Privacy
Policy

Data Controller

Infinite Energy Group Holdings Limited ("we", "us", "our") is the data controller responsible for your personal data. We are registered in England and Wales (company no. 15489982), with our registered office at 7 Bell Yard, London, WC2A 2JR. For any data protection queries, please contact us at md@infiniteenergygroup.co.uk or call 020 8181 1090.

Who this policy applies to

This policy applies to you if you visit our website, are (or work for) a client of ours, work for a supplier we deal with, or otherwise correspond with us. Where you give us personal data about another person (for example a colleague), you confirm that you may share it with us and that you have made them aware of this policy.

What Data We Collect

We may collect the following categories of personal data:

• Identity data — name and job title
• Contact information — email address, telephone number, and business address provided through our contact form or direct correspondence
• Business information — company name, energy consumption data, and site details necessary for our energy consultancy services
• Technical data — IP address, login data, and browser type when you use our website
• Call recordings — if you call us, we may record the call for training and quality
• Website usage data — anonymised analytics including pages visited, time on site, and referring pages
• Communication records — records of correspondence and enquiries between you and our team

How We Collect Your Data

We collect personal data in three ways: directly from you (through forms, email or phone); from third parties and public sources — for example credit reference agencies, and energy-industry data sources such as Ecoes and Xoserve, where you have authorised us through a Letter of Authority; and automatically when you use our website, through cookies (see our Cookie Policy).

How We Use Your Data and Our Lawful Basis

We process your personal data for the purposes below. Under UK GDPR we need a lawful basis for each purpose, set out in the table below:

Special Category Data

We do not routinely collect special category data (such as health, ethnicity, or political opinions). If we ever need to, we will rely on your explicit consent.

Data Sharing

We may share your personal data with the following recipients, only as necessary to deliver our services:

• Energy suppliers and brokers — to facilitate procurement and contract negotiations on your behalf
• Credit reference agencies — to assess creditworthiness where relevant
• Our professional advisers — such as solicitors and accountants
• Associated partners we work with to deliver your services
• Regulatory bodies — where required by law (for example ESOS and SECR reporting)
• Service providers — trusted third parties who assist in operating our website and delivering our services, bound by confidentiality agreements
• A buyer or successor — if we sell, transfer or merge part of our business

We will never sell your personal data to third parties.

International Transfers

Data is only shared within the UK and EEA unless explicit safeguards are in place. Where we transfer personal data outside the UK or EEA, we ensure an adequate level of protection — for example a UK adequacy decision or an International Data Transfer Agreement.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Typically:

• Enquiry data is retained for up to 24 months after your last interaction
• Client data is retained for 7 years after the end of the contractual relationship, in line with regulatory and legal requirements
• Website analytics data is anonymised and retained indefinitely

Marketing

We may send you information about our services by email, phone or post where we are permitted to do so. You can opt out at any time by contacting us at office@infiniteenergygroup.co.uk or using the unsubscribe link in any marketing email, and we will stop.

Security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access. However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security of data sent to us online.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where there is no compelling reason for continued processing
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — request a copy of your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at office@infiniteenergygroup.co.uk. We will respond within one month.

Cookies

Our website uses essential cookies required for the site to function, and analytics cookies set only with your consent. Please see our Cookie Policy for full details of the cookies we use and how to manage them.

Other Websites

Our website may contain links to third-party websites. We are not responsible for the content or privacy practices of those sites, and we encourage you to read their privacy policies.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated through our website.