Privacy Policy

It is important that you read this Notice so that you are aware of how and why we are processing your personal data and your rights.

Introduction

Enpaas Limited is a provider of Software as a Service (SaaS) products to energy market participants. The personal data we process is used to manage our commercial relationship with you and pursue our legitimate business interests.

We are the data controller of your personal data, and we are responsible for deciding how we process personal information about you. This Privacy Notice sets out how Enpaas Limited processes your personal data.

Any changes we may make to this Privacy Notice will be updated on our website and, where appropriate, notified to you in writing.

What data we hold?

We only process basic personal data. The personal data we process includes personal data of individuals representing the entity contracting to our service provision and any additional contacts on the account, including your first and last name, email address and telephone number.

Where do we get it from?

Your personal data is provided to us by you when:

• you contact us directly by phone or email
• you use our website, including our customer portal
• you visit our offices

What we use your data for?

We require your basic personal data to provide you with the services in accordance with the contract between us.

Your personal data may be used to pursue our legitimate business interests, provided that your legal rights do not override those interests, to keep you informed of products and services that are available from us or may be of interest where permitted by law, including via our social media and digital communications.

How data is stored?

All data is stored in a secure, password-protected and encrypted bespoke database.

Outside the UK and/or EU

Your personal data may be processed in other countries and regions. At all times your personal data will be subject to the terms of this Privacy Notice and appropriate technical and organisational security measures to prevent the loss of or unauthorised access to your personal data.

How long your data is retained for?

Your personal data will be kept for as long as necessary to fulfil the purpose for which it was obtained as outlined above or as required by current legislation.

Your rights
Data protection laws provide you, as an individual, rights to:

• Right of access – you can request access to your personal information (a data subject access request), so you can check what data we hold about you and are using it in accordance with the law
• Right to rectification – you can ask us to correct personal information that we hold about you
• Right to erasure – you can ask us to delete your personal data where there is no good reason for us to hold this data. You can also ask us to delete or remove your personal information where you have exercised your right to object to processing
• Right to restriction of processing – you can ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it
• Right to data portability – you can ask for a copy of the data we hold about you, in an accessible format and the right to transfer it, or to require us to transfer it directly, to another controller.
• Right to object to processing – you can object to the processing of your personal information and there is something about your particular situation which makes you want to object to processing on this ground.

No fee is required to claim any of these rights. However, we may charge a reasonable fee or refuse to comply if your request for access is considered to be unfounded or excessive.

You have the right to make a complaint at any time to the Information Commissioner’s Office. Their contact details are:
Telephone: 0303 123 1113
Email: casework@ico.org.uk
Post: Information Commissioners Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

However, please contact us in the first instance if you have any issue that you wish to discuss.

Contacting us

If you have any queries, comments or requests regarding this Privacy Notice you can contact us at dataprotection@enpaas.com.