Introduction

 

Your privacy is very important, which is why protecting your personal data is our top priority. This Privacy Policy explains how we look after your personal data when you visit our website (regardless of where you visit it from), your privacy rights, and how the law protects you.

 

 

What is your personal data?

 

“Personal data” is any information about a living individual which allows them to be identified from that data (for example a name, photographs, videos, email address, or address). Identification can be by the information alone or in conjunction with any other information.

 

 

In a nutshell

Most of the data we collect and hold about you is for the purpose of providing our services. We also use data to make Supply Change’s products and services better, and to help us advertise Supply Change.

 

​

Provide our services

To make Supply Change better

We collect data on how you use our website and other features. We track things like where you click on our site and what features you use. This lets us learn what's working well and what features we need to improve.
 

We sometimes share this data in an aggregated form with agencies or partners that are helping us. For example, we might tell a marketing agency partner how many aggregated website visits we get a week.
 

If you are a Supply Change Supplier, we may share your data with partners to increase your visibility to buyers and therefore your chances of winning contracts. With new organisation partnerships, you will be notified of the new partnership with 2 weeks to opt out of data sharing with said partner. Opting out of sharing data with a partner will not remove your data from the Supply Change platform. You will be still listed as a Trusted Supplier on the Supply Change platform, and your data will be visible to paying users of that site.

 

To advertise Supply Change

We use your data to help grow Supply Change. If you're a member of Supply Change, we share data with search engine, and other advertising platforms so that we stop asking you to join Supply Change, and instead show you content more relevant to you. We also share aggregated data with agencies that help us with advertising. For example, we might share with an agency how many of our social enterprise partners are based in London.

 

To communicate with you

In addition to sending you key information about your account by email, from time to time we'll also send you information about things we think will interest you. This includes letting you know who has viewed your profile, updates on our referral programme, membership events or new features. Where necessary, we share your data with organisations that send communications on our behalf. For example, we ask Mailchimp to send newsletters.

​

What data do we collect?

 

• Contact details such as telephone numbers, addresses, and email addresses

 

• Where they are relevant to our service, or where you provide them to us, we may process demographic information such as gender, age, date of birth, marital status, nationality, education/work histories, academic/professional qualifications, hobbies, family composition, and dependants.

 

How do we process your data?

It's important that you understand what we'll do with the data that we hold about you, as well as the lawful reasons we are allowed to do this. We may sometimes combine information that we collect from you with information we obtain about you from third parties and affiliates and information derived from any other subscription, product, or service we may provide.
 

 

For our legitimate business interests

This means that using your information is necessary for us to build our business and provide our services to you. We consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. Our legitimate interests include:

 

• Maintaining and improving our services: for example, we may use your information that we obtain through your emails and calls to train our team. We may also use your information to ensure that our services are working as intended – for example, understanding which parts of the website are easiest to use. We may also contact you for suggestions on how we can improve the way we provide our services to you.

 

• Providing personalised services: for example, we may use information to suggest potential buyers to you.

 

• Providing personalised advertising: we may let advertising platforms like Facebook and Google know that you are a member of Supply Change by sharing your contact details with them. This means we can stop asking you to join Supply Change once you're with us, and instead share information with you that we think you might be interested in.

 

• Communicating with you about our services: we may contact you about Supply Change news, product updates and new products that we think you might be interested in. We may also contact you to provide you with offers, competitions, marketing materials and other promotional materials, both online and through other marketing channels, such as third party social networks, like LinkedIn.

 

• Measuring our performance and developing new services: for example, we use data for measurement to understand how our services are used. We also use aggregated data to understand our members and their energy usage better. This helps us develop offerings such as our Annual Impact Report.

 

• Helping to prevent and detect fraud or debt: we also need to be able to detect and prevent fraud and recover unpaid bills.

If you have questions about the lawful basis on which we collect and use your information, you can email our Data Protection Officer at verena[at]supplychange.co.uk

​
 

Sharing your information
 

When we share your information
 

We sometimes need to allow our service providers to process personal information we hold about you on our behalf for the reasons set out in this Policy or as otherwise required by law. We make sure that these third parties won't use your personal data for their own purposes and we only permit them to use it in accordance with our instructions and the law. This includes the following types of organisations:

 

• Trusted businesses or persons: who process your information for us for the purposes set out above, based on our instructions and as set out in our Privacy Policy and any other appropriate confidentiality and security measures. For example, we use service providers to help us with member support or payment processing.

