We will never intentionally sell the data you provide to us or use it for profit. We try to ensure our websites and other databases do not use technologies that share your data for profit with third parties.
Westmill Energy Privacy Policy
1. ABOUT THIS POLICY
This privacy policy explains who we are, why we collect personal data and how we use and protect it. It also sets out your legal rights relating to your personal information.
When you visit our website, subscribe to our newsletter or connect and communicate with us in relation to the Joint Services we provide, we will collect, use and share personal data. The privacy and security of your personal data is something that we take seriously.
You can download a copy of the privacy policy here.
- ABOUT THIS POLICY (Paragraph 1)
- WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA AND WHY WE COLLECT IT (Paragraph 3.
- GETTING IN TOUCH WITH US (Paragraph 3)
- WHO IS THIS PRIVACY POLICY FOR ? (Paragraph 4)
- PERSONAL DATA WE COLLECT ABOUT YOU (Paragraph 5)
- WHERE DO WE COLLECT YOUR PERSONAL DATA FROM ? (Paragraph 6)
- WHAT IS THE PURPOSE AND LEGAL BASIS OF PROCESSING YOUR PERSONAL DATA? (Paragraph 7)
- COOKIES AND SIMILAR TECHNOLOGY (Paragraph 8)
- DIRECT MAILING WITH DATA SUBJECTS AND THIRD PARTY MARKETING (Paragraph 9)
- DISCLOSURES OF YOUR PERSONAL DATA (Paragraph 10)
- THIRD PARTY LINKS (Paragraph 11)
- INTERNATIONAL TRANSFERS (Paragraph 12)
- DATA SECURITY (Paragraph 13)
- DATA RETENTION (Paragraph 14)
- YOUR LEGAL RIGHTS (Paragraph 15)
- COMPLAINTS (Paragraph 16)
- CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES (Paragraph 17)
2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA & WHY WE COLLECT IT
For the purposes of Data Protection Law, the Joint Controllers of your personal data are: Westmill Sustainable Energy Trust (“WeSET”), Westmill Wind Farm Co-Operative Limited (“Westmill Wind”) and Westmill Solar Co-Operative Limited (“Westmill Solar”). In this privacy notice they are individually referred to as “the partners” and collectively referred to as “the Partnership”.
Alongside each partner’s individual administrative and marketing efforts, the Partnership provides certain Joint Services including the provision of a joint website, a joint newsletter and organising public tours of the Westmill wind and solar energy farms. The overall aim of the data sharing initiative is to co-ordinate the information sharing and educational activities of the Partnership for supporters of the Partnership and others concerned with the effects of climate change and/or the benefits of community-owned renewable energy. To deliver the Joint Services, the Partnership collects and processes Personal Data for the various Joint Purposes described in more detail in this privacy notice. The Partnership are Joint Controllers of your Personal Data that is collected and processed by them for the Joint Purposes described in this privacy notice. This means that legally, all three organisations are jointly responsible for deciding why and how your personal information is used, and also how it is protected.
Please note that the Partnership share your data with other third parties, in particular Energy 4 All Limited (E4A) who provide us with technical and administration support and are authorised by us to act as a sub processor of data that we collect.
In parallel to the activity documented in this policy, each partner collects and process data pertaining to activities of each individual organisation. This is documented in the privacy policy of each partner. This includes, but is not limited to, Member Data for Westmill Wind Farm and Westmill Solar Co-operatives, Westmill Solar Community Grant recipients, Westmill Sustainable Energy Trust Volunteer Guides and Westmill Sustainable Energy Trust donors.
3. GETTING IN TOUCH WITH US
Queries and requests are welcome. For ease of administration, we have one single point of contact for the partnership. This point of contact will either respond directly or they will field your query to the relevant partner organisation. Please direct your query to our single point of contact. Alternatively, if you would also like to contact one of the partners directly please find their details in each respective privacy policy (linked below).
Westmill Energy Partnership
c/o Energy4All, Unit 26, Trinity Enterprise Centre, Furness Business Park, Barrow-in-Furness, Cumbria, LA14 2PN.
