LR Energy Ltd is committed to a policy of protecting the rights and privacy of individuals in accordance with the Data Protection Act 1998 (‘the Act’.) and GDPR 2018.

The Act lays down regulations and safeguards for the collection, recording, and use of personal information whether on paper, in a computer, or recorded on other material. LR Energy Ltd needs to collect and use certain types of information about people with whom it deals in order to operate. These include employees, employment applicants, customers, board members, suppliers, and others with whom it communicates. Certain information may be required for regulatory or monitoring purposes as laid down by statute. Other information may be required for the purpose of establishing a contract. In any case, LR Energy Ltd recognises that the information must be dealt with lawfully and correctly under the principles laid down within the Act.

LR Energy Ltd ensures that:

Conditions regarding the fair collection and use of information are fully observed.
The legal obligations to specify the purposes for which information is used are met.
Appropriate information is collected and processed only to the extent to which it is needed.
Information used is accurate.
Information is regularly reviewed and updated or destroyed accordingly.
Data subjects are able to fully exercise their rights under the Act. (Including the right to be informed that processing is being undertaken, the right of access to one’s personal information, the right to prevent processing in certain circumstances, and the right to correct, rectify, block, or erase information which is regarded as incorrect.)
Appropriate technical or organisational security measures are taken to safeguard personal information.
Personal information is not transferred abroad without suitable safeguards.
LR Energy Ltd will have a set of systems and procedures in place to ensure that the requirements of the Data Protection Act 1998 and GDPR 2018 are delivered.

These will involve ensuring that:

An individual is nominated with specific responsibility for Data Protection in the organisation (currently this is the Managing Director).
Everyone who manages or handles personal information understands that they are contractually responsible for following good data protection practice outlined in this policy.
Everyone who manages or handles personal information is appropriately trained to do so and is adequately supervised.
Anyone wanting to make enquiries about handling personal information knows what to do.
Queries about handling personal information are promptly and courteously dealt with.
Methods of handling personal information are regularly assessed and evaluated as a performance area.
Energy Companies Obligation
If you are applying for a grant through the Energy Companies Obligation Scheme, we will also need to share some of your information with Ofgem and some relevant third parties.

Some or all the information that you have provided to us (your ‘personal’ information) may be disclosed to Ofgem as Administrator of the Energy Companies’ Obligation (ECO). Ofgem is the Office of the Gas and Electricity Markets. Further information about Ofgem can be found at http://www.ofgem.gov.uk. Ofgem may use your personal information to determine whether a supplier is achieving its obligations under ECO and to comply with its own statutory duties. Ofgem is required to disclose your personal information to the Secretary of State. Ofgem may seek to verify your personal information by contacting you directly or by checking it against Government records.

If you would like to know more about what information Ofgem holds about you, or the way it uses your information, full details of Ofgem’s ECO Privacy Policy can be found at: