Privacy notice

Simplest Energy provides bill validation and market analysis software for UK business energy. For the personal data described here we are the data controller, except where we process data on behalf of a customer organisation, in which case that organisation is the controller and we are its processor.

If you complete the demo request form we receive the name, email address, company and message you supply. We use it to reply to you and to arrange a demonstration. We do not sell it, and we do not add you to a marketing list you did not ask for.

The site sets the cookies needed to keep you signed in if you log into the application. It does not use advertising cookies or third-party trackers.

For customers, the application holds the data needed to validate bills: sites, meters, contracts and their rates, supplier invoices and the consumption data behind them, plus the records each validation run produces. It also holds the accounts of the people you invite, being their name, email address, role and the record of what they did.

Validation runs, verdicts and changes are stored append-only. This is deliberate: it is what makes a result defensible months later. It also means that individual records within an audit trail are not edited or removed in the ordinary course of use.

For enquiries, our legitimate interest in responding to someone who has contacted us. For customer data, the performance of our contract with the customer organisation, and that organisation's own lawful basis for the personal data it puts into the service.

We use a small number of service providers to run the software: a cloud database and authentication provider, a hosting provider, and an email delivery provider used to send invitations, notifications and scheduled reports. Each processes data only to provide that service to us. We will name them in full on request.

Enquiries are kept while we are in contact and for a reasonable period afterwards. Customer data is kept for the life of the contract and then for the period agreed in it, after which it is deleted or returned. Removing a person from an organisation removes their access immediately and deletes their account.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to our processing it. Where we hold it on behalf of a customer organisation we will direct your request to them, since it is their data.

You also have the right to complain to the Information Commissioner's Office.

Write to hello@simplestenergy.com and we will respond.