Email: info@westmillenergy.coop
Telephone: 01229 821028
You can find out more about the work of the Partnerships individual organisations and how they process personal data by reading their individual privacy statements on our website by clicking on the links below:
Westmill Wind Farm Co-operative Limited. Privacy Notice here.
Westmill Solar Co-operative Limited. Privacy Notice here.
Westmill Sustainable Energy Trust. Privacy Notice here.
4. WHO IS THIS PRIVACY POLICY FOR?
This privacy policy is aimed at individuals that visit our website, use our Joint Services and subscribe to our joint newsletter.
Children’s Personal Data
This website is not primarily intended for children and the Partnership does not knowingly collect personal information directly from children.
You should speak to your parent or an adult you trust if you cannot understand anything, or if you are worried.
5. PERSONAL DATA WE COLLECT ABOUT YOU
We may collect and process the following personal data about you:
- Identity Data includes first name, last name, title, nationality, country of residence, date of birth.
- Contact Data includes postal address, email address and telephone numbers.
- Transaction Data includes details about site tours and event bookings.
- Correspondence between us such as website enquiries, “Contact Us” enquiries, emails, letters, and correspondence relating to bookings, queries, incidents or complaints.
- Images such as photographs and video recordings of you held in both digital and manual format.
- Technical and Monitoring Data: Information about how you use and interact with our website, newsletter and other services. It includes information collected during your visit to our website, the internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access the Westmill Energy website. To learn more about our use of cookies or similar technology please check our cookie policy: Westmill Energy Cookie Policy.
- Profile Data such as bookings, feedback and survey responses.
- Marketing and Communications Data includes your preferences in receiving marketing from the partnership, the organisations who make up the partnership, and the third parties that enable us to deliver our Joint Services; and your communication preferences.
Special Categories of Personal Data
When carrying out our processing to deliver the Joint Services, the Partnership does not expect to routinely collect or process any special categories of personal data*. However, on occasion, we may collect and process the following special categories of personal data where data protection law permits:
*Special Category Personal Data relates to information about racial or ethnic origin, trade union membership, health and medical conditions, genetics, biometric information (but only where this is used for identification purposes), political opinions, sex life, sexual orientation and religious beliefs.
Information about your racial or ethnic origin, religious or philosophical beliefs, and political opinions;
- The Partnership does not aim to collect and process these special categories of personal data. However, they may be indirectly processed from other information we hold about you, for example, if you make an enquiry to us from a specific organisation such as a religious group.
Information relating to physical or mental health or condition;
- We may collect and process information about your health or medical conditions, if you provide it to us. For example, if you book a tour of one of our sites, you may tell us about a disability you have in order for us to make reasonable adjustments. Or you may tell us about dietary requirements from which a medical condition can be inferred, e.g. Gluten allergy/Coeliac.
Criminal Offence Data
We may also collect and process information about criminal convictions and offences (including allegations) (Criminal Offence Data) but only if the law allows us to do this. For example, if circumstances of a site visit require us to liaise with the Police or perform background checks with the Disclosure and Barring Service (“DBS”).
6. WHERE DO WE COLLECT YOUR PERSONAL DATA FROM?
The source of the personal data we collect relating to you varies depending on our relationship and how we interact.
The personal data we collect, and process is primarily collected directly from you from your direct interactions with us, for example:
- When you or your organisation browse, complete a form, make an enquiry about our Joint Services, subscribe to our Newsletter or otherwise interact with us via our website;
- submit an application for a tour of the Westmill Wind Farm or Westmill Solar sites
- subscribe to our joint newsletter;
- respond to a survey;
- give us feedback; or
- correspond with us via a third party social media messaging service.
We may also collect and process your personal data indirectly from third parties or publicly available sources. Depending on the circumstances, the Partnership may collect or receive personal data about you from various third parties and public sources as set out below:
- Personal data from the individual organisations within the Partnership on an individual basis, including Westmill Wind Farm Co-Operative Ltd, Westmill Solar Co-Operative Limited and Westmill Sustainable Energy Trust but only where there is a lawful basis under UK data protection law to permit this. For example, if an enquiry relating to a Joint Service is accidentally submitted to an individual partner and needs to be re-directed to the Partnership to be handled on a joint basis.
- Technical Data may be collected from the following parties:
- Search information providers such as Google based outside the UK
- Spam and website abuse prevention providers such as Google reCAPTCHA based outside the UK
- Video hosting providers such as YouTube based outside the UK
- Mapping platforms such as Google Maps based outside the UK
- Identity and Contact Data from publicly available sources such as Companies House or the Mutuals Register.
- The Partnership Parties collectively or individually do not employ a data clearance broker.
From automated technologies or interactions. As you interact with our website, we will automatically collect limited Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy for further details. Westmill Energy Cookie Policy.
IF YOU FAIL TO PROVIDE PERSONAL DATA
Where we need to collect personal data by law or in order to process your instructions or perform our Joint Services and you fail to provide that data when requested, we may not be able to carry out your instructions or perform the Joint Services for you. In this case, we may have to cancel our engagement or contract you have with us, but we will notify you if this is the case at the time.
7. WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA?
The Partnership will use your personal data for their Joint Purposes in order to deliver their Joint Services. The Joint Purposes for which your personal data is processed include:
What is our Purpose and legal basis for processing your Personal Data?
The Partnership will only process your personal data for the Partnership’s Joint Purposes in order to deliver their Joint Services set out above and providing data protection law permits or requires it.
When processing your personal data, data protection law requires us to have a legal reason (legal basis) for collecting and using it. The table below describes the main purposes for which the Partnership uses your personal data, and the corresponding the legal bases we rely on to do so. Where we rely on the legal basis of “legitimate interests”, we have also identified what those “legitimate interests” are.
| Joint Purpose/Use of Personal Data | Category/ Type of data | Legal basis under UK GDPR |
| For the purposes of administering the Joint Website | (a) Technical and Monitoring Data | Legitimate Interests (Article 6(1)(f) EU GDPR) |
| For the purposes of administering website cookies.
|
(a) Technical and Monitoring Data |
|
| For the purposes of administering Joint Newsletter subscriptions, dealing with subscription queries, sending out Newsletters | (a) Identity
(b) Contact |
|
| For the purpose of triaging enquiries received via the "Contact Us" form on the Joint Website
|
(a) Identity
(b) Contact (c) Company name if relevant (d) Correspondence (e) potentially special category personal data
|
|
| For the purpose of administering queries that come into the website via the "Contact Us" form
|
(a) Identity
(b) Contact (c) Company name if relevant (d) Correspondence (e) potentially special category personal data
|
|
| For the purposes of administering and registering applications for public/individual tours of the Westmill site received via the website, and the administration of those visits (TicketTailor)
|
(a) Identity
(b) Contact (c) potentially special category personal data e.g. disability access arrangements (d) Technical and Monitoring Data
|
|
| For the purposes of administering, assessing and registering applications for large public groups, virtual tours and media tours of the Westmill site received via the website (Google Forms), and the administration of those visits.
|
(a) Identity
(b) Contact (c) Company name if relevant (d) nature of query (e) potentially special category personal data e.g. disability access arrangements. (f) Technical and Monitoring Data |
|
| For the purpose of administering tour feedback
|
|
|
| For the purpose of analysing data relating to public site visits (whether from individuals, groups, the media, in person or virtual and regardless of the purpose) |
|
|
| To manage our relationship with you which will include:
(a) Notifying you about changes to our terms or privacy policy (b) Dealing with your requests, complaints and queries
|
(a) Identity
(b) Contact (c) Marketing and Communications
|
We are required to keep our records updated and manage our relationship with you. |
| Images (digital and manual format) and video recordings and CCTV |
|
We may use images and recordings of you in Partnership publications (printed and online), the Partnership’s website, and on the Partnership’s social media platforms to communicate our joint purposes and other information and raise the profile of our partnership and communicate with our community of members and supporters. We will rely either on the legal basis of Legitimate Interests or Consent depending on the image and the context.
We will obtain consent if the image is particularly “privacy intrusive” because of its context e.g. it is a “close up” of you, or a small group or subject matter, or relates to a child. We will obtain consent before sharing your image with a third party for their own purposes such as a journalist or another organisation such as one of the partners.
