Data privacy for customers
This page contains all the information you need to find out what data we may collect from
you and how and why we use it.
Last updated: August 2026
Privacy Notice
Utility Warehouse Limited has issued this Privacy notice (“Notice”) on behalf of itself and its affiliates within the Utility Warehouse group (“Utility Warehouse”, “us”, or “we”) to describe how we handle personal data that we hold about our customers.
This Privacy Notice applies to our customers, users of our products and services, to our prospective customers who have shown an interest in our products and services and to anyone that interacts with us, such as by browsing our website (“you”).
This Privacy Notice tells you who we are, how we collect, share and use your personal data, and how you can exercise your privacy rights. It applies to personal data that we use to provide you with our products and services (including when you show an interest in these) and personal data which we collect through our website or other communications with you. If we change the way we handle your personal information, we’ll update this Privacy Notice and you’ll be able to see the changes here.
Please take a moment to read this Privacy Notice so that you understand how we use your personal data. Use the links on the left to navigate to a particular section.
Whilst UK data protection laws are referenced in this Notice, where this Notice applies to subsidiaries or affiliated companies located in other jurisdictions, the local laws in those jurisdictions shall apply to the extent they differ from UK data protection laws.
If you have any questions or concerns about our use of your personal data, then please contact us at [email protected]. You can also write to us at: Privacy Team, Utility Warehouse Ltd, 508 Edgware Road, The Hyde, London, NW9 5AB.
The data controller of your personal data is Utility Warehouse Limited, which is registered with the Information Commissioner’s Office (“ICO”) with registration number ZA243042 and/or one of its affiliates within the Group.
We’re Utility Warehouse, a multi-utility supplier based in the United Kingdom. We supply people and businesses with utility, household and financial products and services, including gas, electricity, broadband, fixed line telephony, mobile and insurance.
To provide our services we are affiliated with a group of companies (the Group’), including:
Electricity Plus Supply Limited;
Gas Plus Supply Limited;
Telecom Plus PLC;
Telecommunications Management Limited;
Utilities Plus Limited;
Utility Warehouse Limited;
Utility Debt Collectors Limited; and
1p Mobile Limited.
This list of companies will be updated from time to time to reflect any changes.
We collect your personal data when you contact us, when you use our websites, when you sign up to one of our services or take out one of our products, and as part of our ongoing provision of products or services. When collecting your personal data, we’ll always make clear to you which information is necessary in connection with a particular product or service.
We collect different types of personal data depending on our relationship with you and the products or services we provide to you. Broadly, these types of personal data include:
Information about you
Your name, gender, date of birth, email address, telephone number, mobile number, spoken language(s), billing/delivery/supply address, orders and receipts, home ownership status, a record of the products and services that we provide to you, other information that may be required to check your identity, and audio-visual or audio footage of you / and your premises.
Financial information
Method of payment
Bank account(s); debit/credit card(s); and direct debit details
Payment performance
Your financial circumstances, any unpaid bills / debt; any payment plans in place
We are PCI (Payment Card Industry) compliant, meaning we follow the industry security standard.
Service and usage information
Energy (gas and electricity): Energy usage information, such as amounts and times of energy consumption; Your meter point number; Information about the state and safety of your boiler during the meter installation;
Mobile: Call data records, such as who contacted you, who you contacted, when the contact took place, the duration and your location when you used your mobile device; Similar information is recorded for data consumption while using your mobile device; Type of device consuming data; to identify you when you call our Customer Service number;
Phone and broadband: Call data records, such as who you contacted, when the contact took place, and call duration; to identify you when you call our Customer Service number;
Insurance: Data required to rate the risk of the insurance product you choose, such as information about your house and household (such as number of occupants), joint policy holders’ possessions, and your claims history;
Cashback scheme: Information about the amount you spend and the retailers you use;
Faults: Information about your home network, meter or usage patterns in order to fix the fault.
Marketing and communications information: Preferences (your marketing preferences and whether you want to hear from us or third parties we work with;
Surveys: When you choose to complete any surveys we send you, we will receive the information you volunteer about your use of or interest in our products or services.
Technical information
Information such as: IP address, device type, unique device identification numbers, device names (if you have a UW router), browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We also track how your device has interacted with our website by using cookies – see Section “Cookies and other similar tracking technologies” for more information.
Service Communications
The content of your communications with us, including emails, letters, webchats and phone calls.
