When we refer to ‘us’, ‘our’, The Cardell Group LTD, or ‘Cardell’, we mean The Cardell Group LTD.

When we say ‘you’ and ‘your’, we mean any individual who:

- Uses our Website;

- Visits any of our UK premises (e.g., one of our offices);

- Directly purchases any of our products or receives our services (e.g., as a sole trader);

- Works for one of our Customers;

- Works for one of our Suppliers; or

- Otherwise communicates with us.

‘Customers’ refers to any company or organization that we provide our products and/or services to. ‘Suppliers’ refers to energy and utilities companies we work with, including those we collaborate with to collate energy and other utility proposals for our Customers, and with whom we may place customer energy and other utilities contracts.

‘Personal information’ means any information that can be used to identify you as an individual, either alone or combined with other information. ‘Services’ refers to our energy and utilities brokerage and management services, ‘Website’ refers to our official site.

### Privacy Commitment

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how and why we collect, process, use, and disclose your personal information and outlines your rights in relation to our use of it. In certain circumstances, you may have the right to object to our use of your personal information. For further information on this, please refer to the Your Rights section below.

### Importance of Accuracy

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

### Policy Updates

From time to time, we may change this Privacy Policy. Please review this Privacy Policy regularly to stay informed of any amendments.

### Personal Information Collection and Use

We may collect and process personal information about you in connection with a service or product provided to you (or the company you work for) by us, through your use of our Website, via our social media pages, or when you visit one of our UK premises.

**Suppliers**

If you work for a Supplier, we will process your personal information to facilitate communication with you and others regarding:

a) Energy and utilities proposals we coordinate with Suppliers;

b) Contracts we establish with Suppliers;

c) Managing our relationship with Suppliers;

d) Handling queries or communications arising from our Supplier relationships.

This processing is necessary for our legitimate interests. We process your personal information to effectively communicate with Suppliers (via you) and ensure we fulfill obligations to Suppliers and Customers.

Additionally, we process your personal information to:

- Confirm, update, and enhance our Supplier records (Legitimate interests).

- Comply with legal and regulatory obligations, including court orders and regulatory requests, and to protect our legal rights (Legal obligation or legitimate interests).

Alternatively, even without a strict legal obligation, we may have a legitimate interest in cooperating with authorities, complying with laws, regulations, standards, codes of conduct, and defending our rights.

**Visitors**

We process personal information of visitors to:

- Manage access to our premises and prevent unauthorized entry (Legitimate interests).

- Detect, investigate, and prevent crime and manage commercial risks, using CCTV footage where necessary (Legitimate interests).

You may also provide special category personal information (e.g., health, ethnicity, beliefs) for which we rely on your explicit consent for processing.

We only use your personal information for the purposes for which it was collected, unless we reasonably determine another purpose compatible with the original. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis.

**Sharing Your Personal Information**

When processing your personal information for the above purposes, we may share it with third parties, including:

- Our professional advisors (e.g., solicitors, accountants).

- Suppliers, to facilitate proposals and connections.

- Third-party service providers who process information on our behalf, such as IT service providers.

Retention Period:

We retain your personal information only as long as necessary for the purposes for which it was collected, including legal, regulatory, or reporting requirements. Additional retention may occur in case of complaints or anticipated litigation. The retention period is determined based on the nature and sensitivity of the data, potential risks, and legal requirements. For specific retention information, contact our Data Protection Officer.

Marketing:

Periodically, we may send you information about products or services we believe may interest you or your business. You can opt out of receiving such communications at any time via unsubscribe options provided in our communications.

Cookies:

Our website uses cookies and similar technologies to enhance your browsing experience. You can manage cookie settings through our website, though this may affect functionality.

**Websites’ Content:** We are not liable for any loss or damage resulting from your use of third-party websites. Links to other websites should not be interpreted as an endorsement by us. Third-party websites are not governed by our Privacy Policy; please review their privacy policies.

**Security:** We prioritize the security of all personal information we handle and invest resources to protect it from loss, misuse, unauthorized access, alteration, or disclosure. However, we cannot guarantee the security of personal information transmitted over the internet or by email, as internet-based platforms are not entirely secure. We do not accept responsibility for unauthorized access beyond our control.

**Your Rights:** Under data protection laws, you have specific rights regarding your personal information, including:

- **Right of Access:** Obtain a copy of your personal information (subject to exemptions).

- **Right to Rectification:** Request correction of incomplete or inaccurate personal information.

- **Right to Erasure:** Ask for deletion of your personal information in certain circumstances.

- **Right to Restriction:** Request suspension of our use of your personal information in certain circumstances.

- **Right to Portability:** Receive your personal information in a structured, commonly used, and machine-readable format, and, where feasible, transfer it to another organization.

- **Right to Object:** Object to our processing of your personal information in certain circumstances, with exemptions.

- **Right to Withdraw Consent:** Withdraw your consent at any time if we rely on consent as the legal basis for processing your personal information.

Some rights are subject to exemptions and specific situations. For more details on your rights, visit [ICO's website](https://ico.org.uk/for-the-public/). To exercise your rights or discuss them, contact our Data Protection Officer using the details provided below.

**Complaints Process:** If you're unsatisfied with how we handle your personal information, contact our Data Protection Officer below, and we'll investigate. Additionally, you have the right to lodge a complaint with the relevant data protection authority, such as the Information Commissioner’s Office (ICO) in the UK.

**Contact Us:** For inquiries about this Privacy Policy, please contact our Data Protection Officer at:

- **Address:** 16 Novas Business Center, Judson Road, North West Industrial Estate, Peterlee, SR82QJ

- **Office:** 0191 587 8139

- **Mobile:** 07826 062341

- **Email:** contactus@thecardellgroup.org