We may publish images of you as described above on our website and social media platforms for the purposes described where it is necessary for our legitimate interests or those of our affiliate organisations but only where we are satisfied that the use of your image is in line with UK data protection law and our legitimate interests are not outweighed by a negative impact to your own rights. You have a legal right to object to the use of your images and video based on the legal basis of “legitimate interests”. |
| To enable you to complete a survey
|
(a) Identity
(b) Contact(c) Profile (d) Opinions (e) Technical and Monitoring (f) Marketing and Communications
|
(a) Necessary for our legitimate interests (Article 6(1)(f) UK GDPR)
It is in our legitimate interest to study how our contacts and supporters use our services, so we can continue to develop them and meet demand.
|
| To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data).
|
(a) Identity
(b) Contact (c) Technical and Monitoring
|
It is in our legitimate interests to be able to run our organisation, these Joint Services and this Joint Website effectively, ensure network security, prevent fraud and protect our network and systems. (b) Necessary to comply with a legal obligation |
| To send you relevant direct marketing communications about goods or services from one of the partners, e.g. a share offer, that may be of interest to you based on your Marketing and Communications Preferences.
|
(a) Identity
(b) Contact (c) Technical and Monitoring (d) Usage(e) Profile (f) Marketing and Communications
|
|
YOUR LEGAL RIGHT TO OBJECT TO YOUR PERSONAL DATA BEING USED BY THE PARTNERSHIP ON THE LEGAL BASIS OF “LEGITIMATE INTERESTS”
Where your personal data is processed for the legal basis of “legitimate interests”, you have the legal right to object.
In some cases, the right to object is absolute; this means that the Partnership must comply with your objection and stop using your personal data. For example, you have the absolute right to object to your personal data being used for the purpose of direct mailing and marketing.
In other cases, the right to object is not absolute. This means that you have the legal right to object and the Partnership must stop using your personal data unless it can demonstrate that its legitimate interest is more compelling than the impact it has on you. The Partnership usually has one calendar month in which to respond to your objection.
If you want to object to your personal data being used by the Partnership for the legal reason of “legitimate interests”, please contact the relevant data protection lead who will explain what you have to do: Their contact details are in the section “Getting in Touch with Us”.
8. COOKIES AND SIMILAR TECHNOLOGY
The personal data described above includes certain data about your use of our online services such as our Partnership website. For example, we, may collect data about your IP address of the device you are using, the type of operating system and browser you use, and the parts of our online site or service that you access.
The Partnership use cookies to collect and store this and other data about your visit to, or use of, our online services. We may later associate the usage and other data we collect online with personal information about you, as permitted or required by law.
If you are using the Partnership’s website, then the Partnership’s Cookie Policy will apply. You can read the Partnership’s Cookie Policy here. Westmill Energy Cookie Policy.
9. DIRECT COMMUNICATIONS WITH DATA SUBJECTS AND THIRD PARTY MARKETING
When you interact with us, at various points, when your personal data is collected, you will be asked to indicate your preferences for receiving direct marketing communications from the Partnership via email, telephone and SMS. This direct marketing comprises news, updates, invitations to events, and other relevant information that we believe will interest you.
THIRD-PARTY MARKETING
The Partnership will never share your personal information with a third party for their own marketing without your express consent. In some cases, the Partnership may feel it is beneficial to share you details with the partner organisations for their own marketing purposes but they will only do this with your specific opt-in consent. For example, the Joint Partnership between Westmill Wind, Solar and WeSET may invite you to opt-in to receive news and information from their respective organisations on an individual basis such as Westmill Wind Farm Co-Operative Limited. If you consent to this, your details will be shared with the relevant organisation for their own purposes.
OPTING OUT
You can ask to stop sending you marketing communications at any time by following the opt-out links within any marketing communication sent to you or by contacting us using the contact details in Section 3.
If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative purposes for example you will still continue to receive our newsletter if you subscribed to that, updates to our Terms and Conditions, checking that your contact details are correct etc. If you wish to unsubscribe to our newsletter you can do so at any time, quickly and easily by following the opt-out links within any marketing communication sent to you or by contacting us using the contact details in Section 3.
10. DISCLOSURES OF YOUR PERSONAL DATA
To enable the Partnership to deliver its Joint Services we sometimes need to share your personal data with other organisations. Where this is necessary, we will comply with all aspects of data protection legislation.
