Privacy policy

1. Who we are

Openlight Ltd, trading as Openlight, is a company registered in England and Wales under company number 17361688. Our registered office is 124-128 City Road, London, England, EC1V 2NX.

We are the data controller for the information described in this policy. For any privacy question, or to exercise any of the rights in section 9, contact hello@openlightenergy.co.uk.

2. Information we collect

• Names and business contact information
• Account sign-in details, such as your email address
• Telephone numbers, email addresses and business addresses
• Energy account information, bills and contract documents
• Meter and supply identifiers, and consumption information
• Correspondence with us, including complaint information

We do not run analytics. The only cookies we set without asking are the essential sign-in cookies. On our Climate Change Levy campaign page, and only if you accept, Google Ads records whether your visit from one of our ads led to an enquiry. Section 11 explains both.

3. How we collect it

Most information reaches us directly from you — when you create an account, upload a bill, forward a supplier email to your Openlight address, request an email follow-up about Climate Change Levy, or contact us. We may also receive information from partners and energy suppliers where you have asked us to act, or authorised them to share it.

The CCL check keeps your business name, activities and approximate monthly energy costs in memory in your browser. If you separately request an email follow-up, we send those answers, your email address and the versioned savings illustration (if shown) to Openlight. We store the enquiry and calculation assumptions securely, and notify our team through our email provider, Resend. The request does not subscribe you to marketing or authorise us to contact your supplier. No bill is collected in the CCL flow. When you request energy quotes, we save the details you submit and any bills you choose to upload in private storage. The quote form keeps a temporary draft in this browser tab so you can go back or refresh; you can clear it by closing the tab.

4. Why we use it

• Responding to enquiries and developing customer relationships
• Providing requested services, checking bills and obtaining energy quotations
• Administering contracts and maintaining our records
• Managing complaints
• Meeting our legal obligations
• Improving our service, and preventing fraud and misuse
• Measuring whether our advertising leads to enquiries, where you accept it

5. Our lawful bases

Depending on the purpose, we rely on one or more of the following lawful bases: your consent; performance of a contract with you; steps taken at your request before entering into a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our service, where those interests are not overridden by your rights.

6. Who we share it with

We share information only where it is necessary for the purposes above. Recipients may include energy suppliers and master brokers acting on your instructions, our technology, email and document-processing providers, Google (for ad measurement, only where you accept it), professional advisers, regulators and alternative dispute resolution providers, and government or law-enforcement bodies where we are required to do so.

We do not sell personal information, and we do not share it for third-party marketing.

7. International transfers

Where a service provider processes information outside the UK, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or an adequacy decision — so that your information remains protected to UK standards.

8. How long we keep it

We keep information for as long as needed for the purpose it was collected for, and then for as long as we are required to retain it — for example to meet legal, regulatory, accounting or dispute-resolution obligations. Complaint records are retained in line with our complaints policy and are available to an ADR scheme or to Ofgem on request.

9. Your rights

Subject to the conditions in data protection law, you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Ask us to delete information, or to restrict how we use it
• Object to processing based on our legitimate interests
• Receive certain information in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these, contact hello@openlightenergy.co.uk.

10. Security

We use appropriate organisational and technical controls to protect information against unauthorised access, loss or misuse, and we limit access to those who need it to do their work.

11. Cookies and analytics

When you sign in, we set essential authentication cookies that keep you signed in; they are strictly necessary to provide the service, so they need no consent. Our Climate Change Levy page (openlightenergy.co.uk/ccl) asks whether you accept a Google Ads cookie. If you accept, Google Ads measures whether a visit from our ad led to an enquiry; we do not use it for personalised advertising. If you decline, the Google Ads script never loads. Our cookie notice lists these cookies. We run no analytics, the rest of the site loads no third-party scripts, and fonts are served from our own domain rather than a third-party service.

12. Changes to this policy

We may update this policy as our service develops. The date at the top of this page shows when it was last changed.