Privacy policy

1. Who we are

Openlight Ltd, trading as Openlight, is a company registered in England and Wales under company number 17361688. Our registered office is 124-128 City Road, London, England, EC1V 2NX.

We are the data controller for the information described in this policy. For any privacy question, or to exercise any of the rights in section 9, contact hello@openlightenergy.co.uk.

2. Information we collect

• Names and business contact information
• Account sign-in details, such as your email address
• Telephone numbers, email addresses and business addresses
• Energy account information, bills and contract documents
• Meter and supply identifiers, and consumption information
• Correspondence with us, including complaint information

We do not run analytics and we do not collect browsing information. The only cookies we set are the essential sign-in cookies described in section 11.

3. How we collect it

Most information reaches us directly from you — when you create an account, upload a bill, forward a supplier email to your Openlight address, or contact us. We may also receive information from partners and energy suppliers where you have asked us to act, or authorised them to share it.

4. Why we use it

• Responding to enquiries and developing customer relationships
• Providing requested services, checking bills and obtaining energy quotations
• Administering contracts and maintaining our records
• Managing complaints
• Meeting our legal obligations
• Improving our service, and preventing fraud and misuse

5. Our lawful bases

Depending on the purpose, we rely on one or more of the following lawful bases: your consent; performance of a contract with you; steps taken at your request before entering into a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our service, where those interests are not overridden by your rights.

6. Who we share it with

We share information only where it is necessary for the purposes above. Recipients may include energy suppliers and master brokers acting on your instructions, our technology and document-processing providers, professional advisers, regulators and alternative dispute resolution providers, and government or law-enforcement bodies where we are required to do so.

We do not sell personal information, and we do not share it for third-party marketing.

7. International transfers

Where a service provider processes information outside the UK, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or an adequacy decision — so that your information remains protected to UK standards.

8. How long we keep it

We keep information for as long as needed for the purpose it was collected for, and then for as long as we are required to retain it — for example to meet legal, regulatory, accounting or dispute-resolution obligations. Complaint records are retained in line with our complaints policy and are available to an ADR scheme or to Ofgem on request.

9. Your rights

Subject to the conditions in data protection law, you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Ask us to delete information, or to restrict how we use it
• Object to processing based on our legitimate interests
• Receive certain information in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these, contact hello@openlightenergy.co.uk.

10. Security

We use appropriate organisational and technical controls to protect information against unauthorised access, loss or misuse, and we limit access to those who need it to do their work.

11. Cookies and analytics

Openlight sets no analytics, advertising or third-party cookies. When you sign in, we set essential authentication cookies that keep you signed in; they are strictly necessary to provide the service, so no consent banner is required. Our cookie notice lists them. This site loads no third-party scripts, and fonts are served from our own domain rather than a third-party service.

12. Changes to this policy

We may update this policy as our service develops. The date at the top of this page shows when it was last changed.