We may share your personal data where necessary with the parties set out below for the purposes set out in the table.
What is our Purpose and legal basis for processing your Personal Data?
- External Third Party Controllers: The Partnership may share your personal data with third party organisations to be further processed by those organisations for their own independent purposes. For example:
- To WeSET, Westmill Windfarm Co-operative or Westmill Solar Co-operative: Providing it has your consent or alternative legal basis to do under UK data protection law, the Partnership may share your personal data with individual constituent partners i.e. Westmill Sustainable Energy Trust (WeSET), Westmill Wind Farm Co-operative Ltd or Westmill Solar Co-operative Ltd as appropriate for their own independent purposes. For example, where you have raised a query with the Partnership and it is appropriate to transfer your query from the Partnership to one of these organisations. Alternatively, the Partnership may share your personal data where you have consented to direct mailing from one of these organisations.
- Public authorities and regulators that may need to access your personal information in order to exercise their statutory functions. For example, the Partnership may need to share information with the Financial Conduct Authority, Information Commissioners Office, or HMRC etc.
- External inspectors and auditors
- Third party professional advisors such as insurers, accountants, legal advisors and any organisation or individual appointed by the Partnership to carry out an independent investigation.
- Third party service providers that provide a service to the Partnership. Where this happens, your personal data is shared securely, in compliance with data protection law and where a GDPR-compliant data processing contractual arrangement has been entered into. Third party service providers may only process your personal data on our instructions and where they have contractually agreed to hold it confidentially and keep it secure. They may not use your personal data for their own purposes.
- For example, this may include:
- Energy4All is a trusted third-party service provider with whom we have a contract to help us deliver our Joint Services.
- Ticket Tailor, is a GDPR compliant UK based organisation with whom we have a contract to enable us to take individual bookings via our website. Learn more about Ticket Tailor’s practices.
- Google Forms, is a GDPR compliant organisation with whom we have a contract to enable us to take group bookings via our website. Learn more about Google’s privacy practices.
- Intuit Mailchimp is a GDPR compliant organisation with whom we have a contract to enable us to send our newsletter and any direct marketing. Learn more about Mailchimp’s privacy practices.
Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. If a change happens to the ownership of any of the Partnership, then the new owners may use your personal data in the same way as set out in this privacy policy.
11. THIRD PARTY LINKS AND WEBSITES
This website may include links to third-party websites*, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
If you wish to do so then usually you can prevent cookies from being downloaded to your browser and may delete those that have already been downloaded. How this is achieved varies between different browsers. Consult the website of your browser provider for more details. However, you should be aware that if you block or delete cookies this may have a detrimental impact upon your ability to access our website and the services that we provide. It may mean that not all of the facilities on our website will be accessible by you, or it may mean that you are unable to access any member services which we provide.
Our Joint website includes links to the websites of the Partnership’s individual respective organisations (Westmill Wind Farm Co-Operative Ltd, Westmill Solar Co-operative Ltd and Westmill Sustainable Energy Trust.) However, subject to your consent or other legal basis under data protection law, it may share your personal data with a respective organisation where it is necessary or appropriate to do so. For example, if you have raised a query with the Partnership about the Wind Farm, it is necessary to transfer your query to the Westmill Windfarm Co-Operative Limited.
12. INTERNATIONAL TRANSFERS
To deliver our Joint Services, we sometimes use service providers who are based outside the UK, and they sometimes need access to your personal information in order to provide those services to us
In these circumstances, there may be occasion when we need to transfer your data to other countries.
Some of these destination countries may have different laws and data protection compliance requirements to the UK, with some providing more or less protection than others. When your personal data is transferred outside the UK, the Partnership has taken appropriate steps to ensure that in all cases, it is handled and protected as described in this Joint Privacy Notice and UK data protection law.
For example, we may transfer personal data under UK data protection rules which are designed to protect personal data that is transferred to a country or organisation that is deemed to adequately protect personal information pursuant to determinations made by the UK Government or the U.S Federal Trade Commission (FTC).
For example, if we process your personal data for the purposes of the newsletter or direct marketing, it may be transferred to:
- Intuit Mailchimp in the United States, who is a signatory to the UK Extension to the EU-US Data Privacy Framework. This mechanism meets the required legal standard in relation to the transfer of your personal data outside the UK under Article 45 of UK GDPR. Learn more about Mailchimp’s privacy practices.
