1. Who We Are

We are Vester Energy Limited, registered in England and Wales (Company Number: 15022503), with a registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Vester Energy Limited is registered with the Information Commissioner’s Office as a data controller.

We act for you under a Letter of Authority that you sign. That letter appoints Vester Energy Limited to obtain information about your energy supplies and to act on your behalf in dealing with the parties that hold it, including your current and previous suppliers, your gas shipper and transporter, your network operator, your meter operator, data collector and data aggregator, and the central industry data services that hold records for your meters. It also lets us request quotations and negotiate on your behalf. The letter sets out in full what you are authorising, and you can withdraw it at any time by writing to operations@vester.energy.

Vester Energy Limited is the Data Controller for all personal data it collects and uses under that letter and for its own purposes. This includes lead-capture details you submit through our website or forms, such as your name, business email address, company and postcode; the meter and consumption data we use to analyse your energy, including your meter point number (MPAN), Estimated Annual Consumption (EAC) and half-hourly consumption data; the account, contract, billing and connection information we obtain from the parties listed above; email addresses we hold to send marketing communications where you have consented; and the billing details of sole traders and other unincorporated customers. For all of this we decide why and how your data is used.

If you decide to take an energy contract, it may be arranged through a supplier we deal with directly, or through a partner organisation on our panel. Where a partner is involved, that partner will ask you to sign its own Letter of Authority naming it. That partner is a separate Data Controller with its own privacy notice, and it is responsible for the data it holds about you. We tell you which route applies before you sign anything, and we share personal data with a partner only to the extent needed to arrange and administer your contract.

2. How We Collect Personal Data

We collect personal data:

Directly from you when you complete forms, contact us, or request our services.
Automatically through your use of our website, including technical and usage data.
From your suppliers, network operator, meter operator, data collector, data aggregator, industry data services and other parties holding records about your supplies, where you have authorised us to obtain it under a Letter of Authority.
From a partner organisation you have appointed under its own Letter of Authority, where it shares information with us to deliver the service you have asked for.

3. Types of Personal Data We Process

Depending on your interaction with us, this may include:

Contact details such as name, business email address, phone number, and job title.
Technical data such as IP address, browser type, and session activity.
Records of consent and communication preferences.
Communications, including emails and form submissions.
Meter and consumption data, such as your meter point number (MPAN), Estimated Annual Consumption (EAC), and half-hourly consumption data, which shows how your sites use energy across the day.
Postcode, and, where you are a sole trader or other unincorporated business, your billing address.
Account, contract and billing information obtained from your suppliers, such as account numbers, contract end dates, tariffs, charges, copy bills and payment history.
Connection and metering information obtained from your network operator and metering agents, such as agreed capacity, connection voltage, charging band, recorded demand and metering configuration.

Where you deal with us as a sole trader or other unincorporated business, information about your business, including business contact, meter, consumption and billing details, is treated as your personal data under UK data protection law.

We use cookies and similar technologies to operate our website and understand how it is used. You can manage cookies through your browser settings.

4. Why We Process Personal Data

We process personal data in order to:

Respond to enquiries and provide our services.
Act on your behalf under your Letter of Authority, which includes obtaining information about your supplies, requesting quotations, negotiating terms, and dealing with billing queries, metering and connection matters.
Arrange and administer an energy contract, whether directly with a supplier or through a partner organisation you appoint.
Analyse how your sites use energy, including your half-hourly consumption data, to match tariffs and model options such as solar and battery.
Operate, maintain, and improve our website and systems.
Meet legal, regulatory, and record-keeping obligations.
Send service-related communications and, where consent has been given, marketing updates.

5. Legal Basis for Processing

Our lawful bases for processing include:

Performance of a contract, or taking steps at your request before entering a contract. This covers acting under your Letter of Authority, including obtaining information about your supplies from the parties holding it and sharing what is needed to obtain quotations.
Consent, which you give by ticking the marketing opt-in box on our forms, as our basis for sending you marketing emails. You can withdraw that consent and unsubscribe at any time. This is consistent with our obligations under the Privacy and Electronic Communications Regulations (PECR).
Compliance with legal or regulatory obligations.
Our legitimate interests in operating and improving our services, and the legitimate interests of suppliers, network operators and metering agents in responding to an authorised request about a supply, where those interests are not overridden by your rights.

We may share personal data with:

Suppliers, network operators, meter operators, data collectors, data aggregators and industry data services, where we contact them under your Letter of Authority. We share only what identifies you and your supplies well enough for them to respond.
Partner organisations on our panel, where a contract is arranged through one. Before you sign that partner’s own Letter of Authority we share only what is needed to obtain an indicative price and usage model: your business address, MPAN, EAC and half-hourly consumption data. Once you sign it, we may share further personal data to arrange and administer your contract.
The Energy Ombudsman, where a complaint about our services is referred to it under the dispute resolution scheme we belong to. We share the complaint file and the records needed to answer it.
Trusted service providers such as IT, CRM, and analytics platforms.
Legal or regulatory authorities where required by law.
Other parties where you have given explicit consent.

We do not sell personal data and we do not permit third parties to use it for their own marketing purposes.

7. Your Data Rights

Under UK data protection law, you have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Request erasure of your data, subject to legal obligations.
Object to or restrict certain processing.
Withdraw consent at any time where processing relies on consent, including unsubscribing from marketing emails using the link in any marketing email or by emailing team@vester.energy.
Lodge a complaint with the Information Commissioner’s Office (ICO).

To exercise these rights, contact us at team@vester.energy. You also have the right to raise a complaint with the Information Commissioner’s Office (www.ico.org.uk).

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy.
Where you ask us for a quote but do not proceed, we and our providers retain the data shared to produce that quote (including your MPAN, EAC and half-hourly consumption data) only for as long as needed to provide and follow up on it, and then delete or anonymise it.
Information we obtain under your Letter of Authority is retained for the life of that authority and for six years afterwards, which matches the period over which a supplier or network operator can correct a charge.
Records of a complaint, including anything referred to a dispute resolution scheme, are retained for six years from the date the complaint closes.
Some information may be retained for longer periods where required by law, regulation, or for legitimate business purposes such as audit and compliance.

Saved TrueCost dashboards

When you use our TrueCost tool, we read the details from the bill you give us and build a dashboard from them. We keep that information, the figures read from your bill and the dashboard we build from them, so you can return to your readout at a stable link and so we can carry on the conversation with you. We do not keep the original bill file. It is deleted once we have read the figures from it.

Where you ask for a readout but do not go ahead, we keep the saved dashboard for 6 months, then delete it.
Where you become a customer, we keep it for the length of our relationship and for 12 months after it ends.
You can ask us to delete your saved dashboard at any time, and we will do so within one month.
We keep anonymised benchmark figures, which do not identify you or your business, indefinitely, so we can track how the market moves over time.

9. International Data Transfers

Some of our service providers may process data outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent protections.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including access controls, encryption, and staff training. While no system is completely secure, we take reasonable steps to reduce risk.

11. Third-Party Links

Our website may contain links to third-party sites. Their privacy practices are governed by their own privacy notices.

12. Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 16.

Updates to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected on this page, and the ‘last updated’ date will be revised accordingly.

Contact Us

For privacy-related questions or to exercise your data rights, email team@vester.energy or write to 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

This policy reflects our commitment to clarity, proportionality, and compliance with UK data protection law.