PRIVACY POLICY

PRIVACY POLICY

Lightinglives Consultants Ltd

1. Our Commitment to Privacy

Lightinglives Consultants Ltd (“Lightinglives”, “we”, “us”, or “our”) is committed to safeguarding the privacy and personal data of users of our website and services. We process personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Changes to Data Protection Legislation

UK data protection law is governed by the UK GDPR and the Data Protection Act 2018. This Privacy Notice is designed to comply with current legislation and may be updated from time to time to reflect changes in law, regulation, or our business practices.

3. Scope of This Privacy Notice

This Privacy Notice and Cookie Policy form part of our Terms & Conditions and apply to all identifiable individuals (“you”, “your”, or “Data Subjects”) who:

  • Use our website; or
  • Engage with the services provided by Lightinglives Consultants Ltd.

4. Data Controller

For the purposes of UK GDPR, Lightinglives Consultants Ltd is the Data Controller.

Registered Office:

Lightinglives Consultants Ltd
PB.403,Pill Box,115 Coventry Road,E2 6GG

5. Data Protection Officer (DPO)

Lightinglives Consultants Ltd has appointed a Data Protection Officer (DPO) to oversee compliance with data protection legislation.

Contact details:

  • Email: info@lightinglivesconsultants.co.uk
  • Telephone: 02038131563
  • Post: Lightinglives Consultants Ltd (FAO: DPO), PB.403,Pill Box,115 Coventry Road,E2 6GG

Any queries or concerns regarding the processing of your personal data will be forwarded to the DPO for action.

6. Purpose of Processing Personal Data

We process personal data for the following purposes:

  • To set up, manage, and administer your account
  • To provide our consultancy and related services
  • To communicate with you and respond to enquiries
  • To provide quotations, tenders, or recommendations involving third-party partners
  • To comply with legal and regulatory obligations
 

7. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Consent – where you have given clear consent for us to process your personal data
  • Contract – where processing is necessary for the performance of a contract or steps prior to entering into a contract
  • Legitimate Interests – where processing is necessary for our legitimate business interests (such as marketing or service improvement), provided those interests are not overridden by your rights

8. Categories of Personal Data We Process

We may collect and process the following categories of personal data:

  • Name
  • Company name
  • Postal and business address
  • Telephone numbers (landline and mobile)
  • Email address
  • Bank details (not stored on our website and used only for contractual purposes with suppliers)

All personal data is stored securely in accordance with our internal security policies and legal obligations.

9. Recipients of Personal Data

We may share limited personal data (such as name, email address, and postal address) with trusted suppliers and partners strictly for:

  • Contract administration
  • Health and safety
  • Security and regulatory compliance

We do not sell personal data to third parties.

10. International Data Transfers

Personal data will not be transferred outside the UK or countries recognised as providing adequate protection unless:

  • It is necessary for service administration; and
  • Appropriate safeguards are in place; and
  • Where required, you have provided explicit consent.

11. Special Category (Sensitive) Personal Data

We do not collect special category personal data unless:

  • It is strictly necessary; and
  • You have provided explicit consent; and
  • We have explained why it is required.

12. Data Retention

We retain personal data for up to 5 years to:

  • Meet HMRC and legal obligations; and
  • Maintain business records.

After this period, personal data is securely deleted or anonymised.

13. Your Rights Under UK GDPR

You have the following rights:

a) Right of Access

You may request confirmation of whether we process your data and obtain a copy of it (Subject Access Request).

b) Right to Rectification

You may request correction of inaccurate or incomplete personal data.

c) Right to Erasure

You may request deletion of personal data where there is no lawful basis for continued processing.

d) Right to Restrict Processing

You may request that we limit the processing of your personal data in certain circumstances.

e) Right to Data Portability

Where applicable, you may request your personal data in a structured, commonly used, machine-readable format (e.g. CSV).

f) Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

g) Automated Decision-Making

Lightinglives Consultants Ltd does not use automated decision-making or profiling.

Requests will be responded to within one month.

14. Cookies & Analytics

We use cookies and similar technologies to improve website performance and user experience. This may include:

  • IP address
  • Browser type
  • Pages viewed
  • Time spent on the site
  • Referring URLs

We use analytics tools such as Google Analytics to analyse aggregated, anonymised usage data.

You may manage cookie preferences through your browser settings.

15. How We Use Your Information

We use your information to:

  • Provide and manage services
  • Respond to enquiries
  • Improve website functionality
  • Communicate updates and marketing (where permitted)
  • Meet legal and contractual obligations

16. Marketing Communications

Where permitted by law, we may send marketing communications. You can opt out at any time using the unsubscribe link in emails or by contacting us directly. Transactional or service-related emails may still be sent.

17. Third-Party Links

Our website may include links to third-party websites. We are not responsible for the privacy practices of those websites.

18. Data Security

We implement appropriate technical and organisational measures including:

  • Encryption and SSL
  • Firewalls
  • Access controls

While we take all reasonable precautions, no system can be guaranteed to be 100% secure.

19. Changes to This Policy

We may update this Privacy Notice from time to time. Any changes will be posted on our website with the updated date.

20. Complaints

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

WHAT Personal Data Do We Collect and WHEN?

We ask you for certain personal data to provide you with the products or services you request. For example, when you arrange a contract through us, speak with a member of our team, request to receive communications, receive quotations, or use our website.

This personal data includes your:

Contact details including name, email, telephone number and site, billing address meter details including MPAN / MPR, kVA, voltage, AMR status contract details including contract start and end dates, consumption information direct debit details to provide information to energy suppliers to help us provide you with the products and services that we provide.

WHY and HOW Do We Use Your Personal Data?

We use your personal data in the following ways:

  • bill validation purposes to source and negotiate energy renewal prices from supplier on the market
  • discuss ongoing queries with your energy supplier
  • manage the transfer of contracts between suppliers
  • contact you to provide information about upcoming energy renewals

PROTECTION and MANAGEMENT of Your Personal Data Encryption & Security

We use a variety of technical and organizational security measures, including encryption and authentication tools, to maintain the safety of your personal data. Keeping your information safe and secure. We are committed to ensuring that your personal information is secure and protecting it from being inappropriately or accidentally accessed, used, shared or destroyed, and against it being lost. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online and in paper form. We only provide access to your data to staff who require access.

Sharing your data with Third parties

Access to your personal information is only allowed when required by the law or is required as part our fulfilling our service obligations.  We do not, and will never, sell your personal information with other third parties. As a broker of electricity, gas, water, merchant services and telecomms supply for businesses when you become a client we will need to share your details with your new energy /utility provider as part of our contracted arrangements

Retention of your Personal Data

Your personal information will be retained for as long as is necessary to carry out the purposes set out in this  privacy policy (unless a longer retention period is required by applicable law). In general, this means that we will keep your personal data for as long as you keep your Resolve Energy account.

YOUR RIGHTS Relating to Your Personal Data

You have the right to request:

  1. access to your personal data;
  2. an electronic copy of your personal data (portability);
  3. correction of your personal data if it is incomplete or inaccurate; or
  4. deletion or restriction of your personal data in certain circumstances provided by applicable law.

These rights are not absolute. Where we have obtained your consent for the processing of your personal data, you have the right to withdraw your consent at any time.