Privacy policy.

Barbican Power Limited respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and share personal data when you use our website, contact us, request a quotation, or become a customer. It also explains your rights under UK data protection law.

Barbican Power Limited is the data controller for the personal data described in this policy. Our details are Barbican Power Limited, registered in England and Wales number 08474516, with a registered office at The Columbus Building, International House, 14 King Street, Leeds, LS1 2HL.

If you have questions about this policy or how we handle personal data, contact our Data Protection Lead using the contact details published on our website, or write to us at the registered office address.

When this policy applies

This policy applies where you interact with Barbican Power Limited in a business context. This includes where you are a prospective customer, a customer, an authorised user on a customer account, or a representative of an organisation we deal with. It also applies where you are an agent or broker acting for a customer, or where you visit our website.

The personal data we collect

We collect personal data that is necessary to provide quotations, set up and manage electricity supply, bill accurately, take payments, and meet our legal and regulatory obligations.

The personal data we collect will vary depending on your relationship with us and how you interact with us. It commonly includes your name, job title and business contact details, along with records of communications with us. Where you become a customer, we will also hold account and billing information, payment and transaction records, and information needed to manage supply, such as meter identifiers and consumption data. We also collect technical information when you use our website, such as IP address and browsing behaviour, using cookies and similar technologies.

We do not set out to collect special category data. If you provide special category data to us, such as information about accessibility needs, we will only use it where we have a lawful basis and we are permitted to do so.

How we collect personal data

We collect personal data directly from you when you contact us, request a quotation, sign a contract, or use our website. We may also collect personal data from people acting on your behalf, such as brokers or agents.

In the course of setting up and managing supply, we may receive information from parties involved in the electricity market and service delivery, such as network operators, metering agents, data service providers, and switching and settlement arrangements. We may also obtain information from public sources such as Companies House, and from credit reference and fraud prevention agencies where relevant and permitted.

How we use personal data and our lawful bases

We use personal data to provide quotations and to enter into and perform contracts for electricity supply. This includes setting up accounts, arranging or managing metering services, obtaining and validating meter readings, producing bills, collecting payments, and managing debt.

We also use personal data to respond to enquiries, provide customer service, investigate and resolve complaints, and keep appropriate records of our dealings with you. We use personal data to help prevent fraud, detect misuse, and protect our business and customers.

We are required to process certain information to comply with legal and regulatory obligations. This includes obligations that arise from electricity supply licensing and industry arrangements, and from tax and accounting requirements.

We process personal data on the basis of contract where it is needed to provide a quote or supply electricity. We process personal data on the basis of legal obligation where we are required to do so by law or regulation. We process personal data on the basis of legitimate interests where we have a business reason to use your data, such as to improve our services, manage risk, and maintain accurate records, provided your rights do not override those interests. Where we rely on consent, such as for certain marketing communications or non-essential cookies, you can withdraw consent at any time.

Who we share personal data with

We share personal data only where it is necessary and proportionate, and we require appropriate protections.

We may share personal data with service providers that support our operations, such as IT and hosting providers, billing and customer service platforms, payment processors, and professional advisers. We may share personal data with credit reference agencies, fraud prevention agencies, and debt recovery providers where relevant and lawful.

Where needed to set up and manage supply, we may share personal data with organisations involved in electricity market operations. This can include network operators and market service providers supporting switching, settlement, metering and data services.

We may also share personal data with regulators, law enforcement agencies, courts, or other public authorities where we are required to do so or where disclosure is otherwise lawful. If we sell, transfer or reorganise part of our business, we may share personal data with a prospective or actual buyer and their advisers, subject to appropriate safeguards.

International transfers

Some of our service providers may store or access personal data outside the UK. Where personal data is transferred outside the UK and the transfer is restricted under UK law, we will use appropriate safeguards. These may include adequacy arrangements or approved contractual protections.

Data security

We maintain measures designed to protect personal data against accidental loss, unauthorised access, alteration or disclosure. These measures include access controls, staff confidentiality obligations, and security controls appropriate to the nature of the data and the risks involved.

How long we keep personal data

We keep personal data only for as long as necessary for the purposes set out in this policy. Retention periods depend on the type of information and why we hold it. We typically keep core customer, billing and contractual records for at least six years after the end of the customer relationship, to support legal, regulatory, tax and accounting requirements. We may keep data for longer where needed for disputes, complaints, investigations, or regulatory matters.

Your rights

You have rights under UK data protection law. These include the right to request access to your personal data, request correction of inaccurate data, and request deletion in certain circumstances. You may also have the right to restrict processing, object to processing where we rely on legitimate interests, and request data portability in certain circumstances. Where we rely on consent, you can withdraw consent at any time.

If you wish to exercise your rights, contact our Data Protection Lead. We may need to verify your identity before responding. We aim to respond within one month, although this can be extended where permitted by law.

You also have the right to make a complaint to the Information Commissioner’s Office if you are unhappy with how we handle your personal data.

Marketing

We may send marketing communications to business contacts where permitted by law. You can opt out at any time by using the unsubscribe method provided in the message, or by contacting us using the details on our website. Opting out of marketing will not affect service communications about your account or supply.

Cookies and website analytics

Our website uses cookies and similar technologies. Some are necessary for the website to function. Others are used to understand how the site is used and to improve performance. You can control cookies through your browser settings and, where available, our cookie preferences tools. If we publish a separate cookie policy, it will provide more detail.

Changes to this policy

We may update this privacy policy from time to time. The current version will be published on our website.