Skip to content
Switching Made Simple — business energy comparison

Privacy policy

This policy explains how Switching Made Simple Ltd handles personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Switching Made Simple Ltd is the data controller for the personal data described in this policy. We are registered in England and Wales with company number [COMPANY_NUMBER], registered office [REGISTERED_ADDRESS]. Our registration with the Information Commissioner's Office is [ICO_REGISTRATION_NUMBER]. You can contact us about data protection at [GENERAL_EMAIL] or by post at the address above.

2. What personal data we collect

  • Contact details — your name, business name, job role, email address, telephone number and business address.
  • Supply information — meter numbers (MPAN and MPRN), annual consumption, current supplier, contract end date, tariff details and copies of bills you send us.
  • Correspondence — records of emails, letters, web form submissions and notes or recordings of telephone calls.
  • Technical data — IP address, browser type, device information and pages visited, collected only where you have consented to analytics cookies.

We do not knowingly collect special category data, and we do not process data relating to children. Information about a sole trader's business may also constitute personal data, and we treat it as such.

3. How we use it, and our lawful basis

  • To obtain quotes and arrange contracts — necessary for the performance of a contract with you, or for taking steps at your request prior to entering into one.
  • To contact you about your enquiry — consent, where you have asked us to get in touch, or legitimate interests where you are an existing customer.
  • To send renewal reminders — legitimate interests in providing continuity of service to customers, which you may object to at any time.
  • To keep records and handle complaints — legal obligation and legitimate interests in defending our position.
  • Analytics — consent, given through our cookie controls.

4. Who we share it with

To obtain quotes we must share your business and supply details with energy suppliers on our panel. Each supplier acts as its own data controller for the data it receives. We also use service providers who process data on our behalf — for example email, telephony, document signing, hosting and customer records systems — under written contracts that restrict them to our instructions.

We may disclose data where required by law, by a regulator such as Ofgem or the ICO, or in connection with legal proceedings. We do not sell your personal data, and we do not share it with unrelated third parties for their own marketing.

5. International transfers

Our suppliers and processors are primarily UK-based. Where a processor stores or accesses data outside the UK, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with appropriate additional safeguards.

6. How long we keep it

Enquiries that do not lead to a contract are retained for up to 24 months so we can help if you come back to us, unless you ask us to delete them sooner. Contract and commission records are retained for seven years from the end of the contract to meet accounting and legal requirements. Complaint records are retained for six years from resolution. Call recordings, where made, are retained for up to 12 months.

7. Your rights

You have the right to be informed, and to request access to, rectification of, or erasure of your personal data. You may also restrict or object to processing, request data portability, and withdraw consent at any time where consent is our basis. Where we rely on legitimate interests, you can object and we will stop unless we have compelling grounds to continue.

To exercise any of these rights, email [GENERAL_EMAIL]. We will respond within one month. You have the right to complain to the Information Commissioner's Office at ico.org.uk, although we would ask you to raise it with us first through our complaints procedure.

8. Marketing

We contact you about business energy quotes and renewals only. Every marketing email contains an unsubscribe link, and you can ask us to stop telephoning you at any time by replying to any message or emailing [GENERAL_EMAIL]. We do not pass your details to other companies for marketing purposes.

9. Security

We use technical and organisational measures appropriate to the risk, including encrypted transport for our website, access controls on our systems, and staff confidentiality obligations. No transmission over the internet can be guaranteed completely secure, and you send information to us at your own risk.

10. Cookies

Our use of cookies is described in our cookie policy.

11. Changes to this policy

We may update this policy from time to time. The version published on this page is the current one, and material changes affecting existing customers will be notified by email.