PRIVACY NOTICE

Data Controller: Civic Energy Partnership UK Limited.

Company Number: 17249771

Registered Office: 71-75 Shelton Street, London, England, WC2H 9JQ

Contact Email: info@cepuk.co.uk

Contact Phone: 0333 015 9276

Website: cepuk.co.uk

Date of Issue : 01/08/2026

1.WHO WE ARE

This Privacy Notice is issued by Civic Energy Partnership UK Limited (CEPUKL) on behalf of the entire Civic Energy Partnership Group. CEPUKL is the sole Data Controller for all personal data processed across the Group.

Group Companies (Data Processors): The following companies process personal data only on behalf of and under the instruction of CEPUKL:

  • Civic Energy Partnership UK Limited - Company Number:17249771

Regardless of which Group company you interact with, CEPUKL remains the Data Controller and is responsible for how your personal data is used.

2.THE DATA WE COLLECT

We collect and process the following categories of personal data:

  • Identity and Contact: Full name, title, date of birth, property address, correspondence address, email, and phone numbers.
  • Property and Tenancy: Property reference numbers, tenancy type (e.g., Council, Right to Buy), landlord details (e.g., City Council), and roof/property suitability data.
  • Energy and Usage: Meter Point Administration Numbers (MPAN), meter serial numbers, solar generation data, grid consumption readings, and usage patterns.
  • Financial and Billing: Bank details for Direct Debits, payment history, PPA references, debt information, and rebate/discount entitlements.
  • Installation and Technical: Survey records, installation dates, system specifications, maintenance logs, and health and safety assessments.
  • Communications: Records of calls, emails, complaints, and your marketing preferences.

3. WHY WE USE YOUR DATA (LEGAL BASIS)

We use your data for the following reasons:

  • Contractual Necessity: To perform the Power Purchase Agreement (PPA) or Tenancy Variation Agreement (TVA) we have with you (e.g., billing you for energy and maintaining the solar panels).
  • Legal Obligation: To comply with energy regulations (Ofgem), tax laws, and health and safety requirements.
  • Legitimate Interests: To manage our business, prevent fraud, improve our energy systems, and manage our partnership with local authorities, provided this does not override your rights.
  • Consent: Where you have specifically opted in to receive marketing or have shared health data (e.g., for priority service or site access needs).

4. HOW WE SHARE DATA WITHIN THE GROUP AND OUTSIDE

  • Intra-Group Sharing: Your data is shared between CEPUKL and the Group companies listed in Section 1 above to ensure your account is managed efficiently. For example, CEPUKL holds your contract, but group staff will access your data to answer your billing queries or fix your meter. All sharing is governed by internal data processing agreements.
  • Landlords: We share necessary data with your City Council or your landlord to coordinate installations and verify tenancy.
  • Contractors: We share your contact details with accredited solar engineers and maintenance teams to visit your property.
  • Regulatory Bodies: We may share data with Ofgem, the ICO, or law enforcement if required by law.
  • Payment Providers: To process your energy payments securely.

We never sell your data to third parties for marketing purposes.

5. DATA SECURITY AND RETENTION

We use industry-standard encryption and access controls to keep your data safe. We generally keep your data for six (6) years after your contract ends to comply with UK financial and legal record-keeping requirements. Technical data regarding the solar installation is kept for the lifetime of the equipment.

6. YOUR RIGHTS

Under UK GDPR, you have the right to:

  • Access your data (Subject Access Request).
  • Correct inaccurate data.
  • Delete data (in certain circumstances).
  • Object to or Restrict certain processing.
  • Data Portability (moving your data to another provider).
  • Withdraw Consent at any time.

To exercise these rights, contact our Data Protection lead at info@cepuk.co.uk.

7. COMPLAINTS

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):

8. UPDATES

We may update this notice as the Group expands. The latest version will always be available at https://cepuk.co.uk/