Sensitive personal data
Some of the information you provide may include sensitive personal data. You may provide this voluntarily, or we may need to collect it from you. Where we need to collect this information, we will let you know our legal grounds for doing so (at the point we collect this information. In some (limited) circumstances we will obtain your consent.
Sensitive personal data we collect may include:
Health-related information;
Information about your race or ethnicity;
Vulnerability information, for example if you have a health condition or disability;
Information related to criminal convictions, for example if you apply for our Insurance products.
Information we receive from third parties
Sometimes we will collect personal data from third parties. We use this information to provide you with our products and services, and as otherwise necessary to run our business.
This can include:
Verifying your creditworthiness with a credit reference agency. If you are a new UW customer, or an existing customer taking additional product(s) or service(s), you may be subject to checks using an external credit reference agency (“CRA”). Such checks may form a “footprint” on your credit file that may be visible to other organisations. The CRA will provide us with your credit information, such as your credit score and any judgments against you, which will allow us to assess your ability to pay our bill(s) and to ensure we set up the most appropriate payment terms for you;
Validating and verifying your bank account details;
Checking the land registry to find out who is responsible for the energy bill at a property;
When you’ve given a third-party permission to share with us the information they hold about you. For example, your previous telephone, broadband, mobile or energy supplier;
Information our suppliers or partnered companies provide us about the product or service you have purchased;
The Partner who signed you up as a customer or the Partner who looks after your account with us;
A third party who you have authorised to manage your account with us on your behalf (an “Authorised Third Party”);
Information from preference service providers, such as the TPS, CTPS and FPS;
When you move into a property supplied by us, the landlord or previous occupiers may provide us with your name;
Relevant information about you from third party data and insight providers to help us operate our business, manage debt and provide you with our products and services.
Most commonly, we process your personal information for one of the following reasons:
To fulfil the contract between us
We need to process your personal information to perform our contract with you. For example, to provide you with the products or services you purchased, manage your account, accurately bill you for services, and take payment from you. Without your personal information, we would be unable to provide you with the products or services you order from us.
For legitimate business interests
Sometimes, we need to process your personal information for a legitimate business interest. For example, to run our business, manage debt, promote our products and services, make improvements to how our business is run and to provide the best possible service to you.
To comply with our legal and regulatory obligations
As a multiservice provider, we must comply with the relevant legal and regulatory bodies, including the Financial Conduct Authority (FCA), the Office of Communications (“Ofcom”), and the Office of Gas and Electricity Markets (“Ofgem”).
You have provided your consent
In specific situations, we’ll ask for your consent before we collect and process your information. For example, if you have informed us that you’re in a vulnerable situation, we’ll ask for your explicit consent before we add your details to our Priority Services Register. When we ask for consent to process your information, we'll let you know why we need your information, what we will do with it and how you can withdraw consent.
More about our processing
To learn more about the UW Privacy Notice and how we may use your personal information, click here.
We use AI and other automated tools to help us run our business and improve the service
we give you. For example, we may use them to detect and prevent fraud and financial crime,
assess creditworthiness, identify customers who may be in a vulnerable situation, personalise the products, offers and content we show you, and route and respond to your queries more quickly.
Where a decision could have a legal effect on you or a similarly significant effect — such as whether we can offer you a product or service, the payment terms we set, or reporting a default — we do not rely on AI alone. A suitably trained member of our team reviews the outcome before it takes effect and can change it. In other words, no significant decision about you is made by automated means without meaningful human involvement.
Where any such processing involves sensitive (special category) personal data, we apply additional protections and will only do so where the law allows.
You can ask us about how a decision was reached, share your point of view, ask a member of our team to review it, and challenge it. To do so, contact us using the details at the top of this Privacy Notice.
We may disclose your personal information to the following categories of recipients:
Our group companies (includes any company listed at the top of this page) to make sure our customers are receiving a consistent service from us and our business operates efficiently;
Third-party providers who help us provide our services to you or who process your personal information for the reasons above and based on our instructions. We have measures in place to make sure they keep your personal information protected.
