Privacy Policy -

Privacy Policy of Payee Solutions

We are Energy Solutions (ES) Limited. Payee Solutions is a trading name of Energy Solutions (ES) Limited.

Our registered office address is Unit 20 Neptune Court, Vanguard Way, Cardiff, Wales, CF24 5PJ and our company number is 10312336.

We are authorised and regulated by the Financial Conduct Authority (Registration Number) for the issuing of electronic money and provision of payment services.

We are registered with the Information Commissioner’s Office (ICO), the data protection regulator in the UK, to use personal data and our registration number is ZA883777.

We are committed to protecting and respecting your privacy.

It is important that you read this Privacy Policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using it.

When you visit our website, or use any of our applications; or provide information to us via our website, or any of our applications, you are accepting and consenting to our processing of your information in accordance with this Privacy Policy, our Cookie Policy, our Website Terms and Conditions and any other contract we may have with you including, without limitation, our Terms and Conditions.

Getting in touch with us

The personal data we hold about you needs to be accurate and current. Please keep us informed if this information changes during your relationship with us. You can get in touch with us at info@energysolutions.co.uk or by phone on 0330 135 8266.

If you have any questions about this Privacy Policy or how we handle privacy, please contact us at info@energysolutions.co.uk or by phone on 0330 135 8266.

You have the right to make a complaint to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance at info@energysolutions.co.uk or by phone on 0330 135 8266.

Information we hold about you

Under data protection laws, we are known as the data controller of your personal data and this Privacy Policy relates only to our activities as a data controller. We are a data controller whenever we decide how, why, and by what means personal data is to be processed.

Changes to Our Privacy Notice : We keep our privacy notice under regular review to ensure that it properly reflects our use of your personal data. We may make periodic changes to our privacy notice in the future, please check this page for any updates on your next visit to our website.

This privacy notice was last reviewed and updated on 1 May 2026.

It is important that the personal information we hold about you is accurate and current. Please let us know if any personal information which we hold about you needs to be corrected or updated at any time.

Personal Data: Principles relating to processing of personal data. Personal data shall be:

a) Lawful, fair, and transparent: Process data only with a valid legal basis (e.g. consent, contract, legal obligation) and inform individuals how their data is used.
b) Purpose-limited: Collect data only for specified, explicit, and legitimate purposes.
c) Data minimisation: Collect only what is necessary for the intended purpose.
d) Accuracy: Keep data up-to-date and correct inaccuracies promptly.
e) Storage limitation: Keep data only as long as necessary for the purpose.
f) Integrity and confidentiality: Protect data with appropriate technical and organisational measures (encryption, access controls, etc.).
g) Accountability: Be able to demonstrate compliance with these principles (records, audits, policies).

Lawful Bases for Processing: The lawful bases for processing your (client/audience) personal data are as follows:

a) Consent (freely given, specific, informed, unambiguous)
b) Contractual necessity
c) Legal obligation
d) Vital interests
e) Public task
f) Legitimate interests

How We Collect Personal Data: Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We use different methods to collect personal data about you, and there are different ways that we might do so. This privacy notice tells you what to expect when we collect personal data about individuals in the following ways:

visitors to our website;
anyone who interacts with us or contacts us through social media;
anyone who contacts us;
anyone who uses our services;
you when you are transferred by one of our third party partners to our website, or one of our third party partners provides us with your personal data;
from third party marketing partners; and
from other energy brokers, where we have taken over the management and renewal of your energy contract

This privacy notice also explains the types of personal information we collect from you, and the lawful basis we rely on under data protection legislation to use your personal data. Under data protection legislation, we are only permitted to use your personal data if we have a lawful basis for doing so as set out in the data protection legislation. Where we rely on our legitimate interests (or those of a third party) as the lawful basis for processing, we have done so on the basis of balancing test which means that our legitimate interests (or those of a third party) do not override your interests and fundamental rights.

5.1 Visitors to our website

We develop our websites here in-house, at Energy Solutions (ES) Ltd, so all personal data collected about your visit to our website is handled internally by our employees. You can rest assured that all our employees receive training on data security and that we take the protection of your personal data seriously.

