Data Protection(GDPR)
Fourwalls Energy (“Fourwalls”, “we”, “us” or “our”) is committed to protecting personal information and complying with applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
This Data Protection Policy explains the principles and procedures we follow when collecting, using, storing and protecting personal information.
1. Our Data Protection Responsibilities
Fourwalls is responsible for ensuring that personal information is processed lawfully, fairly, securely and transparently.
We aim to ensure that personal information is only collected where there is a legitimate and clearly defined purpose and that information is not retained for longer than necessary.
2. Data Protection Principles
We follow the core principles of UK data protection law. Personal information should be:
- Data minimisation: adequate, relevant and limited to what is necessary.
- Accuracy: accurate and kept up to date where necessary.
- Storage limitation: kept only for as long as necessary.
3. Types of Personal Data
Depending on the services provided, we may process information including:
- Name and contact details.
- Property address.
- Information required for relevant funding or grant applications.
- Payment and transaction information where applicable.
We will not intentionally collect special category personal data unless there is a lawful reason and appropriate safeguards for doing so.
4. Lawful Processing
Personal information will only be processed where an appropriate lawful basis exists.
Depending on the circumstances, this may include consent, contractual necessity, legal obligation or legitimate interests.
5. Data Accuracy
We take reasonable steps to ensure that personal information we hold is accurate and appropriate for the purpose for which it is used.
- Prepare recommendations or proposals.
- Provide our services.
- Process payments where applicable.
- Monitor website performance.
6. Data Minimisation
We only seek to collect information that is reasonably necessary for the relevant business or service purpose.
For example, information requested during an assessment or enquiry should be relevant to understanding your property, arranging the service or assessing applicable options.
7. Data Security
We use appropriate technical and organisational measures to protect personal information.
Access to personal information should be limited to individuals and organisations that need the information to perform their role or provide an agreed service.
8. Third-Party Data Processors
Fourwalls may use third-party suppliers to provide services such as website hosting, email, CRM systems, appointment scheduling, IT support, payment processing, analytics and other business functions.
Where a third party processes personal information on our behalf, we will take reasonable steps to ensure that appropriate contractual and security arrangements are in place.