual data is securely archived for 7 years.

Data minimisation

  • Only data necessary for operational, legal or analytical purposes is retained.
  • Regular audits ensure excess or obsolete data is securely deleted.

Data disposal and deletion

  • On reaching the end of the retention period, data is automatically or manually deleted.
  • Deletion uses GDPR-compliant methods (e.g. encryption-based deletion, secure shredding for paper, DOD-compliant digital wiping).
  • Users can request deletion at any time by submitting a Data Subject Request (DSR).

How to complain

If you have concerns about our use of your personal data, contact us using the details above.

If you remain unhappy after raising a complaint with us, you can complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint