Privacy Policy (UK GDPR)
Your privacy is important to us
Privacy Policy (UK GDPR)
VoltBridge Ltd ("VoltBridge", "we", "us", "our") is committed to protecting your personal data and respecting your privacy.
1. Who we are
- Controller: VoltBridge Ltd (Company No. 16574977)
- ICO Registration: ZB968646
- Registered Office: Voltbridge Ltd
124 City Road, City Road
London
England
EC1V 2NX
United Kingdom - Contact for privacy matters: privacy@voltbridge.co.uk
2. What data we collect
We may collect and process the following categories of personal data (primarily B2B):
- Identification & contact: Full name, job title, business name, email, phone/WhatsApp, postal address & postcode.
- Energy & account details (for quotes): Current supplier(s), MPAN/MPRN or meter numbers, meter type (HH/NHH/Smart), contract end date, usage/consumption (kWh), spend estimates, and recent bill data.
- Communications: Emails, messages (e.g., WhatsApp), call notes, call recordings (where applicable), and chat transcripts from our AI/website forms.
- Website data: Device, IP address, general location, pages viewed, and cookies/analytics (see Cookie Policy).
- Compliance & complaints: Complaint details and related correspondence; Ombudsman references where applicable.
We may collect data directly from you, from your colleagues/representatives, from public sources (e.g., Companies House), from brokers/partners you authorise, and from suppliers in connection with quotes/contracts.
3. Purposes & lawful bases
We use your data for:
- Providing quotes and brokering energy contracts with licensed suppliers.
Lawful bases: Contract, Legitimate Interests (to respond to B2B enquiries and source competitive rates). - Customer service, account management & complaint handling.
Lawful bases: Contract, Legitimate Interests, Legal Obligation. - Business communications & B2B marketing about similar services (you can opt out anytime).
Lawful bases: Legitimate Interests and PECR compliance for corporate subscribers. - Security, fraud prevention, audit & legal compliance (including Ombudsman, ADR, and regulatory requests).
Lawful bases: Legal Obligation, Legitimate Interests. - Analytics and service improvement (including training our human team and AI assistants).
Lawful bases: Legitimate Interests.
Where we rely on consent (e.g., certain cookies or optional marketing), you can withdraw it at any time.
4. Sharing your data
We share data where necessary with:
- Energy suppliers and partners to obtain quotes, validate metering/consumption, and set up contracts you authorise.
- Service providers / processors acting on our instructions (e.g., CRM/databases such as Airtable, communication tools such as email/WhatsApp integrations, workflow automation such as n8n, cloud hosting and IT support). We have appropriate data processing terms in place.
- Professional services (legal/accounting), insurers, dispute resolution bodies (e.g., Ombudsman), and authorities where legally required.
- Business change: In the event of a merger, acquisition, or asset transfer, data may be disclosed under appropriate safeguards.
We do not sell your personal data.
5. International transfers
Some providers may process data outside the UK. Where this occurs, we use appropriate safeguards (e.g., the UK International Data Transfer Agreement (IDTA), UK Addendum to the EU SCCs, or an adequacy decision) to protect your rights.
6. Retention
We keep data only as long as necessary for the purposes above:
- Leads/enquiries: up to 24 months from last interaction.
- Contracts and records: generally 6 years after the end of our relationship (to meet legal/audit requirements).
- Complaints: generally 6 years from closure.
- Cookies/analytics: per our Cookie Policy.
We may retain data longer if required by law, to resolve disputes, or enforce agreements.
7. Your rights
Under the UK GDPR you have rights to:
- Access your data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase data (in certain circumstances).
- Restrict or object to processing, including B2B marketing.
- Data portability (where applicable).
- Withdraw consent where processing relies on consent.
To exercise your rights, contact privacy@voltbridge.co.uk. We may need to verify your identity. You also have the right to complain to the Information Commissioner's Office (ICO) if you are unhappy with how we handle your data.
8. Security
We implement technical and organisational measures appropriate to the risk, including access controls, encryption in transit where supported, least-privilege permissions, logging, and staff training.