Other suppliers or partners. For example, should you choose to move your services to a new energy supplier, information such as your meter readings or equipment or money you may owe us will be provided to that new supplier so that they can begin to supply your gas and electricity; or should you choose to take out products or services (such as a new boiler) with a company that we partner with, we may need to pass on your information to that supplier. We may also share your information with our mobile network operator and/or broadband operator, should you choose to take out these services with us;
Unless you have specifically asked us not to do so, we will register your home phone number(s) with the Telephone Preference Service (“TPS”) to protect you from unwanted sales calls;
Unless you tell us otherwise, and depending on the products or services you have taken out with us, we may disclose your name, address and phone number to third parties in order for them to operate a directory service;
The Partner who signed you up as a customer or the Partner who looks after your account with us;
Referring customers are provided with the name and the homeowner status of the customer they successfully referred to us because this determines the amount of referral credit they get;
Law enforcement bodies, regulators, government agencies, and courts where we believe disclosure is necessary for the performance of a task carried out in the public interest; disclosure is necessary as a matter of law or regulation, to exercise, establish or defend our legal rights, for the prevention or detection of criminal activities; to engage debt collection agencies; or to protect your vital interests or those of any other person;
With auditors and professional advisors in order to understake audits and obtain advice in accordance with ordinary business practices;
Health or social care bodies such as social services, healthcare and other support organisations, where we believe that you or a member of your household needs any extra care (perhaps because of age, health or disability), to help you by making sure that there is an energy supply to your home or to other energy suppliers in line with the Energy Retail Association 'Safety Net Procedures';
Potential buyers (and their agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Notice;
To any other person with your consent;
Credit reference agencies (“CRAs”). As an existing customer, certain personal information relating to your payment performance may be shared on a routine basis with CRAs. If another individual is associated with your account, the details of that individual may also be shared with the CRAs. If we consider that your account is in default (i.e. you have not paid our bill(s)) we may report the unpaid debt to CRAs who will record that default on your credit file and may share this information with other organisations.
The three main CRAs have produced notices on how personal information is processed by them as part of this service:
The Department for Energy Security and Net Zero (“DESNZ”). Certain personal information relating to your receipt of the HM Government’s Energy Bills Support Scheme (“EBSS”) payments and the Government’s Energy Price Guarantee (“EPG”) will be shared with DESNZ to support administration of EBSS and the EPG. This may include your meter point number, meter readings, whether you have received and redeemed your EBSS payment(s) and details about your payment status or how you pay our bills. Sharing this information is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the Secretary of State for DESNZ, for monitoring, assurance, fraud prevention and evaluation purposes of EBSS and the EPG. More information on how DESNZ will use your personal information can be found in the DESNZ Privacy Notice.
Transferring your information outside the EU
Sometimes we may transfer your personal information to organisations operating outside the UK and/or the European Economic Area, including in countries which do not have the same data protection standards as the UK. We have taken appropriate measures to ensure that your personal information will still be protected in accordance with this Privacy Notice. Further details can be provided upon request.
We may disclose your personal data to the following categories of recipients:
Our group companies (includes any company listed at the top of this page) to make sure our customers are receiving a consistent service from us and our business operates efficiently;
Third-party providers who help us provide our services to you or who process your personal data for the reasons above and based on our instructions. We have measures in place to make sure they keep your personal data protected.
Other suppliers or partners. For example, should you choose to move your services to a new energy supplier, information such as your meter readings or equipment or money you may owe us will be provided to that new supplier so that they can begin to supply your gas and electricity; or should you choose to take out products or services (such as a new boiler) with a company that we partner with, we may need to pass on your information to that supplier. We may also share your information with our mobile network operator and/or broadband operator, should you choose to take out these services with us;
Unless you have specifically asked us not to do so, we will register your phone number(s) with the Telephone Preference Service (“TPS”) to protect you from unwanted sales calls;
Unless you tell us otherwise, and depending on the products or services you have taken out with us, we may disclose your name, address and phone number to third parties in order for them to operate a directory service;
The Partner who signed you up as a customer or the Partner who looks after your account with us;
Referring customers are provided with the name and the homeowner status of the customer they successfully referred to us because this determines the amount of referral credit they get;
Law enforcement bodies, regulators, government agencies, and courts where we believe disclosure is necessary for the performance of a task carried out in the public interest; disclosure is necessary as a matter of law or regulation, to exercise, establish or defend our legal rights, for the prevention or detection of criminal activities; to engage debt collection agencies; or to protect your vital interests or those of any other person;
With auditors and professional advisors in order to undertake audits and obtain advice in accordance with ordinary business practices;
Health or social care bodies such as social services, healthcare and other support organisations, where we believe that you or a member of your household needs any extra care (perhaps because of age, health or disability), to help you by making sure that there is an energy supply to your home or to other energy suppliers in line with the Energy Retail Association ‘Safety Net Procedures’;
Potential buyers (and their agents and advisers) in connection with any proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Notice;
To any other person with your consent;
Credit reference agencies (“CRAs”). As an existing customer, certain personal information relating to your payment performance may be shared on a routine basis with CRAs. If another individual is associated with your account, the details of that individual may also be shared with the CRAs. If we consider that your account is in default (i.e. you have not paid our bill(s)) we may report the unpaid debt to CRAs who will record that default on your credit file and may share this information with other organisations. The three main CRAs have produced notices on how personal data is processed by them as part of this service:
The Department for Energy Security and Net Zero (“DESNZ”). Certain personal information relating to your receipt of the HM Government’s Energy Bills Support Scheme (“EBSS”) payments and the Government’s Energy Price Guarantee (“EPG”) will be shared with DESNZ to support administration of EBSS and the EPG. This may include your meter point number, meter readings, whether you have received and redeemed your EBSS payment(s) and details about your payment status or how you pay our bills. Sharing this information is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the Secretary of State for DESNZ, for monitoring, assurance, fraud prevention and evaluation purposes of EBSS and the EPG. More information on how DESNZ will use your personal data can be found in the DESNZ Privacy Notice.
