Last updated: 3 August 2026
1. Introduction
Enava Energy Ltd respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you:
- visit our website;
- contact us or request a quotation;
- subscribe to our market updates or other communications;
- use our energy procurement, consultancy or account management services;
- communicate with us as a customer, prospective customer, supplier or business contact.
This policy also explains your rights under the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable privacy and electronic communications laws.
2. Who We Are
Enava Energy Ltd is the controller responsible for the personal information described in this policy.
Company name: Enava Energy Ltd
Company number: 16489562
Registered office: Artisans’ House, 7 Queensbridge, Northampton, Northamptonshire, NN4 7BF
Telephone: 01604 902 900
Email: james@enava.energy
Website: www.enava.energy
When this policy refers to “Enava Energy”, “we”, “us” or “our”, it means Enava Energy Ltd.
3. Personal Information We Collect
The personal information we collect will depend on how you interact with us.
Identity and contact information
This may include:
- your name;
- job title and role;
- business or organisation name;
- business address;
- email address;
- telephone number;
- correspondence address.
Business and energy supply information
When you request a quotation or use our services, we may collect information including:
- site and supply addresses;
- existing energy supplier details;
- contract start and end dates;
- electricity and gas usage information;
- meter numbers and supply identifiers, including MPANs and MPRNs;
- billing and account information;
- tariff, pricing and consumption information;
- information about your business premises, portfolio or energy requirements;
- sustainability, renewable energy or ESG requirements;
- documents required to obtain quotations or manage an energy contract.
Some of this information may relate primarily to a business. However, it may still constitute personal information where it identifies a sole trader, partner, director, employee or other individual.
Enquiry and communication information
This may include:
- information submitted through our website forms;
- emails, letters and other correspondence;
- notes of telephone calls, consultations and meetings;
- quotation requests;
- complaints, queries and feedback;
- records of the services and support we provide.
Marketing information
This may include:
- whether you have subscribed to our market reports or newsletters;
- your marketing and communication preferences;
- records of whether you have opened or interacted with an email, where this functionality is used;
- records of consent, unsubscribe requests and marketing objections.
Technical and website information
When you visit our website, we may collect:
- your IP address;
- browser type and version;
- device type;
- operating system;
- approximate location derived from your IP address;
- pages visited and links selected;
- referral source;
- date, time and duration of visits;
- cookie identifiers and consent preferences;
- information needed to protect the website against misuse, fraud or security threats.
4. How We Collect Personal Information
We may collect personal information:
Directly from you
For example, when you:
- complete a contact or quotation form;
- subscribe to our market reports;
- contact us by telephone or email;
- provide information during a consultation;
- enter into an agreement with us;
- ask us to manage an energy contract or supplier relationship.
From your organisation
Your employer, colleague, business partner or another representative may provide your contact details where you are the appropriate person for us to communicate with.
From third parties
We may receive relevant information from:
- energy suppliers;
- network operators and metering organisations;
- energy industry intermediaries and service providers;
- consultants, installers and professional advisers;
- existing customers or referral partners;
- publicly available sources, including Companies House and business websites;
- analytics, security and website technology providers.
Automatically
Technical and usage information may be collected through cookies and similar technologies when you use our website.
5. How and Why We Use Your Information
We will only use personal information where we have a lawful basis for doing so.
Responding to enquiries and providing quotations
We use your information to:
- respond to questions and enquiries;
- understand your energy requirements;
- arrange consultations;
- prepare and present quotations;
- compare suitable suppliers, tariffs and services.
Our lawful basis is taking steps at your request before entering into a contract. Where you are acting on behalf of an organisation, we may rely on our legitimate interests in responding to business enquiries and developing our services.
Delivering and managing our services
We use information to:
- provide energy procurement and consultancy services;
- submit information to selected suppliers;
- arrange energy contracts and supplier switches;
- manage contract renewals and important dates;
- communicate with suppliers on your behalf;
- assist with billing, metering or contractual queries;
- provide ongoing account management and support;
- help you evaluate renewable energy and efficiency options.
Our lawful basis is the performance of a contract or taking steps before entering into a contract. Where our contract is with your employer or organisation rather than with you personally, we rely on our legitimate interests in delivering the agreed services and communicating with the relevant business representatives.
Managing our business relationship
We may use information to:
- maintain customer and supplier records;
- manage accounts and administration;
- issue and process invoices;
- communicate service information;
- deal with complaints and disputes;
- review and improve our customer service.
Our lawful bases are contractual necessity, compliance with legal obligations and our legitimate interests in operating and improving our business.
Marketing and market updates
We may use your contact information to send:
- energy market reports;
- newsletters;
- service updates;
- relevant information about energy procurement, efficiency or renewable energy;
- invitations to consultations, meetings or events.
Where required, we rely on your consent. In some business-to-business circumstances, we may rely on our legitimate interests where the communication is relevant to your professional role and is permitted by applicable electronic marketing laws.
You can unsubscribe at any time by selecting the unsubscribe option in an email or by contacting us.
Website operation, analytics and security
We may use technical information to:
- operate and maintain our website;
- remember your cookie preferences;
- understand how visitors use the website;
- improve its performance, content and usability;
- detect security incidents, misuse and malicious activity;
- diagnose technical problems.
We rely on our legitimate interests for essential website operation, security and service improvement. We rely on consent before using non-essential analytics, advertising or similar cookies where consent is required.