We also partner with other utility companies from time to time to provide you with price comparison services. In this case, we operate the website and this privacy notice applies to any personal data we collect about you when providing this service.

End-User Analytics and Cookies: We will collect details of your visits to our websites, including traffic data, location data, weblogs and other communication data and the resources you access on our website. We also collect information about your device and your visits to and use of our site, including, where available, your device’s IP address, geographical location, operating system, referral source, browser type, length of visit and number of page views. We will collect this information for the purposes of system administration, optimising the use of our site and reporting aggregate information to third party suppliers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.

In particular, we use an analytics service provider for website traffic analysis and reporting and to track information such as which browser, screen resolution and IP address you are using to access our website, in addition to tracking your movements around our website. Please see section 3.4 for more details on how we use this information.

Please note that we do use cookies on our website. More information on how we use cookies can be found in our Cookies Policy.

5.2 Third parties : Our site contains links to and from the websites of our third party partner networks, suppliers and affiliates. If you follow a link to any of these websites, please note that these websites collect personal data for their own purposes and have their own privacy notices. We do not accept any responsibility or liability for these third parties or their data activities on such websites. Please check their privacy notices before you submit any personal data to these websites.

5.3 Contacting us: Our website provides you with different ways to contact us. You may choose to call us, or submit a query to us or request a call-back from us. All communications are handled, reviewed and responded to internally by us, unless we tell you otherwise.

As part of communicating with us, you will submit personal data about yourself which includes your name, email address, telephone number and any other additional information you choose to provide to us. We will use your personal data for our legitimate interests (or those of a third party) where it is necessary for any of the following:

to contact you when you submit a query or complaint to our website or request us to call you back;
to administer caller information (so we know if you have called us before);
to investigate and follow up with you in regard to any query or complaint you make to us (as applicable); and
to deal with your query.

We will retain records of our correspondence with you, for a period of 5 years from the date of last correspondence.

Please note that we record all telephone calls from our call centre, either when we contact you or you contact us. We use a third party service provider to provide call recording and other telecommunication services on our behalf. It is in our legitimate interests to record these calls to:

ensure we are providing you with excellent customer service;
use for training purposes for our call centre staff; and
assist us in the future, if we ever receive a complaint from you and to enable us to investigate your complaint.

We will retain copies of call recordings for a period of 5 years from the date of your call.

5.4 Using our services: Our website provides price comparison services for merchant service. We will collect personal data from you when you complete a form on our website in order to access our price comparison services or when you contact us by post, telephone or email.

We also have partnerships with other companies, and therefore we (or they) are able to provide you quote for water, telecoms, insurance, waste and other services. We explain below what personal data and the circumstances where we will share your personal data with these companies.

The points below set out the categories of personal data we collect from you, the purposes for which we use your personal data and the lawful basis we rely upon for processing your personal data:

5.4.1 Providing Price Comparison Services (Merchant Service)

5.4.1.1 Personal Data includes title, name, email, phone numbers, address, business address and any other personal data you provide

5.4.1.2 Purpose of the data is to provide price comparison and merchnat services; to send your details to a partner

5.4.1.3 Lawful basis of the data are legitimate interests (to deliver services and show realistic pricing) and contractual necessity

5.4.2 Service Renewals

5.4.2.1 Personal Data includes same as 5.4.1.1

5.4.2.2 Purpose of the data is to contact you about contract renewals

5.4.2.3 Legitimate interests is the legal basis of having, using the data & consent of the individual

5.4.3 Contractual Obligations

5.4.3.1 Personal Data: Same as 5.4.5.1 and bank accounts details

5.4.3.2 Purpose of the data is to fulfill obligations under any contracts with you

5.4.3.3 Legal basis will be contractual necessity and the Letter of Authority (Consent)

5.4.4 Service Notifications

5.4.4.1 Personal Data: Same as 5.4.5.1

5.4.4.2 Purpose: To notify you about additional services and any service changes

5.4.4.3 Lawful Basis is contractual necessity and Letter of Authority (Consent)

5.4.5 Website Content Presentation

5.4.5.1 Personal Data means the information relating to title, name, contact info, address, IP address, other data

5.4.5.2 Purpose of the information is to tailor website content for your device

5.4.5.3 Legal authority is the legitimate interests (user experience and business growth)

5.4.6 Website Development and Support

5.4.6.1 Personal Data: Same as 5.4.10.1

5.4.6.2 Purpose of the data is to improve the website and verify contact details

5.4.6.3 Legal authority is the legitimate interests

5.4.7 Interactive Website Features

5.4.7.1 Personal Data: Same as 5.4.10.1

5.4.7.2 The purpose of the data is to enable participation in interactive services

5.4.7.3 Lawful Basis: Consent (with right to withdraw)

5.4.8 Customer Services and Complaints

5.4.8.1 Personal Data icludes title, name, contact info, address

5.4.8.2 Purpose of the data is to handle enquiries and complaints

5.4.8.3 Legal basis of the data is legitimate interests

5.4.9 Feedback Surveys

5.4.9.1 Personal Data: Same as 5.4.10.1

5.4.9.2 Purpose of the feedback survey is to improve services via feedback

5.4.9.3 Lawful Basis of the data is legitimate interests

We may also use your personal data for analytical purposes. Where this takes place, your personal data will be anonymised as far as we are able to do so for this purpose, and we rely on our legitimate interests to tailor our service, grow our business and to inform our marketing strategy.

In the course of using our services, whether you choose to switch utility suppliers or not, we will retain your personal data for a period of five years from the date you provide us with your personal data and/or express an interest in our services, subscribe to our services, or re-subscribe to our services (whichever is the later).

5.5 Our third party partners: We work with a number of third party partners to provide you with price comparison services. When you access our services through our third party partners, we will collect personal data about you in the following circumstances:

When you are transferred to our website from one of our third party partner websites; and

Where third parties provide us with your personal data. We rely on our third parties to notify you that they will be sharing your personal data with us or it is mentioned in their data policy.

Please note that we will be the controller of your personal data from the stage we are provided with your personal data (either directly from you or one of our third party partners, whichever is the earlier). You should refer to this privacy notice for details on how we will use and treat your personal data. Please refer to sections 3.1, 3.3 and 3.4 for further information on how we will use your personal data when we are providing you with our services.

5.6 Our third party marketing partners: From time to time, we will obtain personal data from our third party marketing partners. This includes your name, email address, telephone number, home and business address, business name, etc. In these circumstances, we will take reasonable steps to ensure that such third party has collected your personal data fairly and lawfully and, if applicable, has obtained all appropriate consents required from you to allow us to market to you. We ensure that we use experienced business database providers and we take reasonable steps to ensure they take the protection of your personal data and compliance with data protection legislation seriously.

If we have obtained your personal data from a third party source, we will inform you of where we collected your personal data within a reasonable period of time of having obtained your personal data and provide you with a copy of this privacy notice.

We rely on our legitimate interests as a lawful basis for processing your personal data, to offer and promote our products and services to you.

5.7 Subscribing to our marketing

If you are a customer, or have made an enquiry relating to our price comparison services (or services offered by one of our other trading names), you have an opportunity in our Privacy Notice to object or opt-out of receiving marketing communications at the time of collecting your personal data. If you have not opted out of receiving the marketing communication, we will contact you by email, SMS, telephone or via targeted social media adverts in our legitimate interests to promote our products and services that are relevant to your purchase or enquiry. We will also provide you with the option to unsubscribe or object to continuing receiving marketing with each communication. You have the right to object to receiving these communications at any time by contacting us on the details above.

If you are not a customer but are interested in our products and services or you are an existing customer but interested in other products and services we offer excluding our energy products and services you have an opportunity in our Privacy Notice to object or opt-out of receiving marketing promotional material, updates, reminders and communications. If you have not opted out, we will collect your contact details (name, postal address and email address) to provide you with such communications.

You have the right to opt out at any time. For full details on how to opt out please see above.

We use a third party email and SMS marketing platform service provider, to manage our SMS and newsletter subscriptions. They will not use your personal data for any other purpose other than as we instruct them to.

If you ever decide you no longer wish to receive our marketing communications, you can opt out at any time by unsubscribing from the mailing list, using the link provided in the marketing communications email, or by using the contact details above. If you do unsubscribe, please note that we will still keep your email in a separate secure list so that we can make sure that you do not receive our marketing communications again in the future.

5.8 Third party brokers: If we take over the management of your merchant contract from your existing broker, your broker will provide us with certain information about you. This will include your name, email address, contact number and meter number, which we will use for the purposes set out in section 3.4 above (including contacting you in relation to renewals).

Where we have received your personal data in these circumstances, we will provide you with a copy of this privacy notice either at the time of first communicating with you or at the latest, within one month of having received your personal data, and we will also inform you of who provided us with your personal data.

What happens if you do not provide the personal data that we request?

We will need some of your personal data as a contractual necessity in order to provide you with our services or contact you and follow up with you in respect of any query or complaint you have submitted on our website. For example, we need to know your personal contact details in order to identify you and contact you.

Where information is needed for these purposes, if you do not provide it we will not be able to provide you with our services, or contact you and follow up with you in respect of the query or complaint you have submitted on our website. We explain this is the case at the point where we collect this information from you.

Checking your identity: If you are a merchant or a corporate, we will need to confirm your identity as part of our KYB/KYC process. We will ask you to provide documents, and will also collect information from third-parties, such as commercial registers, for this purpose.

How do we use your information?We use this information to:

to provide our services to you;
to help us develop new and improved products and services to meet our customers’ needs;
to carry out checks for security purposes, to prevent fraud and money laundering, and to confirm your identity before we provide services to you;
for training;
to communicate with you;
to meet the obligations we have by law and under any regulations that apply;
where we have a legitimate interest in using your information, for example to protect our commercial interests or to prevent fraud; and
to keep you informed about products and services you hold with us and to send you information about products or services (including those of other companies where you have consented for us to do so) which may be of interest to you.

An example of how we use your information to provide our services:

If any changes we make to our services affect you, we’ll normally contact you using the email address you gave us when you signed up, or through our customer portal, to tell you about the changes.

Under data protection laws, whenever we process your personal data, we must meet at least one set condition for processing. These conditions are set out in data protection laws and we rely on a number of different conditions for the activities we carry out.

We may use your information for the following purposes and under the following legal bases which are described below.

Information we collect from you and the legal bases for doing so

Merchants

For the purposes of data protection we consider a physical person (as opposed to a company) that is a sole trader or individual and who registers for/uses our services or buys products from us (such as a card reader) to be a merchant. The personal data we collect from merchants includes:

Category of personal data	Non-exhaustive examples of personal data from each category
Account identification information	Merchant ID number, passwords and equivalent account security information
Contact details	Name, address, phone numbers, email
Financial information	Bank details, transaction history, credit history and credit score, information relevant to invoices issued by us to a merchant
Information required to be obtained and kept by law	Information required for customer identification and verification (e.g. government issued IDs)
Technical and behavioural tracking data	IP address, location data, pages viewed on our website or applications, whether email communications (including embedded links within them) are opened, cookie identifiers, the types of devices you are using to access or connect to our applications, unique device IDs, device attributes, network connection type and provider, network and device performance, browser type, operating system, and application version

The purpose and legal basis for processing the personal data outlined above will be:

