In order to support your business requirements we will obtain personal data which identifies you as an individual, this is sometimes referred to as personal data. We access this data through direct contact with your company and do not source this information from any illegitimate sources.
As per the requirements of GDPR, we must process this data using a number of security measures, we do this using secured client relationship management system, these are protected and not accessible to any outside agencies. When submitting your personal information via the contact forms on this website, your data will be processed via our client relationship management system. Please note, this policy refers only to websites owned and operated by XGP.
The personal data we collect and hold include; your business name and trading address, energy bills and prices and when required, details for the purpose of credit checking. These will only be obtained by us, directly from you. All written communication with XGP will also be held for as long as reasonably required.
We always ensure we conduct as many safeguards as possible to keep your data safe, as much of this may be transmitted via emails and internet use, we can not be held accountable for any mishaps outside of our physical control.
We will only ever use your information for the purpose of your businesses gas and power supply. This will include;
In order to conduct credit checks, as required by our suppliers, we may be required to pass your held personal data to external agencies, this will always be discussing and authorised by you before being conducted.
It is important for all our customer across to be aware about individual rights under the General Data Protection Regulation (GDPR). XGP has a responsibility to make individuals aware of their rights and ensure mechanisms are in place to act on these. In order to do this it is important that you are aware of these rights and how you can respond to requests under these rights.
The rights are: right to be informed, right of access, right to rectification, right to erasure/to be forgotten, right to restrict processing, right to data portability, right to object and rights in relation to automated decision making and profiling.
Please be aware, you are always entitled to the personal data we hold about you. This can be accessed at any time. You can contact us by phone or in writing via emails to firstname.lastname@example.org and make a 'data subject access request'. We will adhere to your request within the required statutory timescales.
From time to time, we may update this policy. The most up to date version of this will be published on our website.