Privacy Policy

1. Who we are

Craig Energy Supply Limited(company number 16443926) is a company registered in England and Wales. Our registered office is at Catalyst House, 720 Centennial Ave, Borehamwood, England, WD6 3SY.

We provide energy bill validation, change of tenancy services, and sub-meter tenant billing. This privacy policy explains how we collect, use, store, and protect your personal data when you use our services.

Our Data Protection Officer is Jay Desai. You can contact him at jay@jamenergy.uk with any questions about how we handle your personal data.

2. What personal data we collect

We may collect and process the following types of personal data about you:

• Identity information: your name, job title, and role
• Contact details: email address, telephone number, and postal address
• Property details: address, meter point references (MPANs/MPRNs), and tenancy information
• Energy usage data: meter readings, consumption figures, and sub-meter data
• Payment and billing information: invoices, billing history, account references, and payment records

3. How we collect your data

We do not usually collect personal data directly from you. Instead, we receive it from the following sources:

• Landlords and property managers who engage us to provide billing or tenancy services on their behalf
• Energy suppliers and distributors who share data with us for bill validation and reconciliation purposes
• Meter reading devices which automatically record energy consumption at your property

4. Why we use your data (legal basis)

We only use your personal data when we have a lawful reason to do so. The legal bases we rely on are:

• Performance of a contract: we need your data to deliver our bill validation, change of tenancy, and sub-meter billing services
• Legitimate interests: we use your data to improve our services, resolve billing disputes, and ensure accurate energy records, where this does not override your rights
• Legal obligation: in some cases, we are required by law to keep certain records (for example, for tax or regulatory purposes)

5. How we process your data, including the use of AI

To deliver our services efficiently and accurately, we use artificial intelligence (AI) tools powered by large language models (LLMs). Specifically, your data may be processed through the following AI platforms:

• Anthropic (Claude)
• Google (Gemini)
• OpenAI (ChatGPT / GPT models)

We use these tools to assist with tasks such as validating energy bills, analysing consumption data, generating tenant billing calculations, and processing change of tenancy information.

Important safeguards

• We only send the minimum amount of personal data needed to carry out the specific task.
• We use business and enterprise tiers of these AI services where available, which include contractual commitments that your data will not be used to train AI models.
• Data sent to these platforms is processed in real time and is not stored permanently by the AI providers beyond what is needed to complete the request.
• All AI providers we use have their own privacy policies and data processing agreements in place.

6. International data transfers

Some of the AI providers listed above are based in the United States. This means your personal data may be transferred outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data to the same standard as UK data protection law requires.

7. Who we share your data with

Other than the AI processing platforms described in section 5, we do not sell, rent, or share your personal data with any third parties for marketing purposes.

We may disclose your data if required to do so by law, regulation, or legal proceedings, or if requested by a relevant regulatory authority.

8. How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out in this policy. As a general guide:

• Billing and tenancy records are retained for up to 6 years after the end of the relevant contract or tenancy, in line with standard limitation periods.
• Meter reading and consumption data is retained for as long as needed for billing accuracy and dispute resolution.
• When data is no longer needed, it is securely deleted or anonymised.

9. Your rights

Under UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018), you have the following rights:

• Right of access: you can ask us for a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct any data that is inaccurate or incomplete
• Right to erasure: you can ask us to delete your data in certain circumstances
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can ask for your data in a structured, commonly used format
• Right to object: you can object to us processing your data where we rely on legitimate interests

To exercise any of these rights, please contact our Data Protection Officer at jay@jamenergy.uk. We will respond to your request within one month.

10. How we keep your data safe

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or damage. These include access controls, encryption, and secure storage solutions.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO). You can contact the ICO at www.ico.org.uk or by calling 0303 123 1113.

We would, however, appreciate the chance to address your concerns first, so please do get in touch with us at jay@jamenergy.uk.

12. Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on our website. We encourage you to review this policy periodically. The date at the top of this document shows when it was last updated.

13. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please contact: