Privacy Notice – Introduction
Being transparent and providing accessible information to individuals about how their personal data will be used is a key element of the Data Protection Act 1998 (DPA) and the EU General Data Protection Regulation (GDPR).
At Your NRG Ltd, we believe these principles represent a great opportunity for Your NRG Ltd to build even stronger, more trusting and transparent relationships with our customers.
The most common way to provide this information is in a privacy notice.
Your NRG Ltd PRIVACY NOTICE
Your NRG Ltd (collectively, the “Company”, “we” or “us”) is committed to safeguarding the privacy and personal information of our customers and business partners.
This Privacy Notice explains how we may collect, use, process, share, and store personal information about you, including through designated third-party service providers, and the choices that are available to you regarding this information. Please read this Privacy Notice carefully to understand our views and practices regarding your personal information and how we will treat it.
In addition to any information kept in hard copy, this Privacy Notice also applies to Company-related websites, Mobile device applications (Apps) and other online services that we offer which link to this Privacy Notice.
Please also note that our website does contain links to other external websites beyond our control and we suggest that you always check the privacy notices and policies of these sites before using them, as this Privacy Notice only covers your personal information on Company-related websites.
Information you give us
When you open an account with us, purchase our products and services and/or remit payment for services, we collect information about you. We may also collect information about you if you interact with us via phone, social media or websites.
Depending on the particular services requested, the types of information that you may give us vary, and could include, but not be limited to, your name, work or personal address, e-mail address, phone numbers, date of birth, gender, financial and/or payment card information, driving license information, personal description and/or photograph, as well as customer data, payment data, employee data and/or website user data.
Information we receive from other sources
We may receive information about you if you use any of the websites we operate or the other services we provide. We also work closely with third parties and may receive information about you from them (including, for example, business partners, sub-contractors, payment and delivery services, advertising networks, analytics providers, search information providers, and credit reference agencies).
How do we use the information about you?
We use your information to provide you with the information, process orders for products and services that you request from us, administer or otherwise carry out our obligations in relation to any agreement you have with us. The Company retains your information for the period necessary required to serve the legitimate purpose or as required by law.
We may also use this information to provide you with information about goods or services we feel may interest you. In order to respect your privacy, we will only use your personal data for marketing purposes when you are an existing customer, and as required, we will request your consent prior to using your personal data for direct marketing.
Additionally, if at any time you wish us to stop using your information for any the above purposes, please contact us using the methods explained below. We will stop the use of your information for such purposes as soon as it is reasonably possible to do so.
How do we share your information?
From time to time, we may share your personal data with other members of our group of companies and with selected third parties for the performance of any contract we enter into with them or you. These third parties will not use your personal information for any other purposes than what we have agreed to with them, and we request those third parties to implement adequate levels of protection in order to safeguard your personal information.
In the event we go through a business transition, such as a merger, acquisition of another company, or sale of part or all of our assets, we may disclose your personal information to third parties and your personal data held may be among one of the assets transferred.
We may also automatically collect non-personal information about you such as the type of internet browsers you use or the website from which you linked to our website. We may also aggregate details which you have submitted to us. You cannot be identified from this information and it is only used to assist us in providing effective services, including in connection with the Company website.
Controlling your personal information
Your NRG recognises that you may choose to restrict or control the collection or use of your personal information in the following ways;
- If you have historically given Your NRG the right to us using your personal information for direct marketing or other specific purposes and wish to revoke this.
- As a result of you not requiring our services and wish for your personal information to be erased from our systems
- If you believe that we are holding personal information which is incorrect, out of date or incomplete and wish for that to be corrected. This can include, but is not exhausted to address, name, phone numbers etc
- if you wish for us to transfer your personal information to a third party (e.g. another service provider), we may provide you with your personal information which held by us for you to pass to that third party
Potential rights under the GDPR
The EU General Data Protection Regulation (“GDPR”), includes the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
If you are eligible to invoke one of the rights listed above and wish to do so, you may contact us as part of a subject access request using the details found below. Please note that we may not always be able to fulfil your request as there may be legitimate purposes, such as certain legal or statutory obligations, that require us to retain your information as stored or if we believe the change would cause the information to be incorrect. In some instances the Company can refuse or charge for requests that are manifestly unfounded or excessive.
Updates to our Privacy Notice
As appropriate, we may choose to make changes to this Privacy Notice from time to time. We will post the changes here. Where the changes are significant, we may also decide to email all our registered users with the new details. Where required by law, we will seek your consent to make these changes.
How to contact us
If you have questions, or believe you are eligible to submit a subject access request, you can reach us by email at email@example.com or by post at:
Data Protection, Your NRG Ltd, Baltic Street, Hartlepool, TS25 1PW
Please be aware that when we receive a formal written complaint regarding the processing of personal data, we will try to resolve it directly with the person who has made the complaint. However, as necessary, we will work with the appropriate regulatory authorities to resolve any complaints regarding our processing of personal data that we cannot resolve with a complainant directly, and they will use the information you have provided, including the Company’s response to your concerns, to decide if your concern provides an opportunity to improve information rights practice.
Last updated: 11th Oct 2022