We are committed to ensuring your privacy is protected. This privacy notice explains how we use the information we collect about you.
This privacy notice applies to the SSE Enterprise Distributed Energy business which is operated by the following data controllers (all of which are members of the SSE Group):
SSE Utility Solutions Ltd, No. 06894120
SSE Heat Networks Ltd, No. SC303682
TESGL Ltd (trading as SSE Enterprise Energy Solutions), No. 08462158
Slough Heat & Power Ltd, No. 00174142
Slough Utility Services Ltd, No. 03486590
Forbury Assets Ltd No. 11024024
SSE Enterprise Ltd, No. 10060563
The registered office of SSE Utility Solutions Ltd, Slough Heat & Power Ltd, Slough Utility Services Ltd, Forbury Assets Ltd and SSE Enterprise Ltd is 1 Forbury Place, 43 Forbury Road, Reading, Berkshire RG1 3JH and these companies are subject to the laws of England and Wales.
The registered office of TESGL Limited is Ocean Court, Caspian Road, Atlantic Street, Altrincham WA14 5HH and this company is subject to the laws of England and Wales.
The registered office of SSE Heat Networks Limited is Inveralmond House, 200 Dunkeld Road, Perth PH1 3AQ and this company is subject to the laws of Scotland.
These companies are referred to as “SSE”, “we” or “us” throughout this privacy notice.
We will be the “controller” of the information you provide to us.
We, or third parties on our behalf, collect your personal data when you use our website, communicate with us by phone, letter, email, social media or in person or when you receive our products and/or services.
We may collect the following personal data and we refer to this as “personal data” throughout this notice:
We, or third-parties on our behalf, collect, use and store the personal data collected about you to:
We treat some of the information that we collect about you as being particularly sensitive, such as requirements for your welfare.
With your consent, we’ll collect this information about you (or a member of your household). This information may relate to health, disability or financial circumstances and we will use this information to:
Unless you’ve asked us not to, we may contact you in writing, by phone and (where you have consented) via email or SMS with information on products, services and rewards that we, other companies within the Group, and occasionally our carefully selected partners identified at the time we collect your information, offer. We may also use third parties to send marketing communications.
Unless you have asked us not to, we may also use your personal data to show you digital advertisements via your social media newsfeed, on search engine results pages, or on other websites.
Unless you have asked us not to, we may profile your data to provide you with marketing and offers that are relevant to you. If you opt out of profiling, we will still run analysis that includes your data, but any decisions or marketing output that result from that analysis will not be used to market to you. You will be sent generic marketing that may not be relevant to you.
To opt out of receiving marketing messages, or to object to our use of profiling for direct marketing purposes, contact us at any time using the details in section 12.
In order to process and use your personal data lawfully, we rely on the following legal bases:
We may share your personal information with the following categories of third parties:
We will keep your information only for as long as is necessary depending on the purpose for which it was provided.
When determining the relevant retention periods, we will take into account factors including:
Otherwise, we securely erase your information once this is no longer needed.
You have the following rights regarding your information:
Right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. Therefore, we are providing you with the information in this privacy notice.
Right of access
You have the right to obtain access to your personal data (if we are processing it) and certain other information (similar to that provided in this privacy notice). This is so you are aware and can check that we are using your personal data in accordance with data protection law(s).
Right to rectification
You are entitled to have your personal data corrected if it is inaccurate or incomplete.
Right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep it. This is not an absolute right to erasure; there are exceptions.
Right to restrict processing
You have the right to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further.
Right to data portability
You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such information transferred directly to a third party.
Right to object to processing
You have the right to object to your personal data being processed in certain circumstances. This includes where we are relying on legitimate interest and for direct marketing purposes (including profiling).
Right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for direct marketing.
We, or a third party who we share personal data with, may transfer, host, store and/or handle your personal information outside of the EEA. For example, where we and/or our service providers (including servers) are based outside of the EEA.
The EEA consists of countries in the European Union, Iceland, Liechtenstein and Norway and are all considered to have equivalent laws in data protection and privacy. During the Brexit transition phase (until 31 December 2020), the UK including Northern Ireland, are also considered to have equivalent laws in data protection and privacy.
We will only permit this to happen if adequate safeguards have been put in place to protect your personal data. For countries outside the UK, this means that we will:
We may update our privacy notice from time to time. Any changes we make to our privacy notice in the future will be posted on the SSE website and, where appropriate, notified to you by post or email.
For more information on your rights or if you would like to exercise any of your rights, you are welcome to contact us at the contact details set out below under “Contacting us”.
If you would like to contact us in relation to your rights or if you are unhappy with how we have handled your information, you may do so using the following details:
Address: Enterprise Data Protection, c/o Enterprise Assurance, Inveralmond House, 200 Dunkeld Road, Perth PH1 3GH
If you would like to contact our Data Protection Officer, you may do so using the following details:
Address: Data Protection Officer, No. 1 Forbury Place, 43 Forbury Road, Reading, RG1 3JH
If you’re not satisfied with our response to any complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the Information Commissioner’s Office (ICO) using the following details:
Telephone Number: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF