WHAT INFORMATION ABOUT YOU WILL WE USE?
The categories of personal information we use include:
- Your name, address, telephone number(s), e-mail address and other contact details, including social media details;
- The meter point administration number (“MPAN”) associated with your property, which relates to the supply of electricity to you through that meter point;
- Your bank account, credit card and/or debit card details in circumstances where you pay us to provide a service to you;
- Details we may need in order to design and install a connection to our electricity distribution network that you have asked us to make to your property;
- Your health and/or medical condition or other information such as your age and whether you have children under the age of five, which means you are eligible to be included on our Priority Services Register; and
- Regulatory information, including In respect of the uptake of accredited renewable and low carbon technologies connected to our electricity distribution network under the Feed in Tariff arrangements and the deployment of heat pumps under the Renewable Heat Incentive Schemes for the purposes of network modelling, planning and design.
In addition, as Ofgem, our Regulator, has approved our Data Privacy Plan, if you have a smart meter installed, we are able to receive information from your smart meter about the amount of electricity you use.
We may collect personal information about you that has been obtained from a number of sources. Those sources include telephone discussions with you, which we may record for quality and training purposes, written information you have sent to us, other communications we have with you, such as by e-mail and via social media and our website, the electricity suppliers and gas transporters, organisations that provide such information and the electoral register.
WHY WE COLLECT PERSONAL INFORMATION ABOUT YOU AND HOW WE USE THAT INFORMATION
We will not use any automated decision-making in our processing of your personal data and will collect personal information about you in the following circumstances:
a) You are the owner or occupier of a property that is connected to our electricity distribution network.
We will collect and process such personal information as is necessary for the performance of the contract you have with us for the maintenance of that connection. This includes providing our services to you under that contract, such as:
- Providing you with information about your power supply and with updates regarding our work to restore your supply in the event of a power cut;
- If you ask for our assistance with work you are carrying out at or alterations you are making to your property;
- Complying with our obligations under various industry agreements and codes, including the Master Registration Agreement and the Retail Energy Code, which facilitate the efficient and effective running of the retail energy market and set the terms for the provision of Metering Point Administration Services and the procedures in relation to changing electricity supplier, including our use of MPANs; and
- Maintaining and testing our various IT systems so that we can operate an efficient and economical system of electricity distribution in accordance with our statutory duty under the Electricity Act 1989.
We consider that we have a legitimate interest in processing your personal information in respect of the operation, maintenance and management of our electricity distribution network and to fulfil our obligations under our electricity distribution licence;
b) You ask us to provide you with a new connection to our network or to alter an existing connection.
We will use the personal information you provide to us in order to process your connection request (including to process your payment), enter into a contract with you to provide the new or altered connection and to deliver the work required;
c) You have a smart meter installed
We consider that we have a legitimate interest in processing the information we receive from your smart meter in order to provide a better service to our customers. For example, that information will help us to determine where we need to invest in our electricity distribution network to improve the quality of the electricity supply.
We will not use the information we receive from your smart meter for any other reason, for example to sell any products or services to you, and we will not share that information with third parties for commercial reasons.
d) You join our Priority Services Membership.
As part of our Priority Services Membership, we hold personal information about customers who are of pensionable age, are disabled or chronically sick, live with children aged under 5 or, due to being in a vulnerable situation, are in need of additional services related to their access, safety, and communication needs. We will be given that information either by you, by someone acting on your behalf or by your energy supplier.
We will process personal information, including regarding your health and/or medical condition, which is one of the "special categories of personal data", where we need to do so in order to operate our Priority Services Membership and, therefore, to fulfil our legal obligations under our electricity distribution licence.
We and our partner organisations, which include the emergency services, social services, charities and not for profit organisations, may use the information relating to our Priority Services Membership that we have been given in order to provide you with the services set out in our guide to what you can expect from us when you join our Priority Services Membership, including helping you in the event of a power cut. Further details of our priority services and a link to our Priority Services Membership booklet can be found at https://northernpowergrid.com/care;
e) You have to make a payment to us for a service we provide to you or we have to make a payment to you, for example if you want us to make a new connection to or alter the existing connection of your property to our electricity distribution network or where we are to make a payment to you under one of the Electricity Guaranteed Standards of Performance or on a goodwill basis; and
f) To ensure that we provide you and all of our customers with a high standard of service.
We use an independent research company to carry out customer satisfaction surveys on our behalf, as required by the terms of our electricity distribution licence. In order to do so, we may provide your details to Explain Market Research Limited, which is currently our appointed research company. If we do so, Explain Market Research Limited may contact you to complete a brief survey regarding your satisfaction with our service. Given the nature of the services we provide to you and the statutory and regulatory environment in which we are required to operate, we believe that the way in which we process your personal information for this purpose is in the interests of providing you with a high standard of customer service such that your interests or fundamental rights and freedoms as the data subject are not overridden by the ways in which we do so.
You are not obliged to provide us with your personal information. However, if you do not do so, we will be unable to provide you with the level of customer service we would like, such as keeping you up to date with our progress in fixing problems on our electricity distribution network that may affect the power supply to your property.
WITH WHOM WILL WE SHARE YOUR PERSONAL INFORMATION?