 

• Industry partners: including other suppliers, network operators and market administrators.

 

• Marketing agencies, search engines and social media networks: to advertise Supply Change and to gather feedback on Supply Change such as through customer surveys.

When you share your own information
 

Sometimes you may share your information publicly. Remember, when you share information publicly it may become accessible through search engines.

Sending your data outside the European Economic Area

Sometimes our agents and service providers are based outside the European Economic Area, so when working with them, we may pass your information outside of the European Economic Area to countries that do not have the same data protection standards as the UK. If we do this, we will ensure that any information will be protected in line with this Privacy Policy. Some of the safeguards we rely on to share your information outside the European Economic Area include ensuring that the supplier has, if in the USA, certified to the Privacy Shield.

You're in control

If we collect or handle your personal data, you have rights as an individual which you can exercise in relation to the information we hold about you:

 

• To correct or update your personal information, you can email us on hello[at]supplychange.co.uk.

 

• To delete your personal information, you can email us hello[at]supplychange.co.uk. We will delete any information that we no longer need to hold, but we won't always be required to do this. For example, we may need to hold your information to continue to provide your energy under our contract. If this is the case, we'll explain why.

 

• To ask us to restrict processing of your personal information or transfer your personal information to a different organisation, you can email us at hello[at]supplychange.co.uk.

 

• To confirm if we are using your personal information or get access to all your personal information that we hold, in an easy to understand, portable and secure format, you can email us hello[at]supplychange.co.uk with the subject line "Subject Access Request".

 

• To object to the processing of your personal information, you can email us at hello[at]supplychange.co.uk

 

• To withdraw consent to process your data, you can email us hello[at]supplychange.co.uk at any time.

 

• To opt-out of marketing communications you can email us hello[at]supplychange.co.uk
  
   

Keeping your information secure
 

Whilst we cannot ensure or guarantee that unauthorised access to or unauthorised alteration, disclosure or loss of information will never occur, we work hard to prevent it. In particular:

 

• We use encryption to keep your data private while in transit.

 

• Your account information is protected for your privacy and security. Either this is through a password you have chosen or you can log-in to your account directly with your email address. Supply Change and our agents will never ask for your password.

 

• To help keep your account and your personal information secure you should not disclose your password details to anyone. You should also make sure your Supply Change account password is different from your email address password. We recommend you change your passwords from time to time.

 

• We review our practices for collecting, processing and storing personal information, including physical security measures, to guard against unauthorised access to systems and backups to prevent the loss of information. We will continue to enhance our security procedures as new technology becomes available.

 

• We restrict access to personal information wherever possible to people who need to know that information to process it and who are subject to contractual confidentiality requirements.
   

Retaining and holding your information
 

We keep the personal information we collect for no longer than is necessary for the purposes for which we collected it. The length of time depends on the purposes for which we use it, or otherwise to meet our legal obligations.

We will delete any information as soon as we no longer have a valid reason to hold it. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Contact us
 

You can get in touch about anything in this Policy by emailing us and our Data Protection Officer at verena[at]supplychange.co.uk

​

About this Policy
 

When this Policy applies:

For the purposes of this Policy, "we", "us", "our" and "Supply Change" means Supply Change Lt. Unless otherwise stated, Supply Change is the Data Controller for your personal data.

This Policy applies to how we use your information in relation to our products and services generally.

This Policy doesn't apply to other companies' sites that you get to through our website or social media pages. So make sure you've read their policy before putting your personal information on their site.

 

Changes to this Policy
 

We may change this Policy at any time. If we make any changes, we'll post them on this page. If they're substantive changes, we'll also have a more prominent notice letting you know. You can also email or write to us for a physical copy.

Your continued use of our services will mean that you accept and agree to any changes to the Privacy Policy.

Last updated: The Policy was last updated on 01.02.2021.