ABOUT THESE GUIDELINES

These guidelines support iSupply Energy’s Privacy Notice and adopt its definitions.

The guidelines are intended to ensure that iSupply Energy processes personal data in the form of customer records in accordance with the data protection principles, in particular that:

  • Personal data must be collected only for specified, explicit and legitimate purposes. It must not be further processed in any manner incompatible with those purposes.
  • Personal data must be adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed. When personal data is no longer needed for specified purposes, it is deleted or anonymised as provided by these guidelines.
  • Personal data must be accurate and, where necessary, kept up to date. It must be corrected or deleted without delay when inaccurate.
  • Personal data must not be kept in an identifiable form for longer than is necessary for the purposes for which the data is processed.
  • Personal data must be secured by appropriate technical and organisational measures against unauthorised or unlawful processing, and against accidental loss, destruction or damage.

The Data Protection Officer (DPO) is responsible for overseeing these guidelines. Any questions about the operation of the guidelines should be submitted to the DPO.

LOCATION OF CUSTOMER RECORDS

Various departments in iSupply Energy holds customer records and can be contacted with any enquiries relating to your personal data. 

You have rights in relation to your personal data - See Section 9 of our Privacy Notice.

KEEPING INFORMATION UP TO DATE

iSupply Energy needs to ensure that your personal details are up to date and accurate.

When you first register with iSupply Energy we record certain details about you as required in connection with dealing with an enquiry or entering into a contract with you and will collect further information about you as part of that process (see Section 2 of our Privacy Notice). In the event that any of these change you should inform Customer Services by calling 0330 2020298. You will be invited to review and update personal information on a regular basis.

These provisions are intended to complement the data subject rights referred to in Section 9 of our Privacy Notice.

GENERAL PRINCIPLES ON RETENTION AND ERASURE

iSupply Energy's approach to retaining customer records is to ensure that it complies with the data protection principles referred to in these guidelines and, in particular, to ensure that:

  • Customer records are regularly reviewed to ensure that each piece of personal data we hold about a customer remains adequate, relevant and limited to what is necessary to facilitate you being a customer of iSupply Energy.
  • Customer records are kept secure and are protected against unauthorised or unlawful processing and against accidental loss, destruction or damage. Where appropriate iSupply Energy uses anonymization to prevent identification of individuals.
  • When records are destroyed, whether held as paper records or in electronic format, iSupply Energy will ensure that they are safely and permanently erased.

RETENTION AND ERASURE OF CUSTOMER  RECORDS

iSupply Energy retains personal data of its customer on the basis of calculating retention periods in relation to the personal data that it holds.

The retention periods will be calculated on the basis of a retention formula which is based firstly on calculating when personal data is  no longer needed for the purpose for which it was collected and then making certain adjustments from there to account for other legal reasons we might need to retain personal data and to take and set a margin which will be fixed by the business, which allows some reasonable “breathing space” to be able to deal with customer enquiries etc.