Privacy policy
At YES Utility, we are committed to protecting the privacy and security of your personal data. This privacy policy explains how we collect, use, and safeguard your information in accordance with the UK GDPR.

Data collection: what we gather
We collect several types of personal data from users to provide and improve our services. This includes:
- Names: To personalise your experience and address you correctly.
- Email Address: To communicate with you about your account and services.
- Telephone: To contact you for support and service updates.
- Site Address: To determine your energy needs and connect you with suitable utility providers.
- Utility Invoice: To analyse your energy consumption and provide cost-saving recommendations.
We ensure that all data collection is compliant with UK GDPR regulations, providing you with transparency and control over your personal information.

How we use your data
At YES Utility, we use your data to enhance your experience and provide tailored energy solutions. Here's how:
- Providing and Managing Services: Setting up and managing your account, connecting you with utility providers, processing payments, providing customer support, resolving disputes.
- Personalization: Personalizing your experience on our website and tailoring our services to your needs.
- Communication: Sending you service updates, important notices, and marketing communications (with your consent).
- Improving Our Services: Analyzing website usage data to improve our website and services, conducting research and development.
- Legal Compliance: Complying with applicable laws and regulations, responding to legal requests.
- Fraud Prevention: Detecting and preventing fraud and other illegal activities.
- Profiling (Limited): We may use automated profiling to suggest suitable utility plans based on your consumption data and property information. You have the right to object to this profiling.

Protecting your data
At YES Utility, we take the security of your personal data seriously. We implement robust technical and organizational measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction. Our security measures include:
- Encryption: Encrypting sensitive data both in transit and at rest to prevent unauthorized access.
- Access Controls: Restricting access to personal information to authorized personnel only, ensuring that only those who need the data can access it.
- Regular Security Assessments: Conducting regular security assessments to identify and address vulnerabilities, keeping our systems up-to-date and secure.
- Data Breach Procedures: Implementing procedures to respond to data breaches in a timely manner, minimizing potential damage and notifying affected parties as required by law.
Data sharing
YES Utility is committed to maintaining your trust and protecting your personal data. We only share your information with trusted partners under strict conditions, ensuring your data is handled with the utmost care and in compliance with UK GDPR.
We may share your personal information with the following categories of recipients:
- Utility Providers: We share your information with utility providers to connect you with their services.
- Service Providers: We share your information with third-party service providers who assist us with providing our services (e.g., payment processors, IT support, marketing agencies). We have contracts in place with these providers to ensure they protect your data in accordance with UK GDPR.
- Legal Authorities: We may disclose your information to legal authorities if required by law.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.
We will only share your data with third parties who are also compliant with UK GDPR.
