Ecosave Pay LTD ("Ecosave Pay", "we", "us" or "our") is the data controller responsible for the personal data we collect about you. We are a company registered in England and Wales under company number 15055468, with registered trading address at Lloyds House 18-22, Lloyd Street, Manchester, England, M2 5WA.
You can contact us at info@ecosavepay.com or on 0161 814 9299 if you have any questions about this Privacy Policy or about how we handle your personal data.
Scope of this Policy
This Privacy Policy covers personal data that we collect through the Ecosave Hub customer app (iOS, Android and web), the ecosavepay.com website, and your interactions with our sales, customer service and support teams (by phone, email or in person).
Information We Collect
Account Information
Your name, email address and mobile phone number, verified via one-time passcode (OTP) during signup.
Authentication details and account preferences.
Notification preferences, push notification tokens and identifiers used to send service updates where you enable notifications.
Business Information
Company name, trading address and registered address.
Business entity type (limited company, sole trader, partnership, charity).
Company registration number and, where applicable, VAT number.
Names and contact details of authorised business contacts.
Utility and Meter Data
Meter Point Administration Number (MPAN) for electricity and Meter Point Reference Number (MPRN) for gas.
Current and previous supplier details.
Consumption data, tariff details, contract start and end dates.
Letters of Authority, uploaded bills, contracts, photographs, PDFs and related documentation that you choose to provide.
Support and Uploaded Content
Messages, attachments, photographs, documents and other information you send to our support team or upload through the app.
Metadata about uploaded files, such as file name, file type, size and upload time.
Credit Reference Data
Information used to assess eligibility for supplier contracts, including credit reference agency checks on name, address and payment history.
App and Website Usage Data
Device type, operating system and app version.
Limited technical and network data, such as IP address, received by our hosting and push-notification providers when your device connects to our services, from which an approximate country or region may be inferred. We do not collect precise GPS location through the app.
Records of key actions you take in the app, such as requesting a quote or signing a contract, together with the date and time they occur.
How We Use Your Information
We process your personal data under the following legal bases set out in the UK GDPR:
Performance of a contract
Providing the Price Comparison, Switching, Contract Checking and Contract Management Services.
Managing your account and communicating with you about your contracts.
Legitimate interests
Running credit checks to determine supplier eligibility.
Contacting you about renewals, savings opportunities and relevant service updates.
Preventing fraud and keeping our systems secure.
Improving our products and understanding how customers use Ecosave Hub.
Sending requested service notifications and measuring whether our app communications are delivered successfully.
Legal obligation
Complying with tax, accounting, anti-money-laundering and other regulatory obligations.
Responding to lawful requests from courts, regulators or law enforcement.
Consent
Sending marketing communications where we rely on your consent. You can withdraw consent at any time.
Sending push notifications where your device settings require permission. You can turn notifications off in the app or in your device settings.
Setting non-essential cookies and similar technologies on our web surfaces.
Who We Share Your Information With
We share your personal data only where necessary to provide our services or meet our legal obligations. Categories of recipients include:
Energy suppliers — so we can request quotations, compare prices and effect switches on your behalf.
UK energy industry databases, including Transco, Xoserve, ECOES, Companies House, HMRC and The Charity Commission for England and Wales — to verify supply details and run credit checks.
Credit reference agencies — we may share your name, address and payment record to assess eligibility.
Technology service providers — hosting, authentication, file storage, analytics, diagnostics, push notification, email delivery, SMS delivery and customer support tooling, based in the UK or EEA where possible.
Legal, regulatory and law enforcement bodies where we are required by law to do so.
Professional advisers such as lawyers, accountants and auditors where needed.
We do not sell your personal data to third parties.
International Transfers
Where personal data is transferred outside the United Kingdom or the European Economic Area, we put in place appropriate safeguards, including UK International Data Transfer Agreements and Standard Contractual Clauses, to ensure your information remains protected.
Data Retention
We retain your personal data for the duration of your contract with Ecosave Pay plus a period of 6 years afterwards, so that we can meet our UK financial and tax record-keeping obligations. Marketing data is kept until you unsubscribe or otherwise withdraw consent. Where data is no longer needed we securely delete or anonymise it.
Your Rights under UK GDPR
You have the following rights in relation to your personal data:
Right of access — to receive a copy of the personal data we hold about you.
Right to rectification — to have inaccurate or incomplete data corrected.
Right to erasure — to ask us to delete your personal data (the 'right to be forgotten').
Right to restriction of processing — to ask us to limit how we use your data.
Right to data portability — to receive your data in a structured, commonly used and machine-readable format.
Right to object — including the right to object to direct marketing at any time.
Right not to be subject to solely automated decision-making that produces legal or similarly significant effects.
Right to withdraw consent at any time, where we rely on consent as the legal basis.
Right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We use a small number of essential cookies to keep you signed in and to operate core features of the Ecosave Hub website. The app may use similar local storage for authentication, preferences and security. With your consent where required, we also use analytics and diagnostic technologies to help us understand how the service is used, fix crashes and improve performance. A detailed cookie policy will be published separately.
Device Permissions
Ecosave Hub may ask for access to your camera, photo library or files when you choose to upload a bill, contract, support attachment or other document. We use those files only to provide the service you requested, support your account, or meet our legal obligations. The app does not collect precise GPS location and does not require access to your calendar.
Data Security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encryption in transit and at rest, role-based access controls, regular access reviews, and secure software development practices. No system can be guaranteed to be fully secure, but we work continuously to minimise risk.
Children's Data
Ecosave Hub is a service for UK business users only. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or through an in-app notification and update the "Last Updated" date above.
How to Contact Us
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact our Data Protection point of contact: