Privacy Policy

1. Data controller

PowerView UK (Annalu Pomarico, sole trader) is the data controller for personal data relating to our own users, prospects and website visitors (account holders, supplier contacts, demo and Risk Check requesters).

For customer data contained in files a supplier uploads to the platform, the supplier is the data controller and PowerView UK (Annalu Pomarico, sole trader) acts as data processor. See our Data Processing statement.

Privacy contact: privacy@powerviewuk.co.uk

2. What we collect

• Meter and consumption data — MPAN / MPRN identifiers, meter reading dates, reading types (actual / estimated / smart), consumption volumes.
• Billing data — account references, unit rates, standing charges, billed and shadow-billed amounts, exception values.
• Supplier contact data — names, work email addresses, company names, telephone numbers where provided, and job role.
• Vulnerability / PSR indicators — where a supplier uploads Priority Services Register flags for Priority Services Register assurance.
• Platform telemetry — audit log entries (user id, action, timestamp), authentication events, and technical logs required for security.

We ask suppliers to remove customer names and postal addresses before upload. Files are analysed at MPAN / account-reference level; reports are anonymised by default.

3. Lawful basis

• Contract (Art. 6(1)(b)) — providing the audit platform and reports the supplier has ordered.
• Legitimate interests (Art. 6(1)(f)) — detecting potential billing and metering exceptions so licensed suppliers can review their obligations under Ofgem Standard Licence Conditions 21B and 21BA, securing the service, and contacting supplier professionals about compliance findings.
• Legal obligation (Art. 6(1)(c)) — retaining audit records where required by regulatory or accounting law.

4. Retention

Audit records, reports and their supporting evidence are retained for 6 years, consistent with Ofgem record-keeping expectations for licensed suppliers and UK limitation periods. Source files uploaded for a free Risk Check are deleted or anonymised within 12 months unless the supplier becomes a customer. Audit log entries are append-only and cannot be edited or deleted before the retention period expires.

5. Your rights

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — deletion, where no legal or regulatory retention duty applies.
• Portability — receive your data in a structured, machine-readable format (CSV).
• Restriction and objection — including objection to processing based on legitimate interests.
• Withdraw consent — where processing relies on consent, such as marketing email.

Requests go to privacy@powerviewuk.co.uk. We respond within one calendar month. Where PowerView acts as processor, we forward the request to the supplier acting as controller.

6. Sharing and international transfers

We do not sell personal data. We share it only with the sub-processors listed in our Data Processing statement (hosting and transactional email), all hosted in the EU/UK, and with professional advisers or regulators where legally required.

7. Complaints — ICO

You may complain to the UK supervisory authority: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk. We would appreciate the chance to resolve your concern first.