Privacy policy

Openlight Ltd, trading as Openlight, is a company registered in England and Wales under company number 17361688. Our registered office is 124-128 City Road, London, England, EC1V 2NX.

We are the data controller for the information described in this policy. For any privacy question, or to exercise any of the rights in section 9, contact hello@openlightenergy.co.uk.

• Names and business contact information
• Telephone numbers, email addresses and business addresses
• Energy account information, bills and contract documents
• Meter and supply identifiers, and consumption information
• Correspondence with us, including complaint information

We do not collect website usage information. This site runs no analytics and sets no cookies — see section 11.

Most information reaches us directly from you, by email or in documents you send us. We may also receive information from partners and energy suppliers where you have asked us to act, or authorised them to share it.

• Responding to enquiries and developing customer relationships
• Providing requested services and obtaining energy quotations
• Administering contracts and maintaining our records
• Managing complaints
• Meeting our legal obligations
• Improving our service, and preventing fraud and misuse

Depending on the purpose, we rely on one or more of the following lawful bases: your consent; performance of a contract with you; steps taken at your request before entering into a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our service, where those interests are not overridden by your rights.

We share information only where it is necessary for the purposes above. Recipients may include energy suppliers and master brokers acting on your instructions, our technology and document-processing providers, professional advisers, regulators and alternative dispute resolution providers, and government or law-enforcement bodies where we are required to do so.

We do not sell personal information, and we do not share it for third-party marketing.

Where a service provider processes information outside the UK, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or an adequacy decision — so that your information remains protected to UK standards.

We keep information for as long as needed for the purpose it was collected for, and then for as long as we are required to retain it — for example to meet legal, regulatory, accounting or dispute-resolution obligations. Complaint records are retained in line with our complaints policy and are available to an ADR scheme or to Ofgem on request.

Subject to the conditions in data protection law, you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Ask us to delete information, or to restrict how we use it
• Object to processing based on our legitimate interests
• Receive certain information in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these, contact hello@openlightenergy.co.uk.

We use appropriate organisational and technical controls to protect information against unauthorised access, loss or misuse, and we limit access to those who need it to do their work.

This website sets no cookies. It runs no analytics, loads no third-party scripts and embeds no external content, so no consent banner is required and no information about your visit is collected or shared. Fonts are served from our own domain rather than a third-party service.

We may update this policy as our service develops. The date at the top of this page shows when it was last changed.