- Other companies in the Northern Powergrid group;
- Third parties whenever we are required to do so either by law, including to the Police, other law enforcement agencies and Her Majesty’s Revenue and Customs, or by the terms of our electricity distribution licence, including for customer satisfaction research and other regulatory purposes;
- Other parties to the energy industry agreements and codes, including the Retail Energy Code, for the purpose of fulfilling our obligations under those agreements and codes. Those parties will be acting either as joint controllers or processors of that data as appropriate to their functions under the relevant agreement or code;
- Companies or other organisations (including other companies in the Northern Powergrid group), with which we have a contract in order to provide our services to you in performance of a contract we have with you or with which we have a contract in order to operate our business, such as our IT Infrastructure Services provider; and
- Organisations such as the emergency services, social services, charities and other not for profit organisations and your electricity supplier and gas transporter so that you can be provided with priority services in the event of a power cut or a similar incident. We may, in certain circumstances, share personal information with some or all of those organisations via the UK Government’s ResilienceDirect system, including for purposes associated with the Civil Contingencies Act 2004.
FOR HOW LONG WILL WE RETAIN YOUR PERSONAL INFORMATION?
i) The length of time your property is connected to our electricity distribution network and for at least seven years thereafter so that we are able to respond to any queries, complaints, claims or litigation;
ii) Seven or twelve years following expiry of any contract we may have with you, depending on the nature of that contract;
iii) Seven years so that we have the opportunity to deal with any issues that may arise with your power supply or your relationship with us, be it of a statutory, customer service nature or otherwise; or
iv) For so long as we need to do so for legal, litigation or taxation reasons or for reasons related to compliance with our electricity distribution licence and/or the industry agreements that are associated with our role as a distribution network operator.
PROTECTING YOUR INFORMATION
We maintain stringent security measures designed to protect not only your personal information but other information in respect of the operation of our electricity distribution network. Our core information security principles are to protect personal data in terms of:
- Confidentiality, by protecting personal data from breaches, unauthorised disclosures, loss or unauthorised viewing;
- Integrity, by not allowing personal data to be modified without due cause; and
- Availability, by protecting personal data from disruption.
To achieve this, the measures we implement include adhering to various security standards, including holding ISO27001 accreditation in respect of customer-related data, physical and technological protection, data encryption, having in place a suite of policy and procedural documentation in respect of the way in which we handle and keep personal data secure and asking you for proof of identity before we disclose your personal information to you.
Where we transfer your personal information to third parties in order to provide our services to you or to operate our business, we will put in place arrangements to protect that information.
TRANSFERRING PERSONAL INFORMATION INTERNATIONALLY
We may need to transfer some personal information to organisations that are outside of the UK, for example to our outsourced IT Infrastructure Services providers or to other organisations for hosting purposes. We will ensure that such transfers are either to countries in respect of which the UK has made an adequacy decision or there are appropriate safeguards in place to protect that information, including at least one of the safeguards required by data protection law. We transfer personal data to our outsourced IT Infrastructure Services provider in India using such appropriate safeguards.
Otherwise, we will not transfer your personal information to a third party outside of the UK unless you have confirmed to us that you are happy for us to do so.
CONTACTING US AND YOUR RIGHTS
If your property is connected to the electricity distribution network of Northern Powergrid (Northeast) plc, the controller of your personal information is Northern Powergrid (Northeast) plc. If your property is connected to the electricity distribution network of Northern Powergrid (Yorkshire) plc, the controller of your personal information is Northern Powergrid (Yorkshire) plc. Northern Powergrid Metering Limited is also a controller of a limited amount of personal data (including MPANs and Meter Point Registration Numbers for gas meters) in circumstances where it provides a smart or conventional meter to your energy supplier for installation in your property.
If you would like to contact us about how we process your personal information, you can do so by clicking on the “Make an enquiry” button at the bottom of the Home page on our website at northernpowergrid.com or by writing to the Data Protection Officer, whose contact details are:
Head of Regulatory Compliance
78 Grey Street
Newcastle upon Tyne
Subject to certain conditions, you have the right to:
- Access your personal information;
- Be informed about how we process your personal information;
- Have your personal information rectified or erased;
- Restrict our processing of your personal information;
- Object to our processing of your personal information; and
- The portability of your personal information, e.g. to receive that information in a “machine-readable format”.
If we are processing any of your personal data based on you having given us consent to do so, you have the right to withdraw that consent at any time. However, this will not affect the lawfulness of any processing we may have undertaken based on you consent before it is withdrawn.
You have the right to complain to the Information Commissioner’s Office about the way in which we process your personal information. You may do so by clicking on “Make a complaint” button on the Information Commissioner’s website at https://ico.org.uk/ or by writing to:
Information Commissioner's Office
Please note that, by deleting our cookies or disabling future cookies, you may not be able to access certain areas of our website.
CAN I OPT OUT OF GOOGLE ANALYTICS?
Yes, you can do so by downloading a Google Analytics Opt-out Add-on and applying it to your computer. You can download that Add-on from https://tools.google.com/dlpage/gaoptout/. It also works on mobile telephones.
You can also manage and opt-out from interest-based advertising on your browser and mobile telephone at http://optout.networkadvertising.org/#!/.
We reserve the right to monitor all forms of communication we have with you, whether those communications are in electronic or other forms, for the purposes of developing and improving the services we provide to you, for staff training and quality assurance purposes, for compliance with our policies and procedures and for safety-related purposes. We may also use such monitoring to provide evidence of transactions which we have entered into with you.
SPECIAL NOTE TO CHILDREN UNDER THE AGE OF 13
If you are under the age of 13, please do not send us your personal information, for example your name, address or e-mail address. If you wish to ask us a question or use our website in any way that requires you to send us your personal information, please ask your parent or guardian to do so on your behalf.