Privacy policy

1. Who we are

Openlight Ltd, trading as Openlight, is a company registered in England and Wales under company number 17361688. Our registered office is 124-128 City Road, London, England, EC1V 2NX.

We are the data controller for the information described in this policy. For any privacy question, or to exercise any of the rights in section 9, contact hello@openlightenergy.co.uk.

2. Information we collect

• Names and business contact information
• Account sign-in details, such as your email address
• Telephone numbers, email addresses and business addresses
• Energy account information, bills and contract documents
• Meter and supply identifiers, and consumption information
• Correspondence with us, including complaint information

The only cookies we set without asking are the essential sign-in cookies. Our public pages count visits with Vercel Web Analytics, which uses no cookies and does not identify you. They also load the Google Ads tag, which records whether a visit from one of our ads led to an enquiry; it uses cookies only if you accept them on our Climate Change Levy page. Section 11 explains all three.

3. How we collect it

Most information reaches us directly from you — when you create an account, upload a bill, forward a supplier email to your Openlight address, request an email follow-up about Climate Change Levy, or contact us. We may also receive information from partners and energy suppliers where you have asked us to act, or authorised them to share it.

The CCL check keeps your business name, activities and approximate monthly energy costs in memory in your browser. If you separately request an email follow-up, we send those answers, your email address and the versioned savings illustration (if shown) to Openlight. We store the enquiry and calculation assumptions securely, and notify our team through our email provider, Resend. The request does not subscribe you to marketing or authorise us to contact your supplier. No bill is collected in the CCL flow. If you arrived through an ad or campaign link, the campaign details from that link (such as the source, campaign name and Google click identifier) are saved with your CCL enquiry. When you request energy quotes, we save the details you submit and any bills you choose to upload in private storage. The quote form keeps a temporary draft in this browser tab so you can go back or refresh; you can clear it by closing the tab.

4. Why we use it

• Responding to enquiries and developing customer relationships
• Providing requested services, checking bills and obtaining energy quotations
• Administering contracts and maintaining our records
• Managing complaints
• Meeting our legal obligations
• Improving our service, and preventing fraud and misuse
• Measuring whether our advertising leads to enquiries

5. Our lawful bases

Depending on the purpose, we rely on one or more of the following lawful bases: your consent; performance of a contract with you; steps taken at your request before entering into a contract; compliance with a legal obligation; and our legitimate interests in operating and improving our service, where those interests are not overridden by your rights.

6. Who we share it with

We share information only where it is necessary for the purposes above. Recipients may include energy suppliers and master brokers acting on your instructions, our technology, email and document-processing providers, Google (for ad measurement, only where you accept it), professional advisers, regulators and alternative dispute resolution providers, and government or law-enforcement bodies where we are required to do so.

We do not sell personal information, and we do not share it for third-party marketing.

7. International transfers

Where a service provider processes information outside the UK, we put appropriate safeguards in place — such as the UK International Data Transfer Agreement or an adequacy decision — so that your information remains protected to UK standards.

8. How long we keep it

We keep information for as long as needed for the purpose it was collected for, and then for as long as we are required to retain it — for example to meet legal, regulatory, accounting or dispute-resolution obligations. Complaint records are retained in line with our complaints policy and are available to an ADR scheme or to Ofgem on request.

9. Your rights

Subject to the conditions in data protection law, you have the right to:

• Access the personal information we hold about you
• Have inaccurate information corrected
• Ask us to delete information, or to restrict how we use it
• Object to processing based on our legitimate interests
• Receive certain information in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these, contact hello@openlightenergy.co.uk.

10. Security

We use appropriate organisational and technical controls to protect information against unauthorised access, loss or misuse, and we limit access to those who need it to do their work.

11. Cookies and analytics

When you sign in, we set essential authentication cookies that keep you signed in; they are strictly necessary to provide the service, so they need no consent. Our public pages load the Google Ads tag. Until you accept its cookie on our Climate Change Levy page (openlightenergy.co.uk/ccl), it sets no cookies and sends Google only basic signals without ad click identifiers. If you accept, Google Ads uses cookies to measure whether a visit from our ad led to an enquiry; we do not use it for personalised advertising.

Our public pages also count visits with Vercel Web Analytics, provided by our hosting provider, Vercel. It sets no cookies and stores nothing in your browser. For each page view it records the page address, the website you came from, your approximate location, and your browser, operating system and device type. It tells visits apart with a value derived from the request, which is discarded after 24 hours, so we see totals rather than individuals. Our signed-in app pages are not counted.

Our cookie notice lists these cookies, the visit statistics and the campaign details we keep. Apart from these, the site loads no other third-party scripts, and fonts are served from our own domain rather than a third-party service.

12. Changes to this policy

We may update this policy as our service develops. The date at the top of this page shows when it was last changed.