Legal and regulatory purposes
We may process information to:
- maintain records required by law;
- comply with tax, accounting and regulatory requirements;
- respond to valid requests from courts, regulators or public authorities;
- establish, exercise or defend legal claims;
- prevent and investigate fraud or other unlawful activity.
Our lawful bases are compliance with legal obligations and our legitimate interests in protecting our business and legal rights.
6. Providing Your Information
You are not normally required to provide personal information simply to browse our website.
However, certain information will be necessary where you ask us to provide a quotation, arrange an energy contract or manage services on your behalf. Without that information, we may be unable to provide the requested service.
Subscribing to marketing or market updates is optional, and you may withdraw your consent or unsubscribe at any time.
7. Who We Share Personal Information With
We may share personal information where necessary with:
- energy suppliers and procurement partners;
- electricity and gas network operators;
- metering, data collection and industry service providers;
- renewable energy, solar, voltage optimisation or energy-efficiency partners where you have requested those services;
- IT, website hosting, cloud storage, CRM and cybersecurity providers;
- email and newsletter service providers;
- analytics and website performance providers, subject to your cookie preferences;
- accountants, solicitors, insurers and other professional advisers;
- regulators, courts, law-enforcement bodies and public authorities where legally required;
- prospective purchasers, investors or advisers in connection with a sale, restructuring or transfer of our business.
We only provide recipients with the information reasonably necessary for the relevant purpose.
Where we introduce you to or obtain a quotation from an energy supplier, that supplier may process your information as an independent controller under its own privacy policy.
We do not sell personal information to third parties.
8. International Transfers
Some of the technology and service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to protect it. These may include:
- transferring information to a country recognised as providing an adequate level of protection;
- using approved contractual safeguards, such as the UK International Data Transfer Agreement or an applicable UK Addendum;
- implementing additional technical and organisational safeguards where appropriate.
You may contact us for further information about the safeguards used for international transfers.
9. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Our usual retention periods are:
- General enquiries and unsuccessful quotations: normally up to 24 months after our last meaningful contact.
- Customer, supplier and contract records: for the duration of the relationship and normally for up to six years afterwards.
- Financial and accounting records: for the period required by applicable tax and accounting laws.
- Complaints and legal disputes: for as long as necessary to resolve the matter and establish or defend legal claims.
- Newsletter and marketing records: until you unsubscribe, withdraw consent or we determine that the information is no longer current.
- Marketing suppression records: we may retain limited information to ensure that we continue to respect an unsubscribe request.
- Cookie and analytics information: for the periods described in our cookie settings or Cookie Policy.
We may retain information for longer where required by law, regulation, an insurance requirement or an ongoing legal dispute.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Strictly necessary cookies may be used without consent where they are required to operate the website, maintain security or remember your privacy preferences.
We will request your consent before using non-essential cookies, such as analytics or advertising cookies, where required by law.
You can accept, reject or manage non-essential cookies through the cookie banner or Cookie Settings facility on our website. Withdrawing consent will not affect the lawfulness of processing that occurred before consent was withdrawn.
Further information about individual cookies, their providers, purposes and durations should be provided in our Cookie Policy or cookie preference centre.
11. Marketing Communications
You have the right to object to the use of your personal information for direct marketing at any time.
You can stop receiving marketing communications by:
- using the unsubscribe link included in an email;
- changing your communication preferences where that option is available;
- emailing james@enava.energy;
- calling 01604 902 900.
Service messages concerning an existing quotation, contract, account or requested service are not marketing communications and may still be sent where necessary.
12. Data Security
We use appropriate technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- alteration or destruction;
- improper disclosure;
- misuse.
Access to personal information is restricted to employees, contractors and service providers who require it for legitimate business purposes. Those parties are required to handle the information securely and confidentially.
No internet transmission or storage system is completely secure. Although we take reasonable steps to protect information, we cannot guarantee absolute security.
13. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request erasure of your information where there is no lawful reason for us to continue holding it.
- Request restriction of how we use your information.
- Object to processing based on our legitimate interests.
- Object to direct marketing at any time.
- Request data portability where processing is based on consent or contract and carried out by automated means.
- Withdraw consent where we rely on consent.
- Complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.
These rights are not absolute and may be subject to legal exemptions.
To exercise a right, contact us using the details in Section 2. We may ask for information to verify your identity before responding.
You will not normally have to pay a fee. However, we may charge a reasonable fee or refuse a request where permitted by law, including where a request is manifestly unfounded or excessive.
14. Automated Decision-Making
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
Our technology may assist us in comparing tariffs or presenting available options, but recommendations and contractual decisions involve human input and are subject to supplier requirements.
15. Children’s Information
Our website and services are intended for businesses and are not directed at children.
We do not knowingly collect personal information from children through the website. Please contact us if you believe that a child has provided personal information to us.
16. Third-Party Websites
Our website may contain links to websites operated by energy suppliers, professional partners or other third parties.
We do not control those websites and are not responsible for their privacy practices. We recommend reviewing the privacy policy of any third-party website before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or the way we use personal information.
The latest version will be published on this page, together with the date on which it was last updated. Where a change materially affects how we use personal information, we will take reasonable steps to bring it to the attention of affected individuals.
18. Contact Us
Questions, concerns and requests concerning this Privacy Policy or the way we handle personal information should be directed to:
Enava Energy Ltd
Artisans’ House
7 Queensbridge
Northampton
Northamptonshire
NN4 7BF
Email: james@enava.energy