Our suppliers operate at a global level, we may need to transfer personal data to suppliers based in countries other than the ones in which the information was originally collected. When we export your personal data to a different country, we will take steps to ensure that such data exports comply with applicable laws. For example, if we transfer personal information from the United Kingdom to a country outside which has not been approved as providing an ‘adequate’ level of protection’ by the UK we will implement an appropriate data transfer mechanism. We rely on the UK’s International Data Transfer Agreement or EU Standard Contractual Clauses with the International Data Transfer Addendum as appropriate. You can request a copy of such a transfer mechanism.
We use technical and organisational measures to protect your personal data. These measures provide a level of security appropriate to the risk of processing your personal information. In line with our security procedures, we check your identity when you get in touch with us and apply suitable technical measures to protect your information, such as:
Encryption;
Implementing secure design principles within our information technology infrastructure;
Adopting security safeguards against attacks;
Adhering to security policies and training staff to enforce controls and procedures in line with data protection law and other industry-specific compliance requirements.
We will use your contact details to send you direct marketing about our own similar products, services and offers that we think will be of interest to you. We do this on the basis of our legitimate interests and, for electronic messages (such as email, WhatsApp, in app and SMS), in reliance on the "soft opt-in" — because we obtained your details when you first contacted us. You can ask us to stop sending you direct marketing at any time by contacting us.
You have various privacy rights in relation to your personal data:
Accessing your personal data: You can request a copy of your personal data at any time;
Correcting your personal data: You can ask us to correct the personal data we hold on you if it is incorrect;
Erasing your personal data: You can ask us to delete your personal data (this only applies in certain circumstances);
Objecting to or restricting processing of your personal data: You can object to our processing of your personal data (this only applies in certain circumstances);
Transferring your personal data: You can ask us to transfer your personal data to you or a third party, including a new supplier should you choose to move your services away;
Withdrawing your consent to processing: You can withdraw your consent (where we have relied on it) to our processing of your personal data. However this will not affect the lawfulness of any processing conducted prior to your withdrawal;
You can opt-out of marketing communications;
We respond to all requests from individuals wishing to exercise their data protection rights in accordance with data protection law. We aim to respond to your request within one month; however, if it is complex or you make several requests, we may extend our time to respond. If we do, we will inform you.
You are able to exercise your rights free of charge, however if you make unfounded, repetitive or excessive requests, we may charge a fee or refuse to carry out your requests.
You can raise a complaint: If you are unhappy with how we have handled your personal data or the response to any request regarding your personal data, you have the right to raise a complaint directly with us. You can do so by contacting our Privacy team at [email protected] or by writing to us at the address above, setting out the details of your concern.
We will acknowledge receipt of your complaint within 30 days and will investigate it and respond to you without undue delay.
If you remain dissatisfied with the outcome, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator. Please note that the ICO will generally expect you to have raised your concern with us first. The ICO can be contacted:
Online: ico.org.uk/make-a-complaint
By telephone: 0303 123 1113
By Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Please be aware that our site may provide links to other websites. We are not responsible for the content, security, or data processing policy of these websites.
Privacy policy: Last updated March 2023
Privacy policy: Last updated September 2022 (V2)
Privacy policy: Last updated September 2022 (V1)
Privacy policy: Last updated June 2022
Privacy policy: Last updated August 2021
Privacy policy: Last updated July 2020
Privacy policy: Last updated 22 May 2018