For example, to undertake our Joint Services, it may be transferred to:
- Google Forms, who store data on multiple servers across multiple regions and it is likely that the personal data we collect via Google Forms will be stored outside of the UK and EEA. Google, is a signatory to the UK Extension to the EU-US Data Privacy Framework. This mechanism meets the required legal standard in relation to the transfer of your personal data outside the UK under Article 45 of UK GDPR. Learn more about Google’s privacy practices.
In other cases, where any personal data is processed by suppliers outside the UK in countries that the UK or the EU has not assessed as providing an adequate level of data protection, we ensure that personal data is adequately protected in accordance with applicable data protection law, and in particular Article 46 of the UK GDPR, by ensuring information security and other appropriate safeguards are in place and using approved data protection contract clauses to cover the transfer.
If you would like more information about the safeguards we rely on when we transfer your personal data outside the UK, please contact us using the contact details in Section 3 “Getting in Touch with Us”.
13. DATA SECURITY
The Partnership has put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
14. DATA RETENTION
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In some circumstances you can ask us to delete your data (See 15 below for further information).
In some circumstances we will anonymise your personal data so that it can no longer be associated with you, for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
15. YOUR LEGAL RIGHTS
You have a number of rights under data protection laws in relation to your personal data. Some of these rights do not apply in all circumstances. Also, the Partnership may be able to refuse or partially refuse your request in some circumstances, for example, where a legal exemption applies.
If you would like to exercise one or more of your legal rights, or would like more information about them, please contact a relevant data protection lead whose contact details can be found in “Getting in Touch with Us”.
You have the right to:
- Access your personal data: You have the right to request a copy of the personal data we hold relating to you to check we are lawfully processing it. You are also entitled to other information relating to how we use it. There are exemptions to this right which means that in some cases, you may not receive some or all of your personal data if an exemption is applied. For example, if providing you with your information would also reveal personal information relating to someone else. This right is sometimes referred to as the right of Subject Access.
- Erasure: At your request, we will delete your personal information when it is no longer necessary for the purposes for which it was collected, or when, among other things, your personal data has been unlawfully processed, providing we do not have an overriding legitimate reason for retaining it.
- Accuracy: Our objective is to ensure that your personal data is accurate, current, and complete. Please contact us to let us know if this is not the case. You have the legal right to ask us to rectify your personal data if it is inaccurate or incomplete.
- Objecting: In certain circumstances, you have the right to object to processing of your personal data.
For example, where we are processing your personal data on the legal basis of our legitimate interests, and we have no compelling reason that we can demonstrate which overrides the impact of the processing to your interests, rights and freedoms. Please see above for the circumstances where we are processing your personal data on the legal basis of legitimate interests.
You also have an absolute legal right to object to the processing of your personal data for purposes of direct marketing.
- Restriction of Processing: You have the right to ask us to restrict the processing of your personal data in certain circumstances, such as where you wish to suspend processing whilst we establish the accuracy or the legal reason for processing it.
- To withdraw your consent to processing: If we are processing your personal data on the legal basis of consent, you have the legal right to withdraw your consent (either fully or partly). The withdrawal of your consent will not affect the lawfulness of our processing prior to the withdrawal of your consent.
We make it quick and easy to withdraw your consent (or amend your preferences). Simply follow the “unsubscribe” facility on relevant emails or alternatively follow the instructions in our other correspondence. If you experience any difficulty, please email: info@westmillenergy.coop.
- Portability: In certain circumstances, you have the legal right to receive your personal data or have your personal data transmitted to another organisation in a structured, commonly used and machine readable format.
16. COMPLAINTS
If you are unhappy with the way we have handled your personal data, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues (www.ico.org.uk). We would, however, appreciate the opportunity to address your concerns before you approach the ICO so ask that you contact us first. Our contact details are Section 3 “Getting in Touch with Us”.
17. CHANGES TO THE PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We keep this Joint Privacy Notice under regular review. This version was last updated on 16th June 2025.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us, for example a new address or email address.
END OF DOCUMENT