Privacy Policy

Version 1.0  ·  July 2026  ·  Morven Energy Consulting

This Privacy Policy explains how Morven Energy Consulting collects, uses, stores, and shares your personal data in connection with our energy brokerage services. We take your privacy seriously and are committed to handling your data responsibly and in accordance with UK law.

1. Who We Are

Morven Energy Consulting is an independent energy brokerage operating in the United Kingdom. We act as a Third Party Intermediary (TPI) between businesses and energy suppliers, helping clients obtain competitive energy contracts.

Contact: jordan@morvenenergy.com  ·  023 9200 9172

We are the Data Controller for the personal data you provide to us. You can contact us at the details above with any data protection queries or requests.

2. What Data We Collect and Why

We collect different types of data depending on how you engage with us:

When you submit an enquiry or contact form:

• Your name and job title
• Your business name and address
• Your email address and telephone number
• Information about your energy supply including current supplier, contract end date, estimated annual spend, meter type, and number of sites

When we are engaged to act on your behalf:

• Meter Point Reference Numbers (MPAN for electricity, MPRN for gas)
• Your energy bills and historical consumption data
• Details of your existing energy contract including start and end dates, unit rates, and standing charges
• Any Letter of Authority signed by you or on behalf of your business

When you visit our website:

• We do not use tracking cookies or analytics software that collects personal data
• Basic server logs may be retained by our hosting provider (Netlify) for security purposes

3. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — processing necessary to provide energy brokerage services you have requested
• Legitimate interests — contacting you in advance of your contract renewal, which is a core part of our ongoing service to you
• Legal obligation — complying with Ofgem's TPI Code of Practice, including commission disclosure requirements
• Consent — where you have specifically agreed to receive marketing communications from us

4. How We Use Your Data

We use the information you provide solely to:

• Obtain live energy quotations from suppliers on your behalf
• Present quotation options to you with full commission disclosure as required by Ofgem
• Arrange and manage the placement of energy contracts
• Liaise with suppliers on your behalf throughout the contract term
• Monitor your contract end date and contact you ahead of renewal
• Comply with our legal and regulatory obligations as a TPI
• Handle any complaints or disputes relating to your energy supply

We will not use your data for automated decision-making or profiling, and we will not use it for any purpose unrelated to the services you have engaged us for without your explicit consent.

5. Who We Share Your Data With

We share your data only where necessary and with the following categories of recipient:

• Energy suppliers — to obtain live quotations and place contracts on your behalf. Suppliers will become independent data controllers once a contract is placed and their own privacy policies will apply to your ongoing relationship with them
• Our back office network (Tower Utility) — who provide the pricing portal and contract management infrastructure that enables us to access supplier rates. They process data as a data processor on our behalf
• Regulatory bodies — such as Ofgem or the Energy Ombudsman, where required by law or as part of a complaint investigation

We do not sell your data to any third party. We do not share your data with marketing companies or data brokers.

6. How Long We Keep Your Data

We retain your personal data for the following periods:

• Active clients: for the duration of any energy contract we have placed on your behalf, plus six years thereafter for legal and compliance purposes
• Enquiries that did not result in a contract: for twelve months from the date of your initial enquiry, after which your data will be securely deleted
• Letter of Authority records: retained for six years from the date of signing in accordance with our regulatory obligations

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data where there is no legitimate reason for us to continue processing it
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests, including renewal contact
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at jordan@morvenenergy.com. We will respond within one calendar month. There is no charge for making a request.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include secure email communication, access controls on systems holding client data, and ensuring that any third parties we share data with have appropriate security measures in place.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform you without undue delay.

9. Complaints

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available at morvenenergy.com/privacy. Where changes are material, we will notify active clients directly.

This policy was last updated in July 2026.