At TUS Ltd, we are committed to protecting and respecting your privacy. This policy statement explains how we collect, use, and disclose your personal information in compliance with the General Data Protection Regulation (GDPR) Article 13.

1. Data Controller

TUS Ltd, located at Unit 2, Horton Grange Park, Berwick Hill Road, Newcastle upon Tyne, NE136BU, is the data controller responsible for the processing of your personal data. If you have any questions or concerns regarding the processing of your personal data, you can contact our Data Protection Officer at [email protected].

2. Types of Personal Data Collected

We may collect and process the following categories of personal data:

• Contact information - We collect your name, address, email address, and phone number to communicate with you effectively.
• Professional information - We collect your job title and company name to understand your business needs and provide tailored services.
• Financial information - We collect payment details to process transactions and fulfil contractual obligations.
• Communication preferences - We collect information about your preferences for receiving communications from us.

3. Purposes of Data Processing

We collect and process your personal data for the following purposes:

• Providing energy brokerage and consultancy services - We process your personal data to assist you in finding the most suitable utility suppliers, negotiate contracts, and optimize your energy solutions.
• Communication and customer support - We use your personal data to communicate with you, respond to inquiries, and provide customer support related to our services.
• Contract administration - We process your personal data to fulfil contractual obligations, manage accounts, and ensure the smooth delivery of our services.
• Legal and regulatory compliance - We may process your personal data to comply with applicable laws, regulations, and industry standards.
• Service improvement - We analyze and evaluate your personal data to improve our services, enhance customer experiences, and develop new offerings.

4. Legal Basis for Data Processing

Our legal basis for processing your personal data is one or more of the following:

• Contractual necessity - Processing is necessary for the performance of a contract or to take steps prior to entering into a contract with you.
• Consent - Processing is based on your consent, which you can withdraw at any time by contacting us.
• Legal obligations - Processing is necessary for compliance with legal obligations to which we are subject.
• Legitimate interests - Processing is necessary for the legitimate interests pursued by TUS Ltd, provided that such interests are not overridden by your data protection rights.

5. Data Recipients and Transfers

We may share your personal data with the following recipients:

• Utility suppliers - To facilitate our services, we may share necessary personal data with utility suppliers, such as your contact and account information.
• Service providers and partners - We engage trusted service providers and partners who assist us in delivering our services, and they may process personal data on our behalf.
• Legal and regulatory authorities - We may disclose personal data if required by law or to comply with a legal obligation, such as responding to a court order or a government request.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy statement, unless a longer retention period is required or permitted by law. The specific retention period may vary depending on the nature of the data and the purposes for which it is processed.

7. Data Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, accidental loss, destruction, or damage. We regularly review and enhance our security practices to ensure the ongoing integrity and confidentiality of your data.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access - You have the right to access the personal data we hold about you and obtain a copy of it. You may request this information by contacting us using the details provided at the end of this policy statement.
• Right to rectification - If you believe that any of the personal data we hold about you is inaccurate or incomplete, you have the right to request its rectification. Please notify us of any changes or inaccuracies in your personal data, and we will update it accordingly.
• Right to erasure - Under certain circumstances, you have the right to request the erasure of your personal data. This right applies, for example, when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal basis for processing.
• Right to restrict processing - You have the right to request the restriction of processing your personal data under certain circumstances. This right may be exercised, for example, if you contest the accuracy of the data or if the processing is unlawful, but you do not want the data to be erased.
• Right to data portability - If processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data to another data controller, where technically feasible.
• Right to withdraw consent - If our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint - If you believe that we have infringed upon your data protection rights, you have the right to lodge a complaint with a supervisory authority responsible for data protection. We encourage you to contact us first to resolve any concerns or issues.

9. Contact Information

If you have any questions, concerns, or requests regarding the processing of your personal data or would like to exercise your rights, please contact our Data Protection Officer using the following details:

Name: Kerryn Allan
Email: [email protected]
Phone: 03301170120

We strive to respond to all inquiries and requests in a timely manner and will address any concerns regarding your personal data to the best of our ability.