Data Protection Notice

About this notice

This Data Protection Notice summarises how POWER MARKET LIMITED meets its obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It complements our Privacy Policy, which describes in detail how we handle personal data.

Data controller

POWER MARKET LIMITED is the data controller for the personal data we collect through our website and in the course of our business. Our registered office is Rygor Commercials, 23a The Broadway, Westbury, Wiltshire, England, BA13 4JX. You can contact us about data-protection matters using the details at the end of this notice.

Our data-protection principles

We are committed to processing personal data in line with the principles of the UK GDPR. This means we will ensure personal data is:

• Processed lawfully, fairly and transparently.
• Collected for specified, explicit and legitimate purposes.
• Adequate, relevant and limited to what is necessary.
• Accurate and, where necessary, kept up to date.
• Kept for no longer than is necessary.
• Processed securely, with appropriate protection against unauthorised access, loss or damage.

Lawful processing

We only process personal data where we have a lawful basis to do so — typically consent, contract, legitimate interests, or a legal obligation. The basis we rely on depends on the specific processing activity, as explained in our Privacy Policy.

Working with processors

Where we engage third parties to process personal data on our behalf, such as hosting or analytics providers, we put appropriate contracts in place requiring them to protect the data and to act only on our instructions. We choose providers that take data protection seriously.

Data-subject rights

Individuals have rights over their personal data, including the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent. We have processes in place to handle such requests promptly and free of charge in most cases. To exercise your rights, contact us using the details below.

Data breaches

We take reasonable measures to prevent personal-data breaches. In the event of a breach that is likely to result in a risk to individuals’ rights and freedoms, we will notify the Information Commissioner’s Office within the required timeframe and, where necessary, inform affected individuals.

The supervisory authority

The Information Commissioner’s Office (ICO) is the UK’s independent authority for data protection. If you have concerns about how we handle your personal data, we would ask you to contact us first, but you also have the right to complain to the ICO at ico.org.uk.