Privacy Policy
Last updated: 28 September 2026
Who we are
Cardinal Energy Group Ltd (“Cardinal Energy”, “we”, “us” or “our”) provides business utility procurement and consultancy services, including electricity, gas, water and waste services.
For the purposes of UK data protection law, Cardinal Energy Group Ltd is the controller of personal data that we collect and use in connection with our business activities.
Registered office:
Cardinal Energy Group Ltd
G22 Eleventh Avenue North
Team Valley Trading Estate
Gateshead
England
NE11 0NJ
ADR Reference: ADR-C35CARD01
Privacy and data protection enquiries: info@cardinalenergy.co.uk
Information we collect
Depending on our relationship with you, we may collect and process personal information including:
- Names, job titles and business contact details;
- Telephone numbers, email addresses and business addresses;
- Business and utility account information;
- Meter and supply information, including MPAN and MPRN details where applicable;
- Utility usage, consumption and billing information;
- Letters of authority and other documentation provided to us;
- Information relating to quotations, contracts, renewals and services;
- Correspondence and communications with us;
- Information provided through our website; and
- Other information reasonably required to provide our services.
We primarily provide services to businesses. However, information relating to directors, employees, sole traders, partners and other identifiable individuals may constitute personal data.
Where we obtain information
We may obtain personal information:
- Directly from you or your organisation;
- Through enquiries made by telephone, email or our website;
- Through referrals;
- From suppliers and service providers in connection with the services we provide;
- From third-party business information sources; and
- From legitimate publicly available business sources and directories.
How we use your information
We may use personal information to:
- Provide our utility procurement and consultancy services;
- Obtain and compare quotations;
- Arrange and administer utility contracts and services;
- Communicate with customers and prospective customers;
- Manage contracts, renewals and customer relationships;
- Respond to enquiries, requests and complaints;
- Maintain appropriate business and financial records;
- Improve our services and business operations;
- Protect our business and prevent or detect fraud;
- Comply with our legal and regulatory obligations; and
- Provide information about our services where permitted by law.
Lawful basis for processing
We only process personal information where we have an appropriate lawful basis.
Depending on the circumstances, this may include:
Contract – where processing is necessary to enter into or perform a contract.
Legitimate interests – where processing is necessary for our legitimate business interests or those of another organisation, provided those interests are not overridden by the rights and interests of the individual.
Our legitimate interests may include providing and developing our services, managing customer relationships, operating and protecting our business and communicating with businesses that may reasonably be interested in our services.
Legal obligation – where processing is necessary to comply with a legal obligation.
Consent – where we rely on consent for a particular activity. Where processing is based on consent, consent may be withdrawn at any time.
Marketing
We may contact businesses by telephone or email regarding our services where permitted by applicable law.
You can ask us to stop sending marketing communications at any time by contacting info@cardinalenergy.co.uk or by using an unsubscribe option provided in our communications.
We may retain limited information where necessary to ensure that a request not to receive marketing communications continues to be respected.
Sharing your information
We may share personal information where reasonably necessary to provide our services, operate our business or comply with legal requirements.
This may include sharing information with:
- Utility suppliers and service providers;
- Metering and other industry service providers;
- Organisations involved in obtaining quotations or administering contracts;
- Technology and business service providers;
- Professional advisers, insurers and accountants; and
- Regulatory, governmental or law-enforcement bodies where required.
We only disclose information where there is an appropriate reason for doing so and limit the information shared to what is reasonably necessary for the relevant purpose.
We do not sell personal information to third parties for their own marketing purposes.
Security
We take appropriate technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
Access to personal information is restricted to authorised persons who require it for legitimate business purposes.
International transfers
Some organisations that provide services to us may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.
How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet relevant contractual, legal, accounting or regulatory requirements.
Retention periods vary depending on the nature of the information and our relationship with you.
Customer and contractual records will generally be retained for up to six years following the end of the relevant business relationship, where there is an appropriate reason to do so.
Information may be retained for longer where reasonably necessary to comply with legal requirements or to establish, exercise or defend legal claims.
When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of as appropriate.
Your rights
Depending on the circumstances, you may have the right to:
- Request access to personal information we hold about you;
- Request correction of inaccurate or incomplete information;
- Request deletion of your personal information;
- Request restriction of processing;
- Object to certain processing, including direct marketing;
- Request transfer of certain personal information where applicable; and
- Withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to exemptions under applicable law. To exercise your rights, please contact info@cardinalenergy.co.uk.
Automated decision-making
We do not currently use personal information to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
Cookies and our website
Our website may use cookies and similar technologies to provide website functionality and help us understand and improve how our website is used.
Where required by law, non-essential cookies will only be used with your consent.
You can manage your cookie preferences through the controls available on our website, where provided, or through your browser settings.
Links to other websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of third-party websites. We recommend reviewing the relevant privacy notice when visiting another website.
Complaints
If you have concerns about how we use your personal information, please contact us:
Cardinal Energy Group Ltd
G22 Eleventh Avenue North
Team Valley Trading Estate
Gateshead
England
NE11 0NJ
Email: info@cardinalenergy.co.uk
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. Information Commissioner’s Office
Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our business, services or legal requirements.
The latest version will be published on our website, and the date at the top of this notice will be updated accordingly.