1. What This Privacy Notice Covers
This Privacy Notice provides information about personal data which is processed by Harvest Energy Retail Limited (“Harvest Retail”, “we”, “us”) in relation to:
Customers and their representatives, employees or agents; suppliers and their representatives, employees or agents; contractors’ representatives, employees or agents; investors and business partners; officers and beneficial owners of the above; visitors to our premises and websites; advisors, consultants and other professional experts; those with whom we work in the context of our Community Initiatives (if applicable); and all other third parties.
We process personal data from and in relation to individuals who are, or who work for or on behalf of, or who are shareholders in, our Business Counterparties, Suppliers, or Business Partners.
We collect personal data about third parties directly from data subjects or through their appointed representatives, agent, employer, affiliated company, or publicly available information.
2. Personal Data We Process About You
This Privacy Notice explains what personal data we process about you, why we are processing your personal data and for which purposes, how long we hold your personal data for, how to access and update your personal data, as well as your rights and the options you have regarding your personal data and where to go for further information. This is in accordance with the Data Protection Act 2018, the UK adoption of General Data Protection Regulation (GDPR) and other applicable data protection regulation.
It is important that you read this notice, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information.
3. Data Protection Principles
We will comply with data protection law and principles, which means that your data will be:
- Used lawfully, fairly and in a transparent way
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes
- Relevant to the purposes we have told you about and limited only to those purposes
- Accurate and kept up-to-date
- Kept only as long as necessary for the purposes we have told you about
- Kept securely
Personal data we may process includes private contact information, such as your name, postal or e-mail address, and phone number and business contact number, and other information such as your job title, department, the name of your organisation, and your dealings with Harvest Energy on behalf of yourself or the relevant business counterparty, supplier, or business partner.
This may include other information, such as CCTV (video/audio) footage, vehicle registration, video, time-lapse photography, live streaming or capturing of images, electronic identifiers, details of access, communication preference, and other information relevant to customer offers and/or surveys.
4. Sensitive Personal Data
We also may process some special categories of personal data which may include data relating to an individual’s health, race, biometric data and other personal data that needs more protection. We only process such personal data where it is necessary for compliance with employment and social security laws, establishment or defence of legal claims, occupational medical advice, public health reasons, protection of vital interests, or with explicit consent.
5. Why We Process Your Personal Data
We process your personal data a) in order to satisfy our obligations to comply with laws and regulations; b) for legitimate business interest, and c) where we have your explicit consent.
We process your personal data for the following purposes:
- Business execution
- Organisation and management of the business
- Health, safety and security
- Legal and/or regulatory compliance
- Secondary purposes such as fraud prevention, audits, investigations, dispute resolution, insurance, litigation defence, and research
6. How We Will Use Information About You
We will use your personal data for purposes including:
- Responding to queries or entering into contracts
- Accessing premises or using websites
- Complying with legal obligations
- Legitimate business interests
- Consent-based processing where required
7. Monitoring
We may monitor activities on IT systems and on our premises for security, compliance, and operational purposes.
8. Screening
We may conduct screening of employees, contractors, suppliers, and business partners for compliance with legal and regulatory obligations.
9. Data Sharing
We may share your data with:
- Other companies within Harvest Energy group entities (if applicable)
- Service providers, auditors, insurers, legal and financial advisors
- Regulators or public authorities where required by law
10. Transfer to Other Countries
We may transfer personal data outside the UK with appropriate safeguards in place.
11. Security of Personal Data
We use technical, organisational, and physical security measures to protect personal data and restrict access to authorised personnel only.
12. How Long We Keep Personal Data For
We retain personal data only as long as necessary for business or legal purposes, after which it is securely deleted or anonymised.
13. Social Media
We may interact with individuals through social media platforms. Information shared may be visible depending on privacy settings of those platforms.
14. Your Rights in Relation to Personal Data
You have rights including:
- Access
- Rectification
- Erasure (where applicable)
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent
15. Enquiries, Concerns or Complaints
For enquiries or complaints, contact: headoffice@harvestretail.co.uk.
You may also contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
16. Changes to This Privacy Notice
This notice may be updated from time to time. Last updated: October 2024.