Purpose of processing the personal data	Legal basis for processing the personal data
To administer any account or registration you may have with us	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To carry out our obligations arising from any contracts entered into between you and us	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To provide you with the products and services that you request from us	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To administer your participation in any competitions or prize draws we may run from time to time	· To pursue our legitimate interests
To provide you with our newsletter, if you have subscribed to receive it, and any other information that you request from us from time to time	· To pursue our legitimate interest
To communicate with you (via the use of surveys or by other means) about any comments, queries or feedback you might have about us, our website or our applications	· To fulfil our contractual agreement with you · To pursue our legitimate interests
For publication on our website (for example, in connection with your listing or advertisement or for review or testimonial purposes), but only if you have either provided it to us for that purpose or if you have consented to this	· To pursue our legitimate interests · When you have provided consent
To enable you to participate in interactive features of our website or our applications, when you choose to do so	· To fulfil our contractual agreement with you · To pursue our legitimate interests
To ensure that content on our website or in our applications is presented in the most effective manner for you and for your computer	· To fulfil our contractual agreement with you · To pursue our legitimate interests
To provide you with information about products and services we offer that we feel may interest you by post, telephone, SMS, email or via in-application notifications	· To pursue our legitimate interests · Where we are required by law to obtain your consent to provide this information, we will obtain your consent. If consent is not required we will provide you an option to opt-out of receiving this information each time that we send information to you
To administer our site and applications and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes	· To pursue our legitimate interests
To keep our website or our applications safe and secure	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you	· To pursue our legitimate interests
To make suggestions and recommendations to you and other users of our website and our applications about goods or services that may interest you or them	· To pursue our legitimate interests
To verify your identity as well as your personal and contact information	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To record and prove that transactions have been executed	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To initiate, exercise and defend any legal claim or collection procedure	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To comply with internal compliance procedures	· To comply with applicable law · To pursue our legitimate interests
To prevent misuse of our services	· To comply with applicable law · To pursue our legitimate interests
To carry out risk management and fraud prevention processes	· To fulfil our contractual agreement with you · To comply with applicable law · To pursue our legitimate interests
To comply with applicable KYB/KYC and AML, book-keeping and capital adequacy laws and to report to tax authorities and other relevant law enforcement agencies	· To comply with applicable law · To pursue our legitimate interests
To communicate with you in relation to our services	· To fulfil our contractual agreement with you · To pursue our legitimate interests

End-customers

For end-customers who use services provided by our merchants, we will collect and process the following information:

Category of personal data	Non-exhaustive examples of personal data from each category
Contact details	Name, address, phone numbers, email
Financial information	Card details, Transaction history
Information required to be obtained and kept by law	Book-keeping relevant information
Technical and behavioural tracking data	IP address, location data, pages viewed on our website or applications, whether email communications (including embedded links within them) are opened, cookie identifiers, the types of devices you are using to access or connect to our applications, unique device IDs, device attributes, network connection type and provider, network and device performance, browser type, operating system, and application version

The purpose and legal basis for processing the personal data outlined above will be:

Purpose of processing the personal data	Legal basis for processing the personal data
To process a payment made by the end-customer via a card or through the use of any method that we offer from time to time	· To comply with applicable law · To pursue our legitimate interests
To ensure that the payment transaction is carried out in a secure manner, mitigating the risk of fraud and other criminal activities	· To comply with applicable law · To pursue our legitimate interests
To enable the merchant to fulfil the end-customer’s order and mitigate the risk of fraud and other criminal activities. The personal data will also be processed when handling potential complaints and disputes	· To comply with applicable law · To pursue our legitimate interests
To provide a receipt to an end-customer. We will only use the end-customer’s email address or mobile number to send receipts and will not use or share the contact details for any other purpose unless we obtain the end-customer’s consent in writing, or inform the end-customer prior to processing for a new purpose or for a purpose that is compatible with the purpose for which initially we collected the personal data	· To comply with applicable law · To pursue our legitimate interests

Individuals and customer representatives

For individuals and customer representatives contacting our customer support team or us generally, via email, telephone, online chat, SMS or any other communication channel, we will collect and process the following information:

Category of personal data	Non-exhaustive examples of personal data from each category
Contact details	Name, address, phone numbers, email
Technical and behavioural tracking data	IP address, location data, pages viewed on our website, whether email communications (including embedded links within them) are opened, cookie identifiers, the types of devices you are using to access or connect to our applications, unique device IDs, device attributes, network connection type and provider, network and device performance, browser type, operating system, and application version

The purpose and legal basis for processing the personal data outlined above will be:

Purpose of processing the personal data	Legal basis for processing the personal data
To administer our site and applications and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes	· To pursue our legitimate interests
To verify your identity as well as your personal and contact information	· To comply with applicable law · To pursue our legitimate interests
To provide and market services and products to the individual	· To pursue our legitimate interests · When you have provided consent
To respond to the individual and provide any support that is required	· To pursue our legitimate interests
To communicate with you in relation to our services	· To pursue our legitimate interests · When you have provided consent

Individuals within corporates

In the case of an executive, director, beneficial owner or authorised signatory of a corporate customer that communicates with us we will collect and process the following information:

Category of personal data	Non-exhaustive examples of personal data from each category
Account identification information	Merchant ID number, passwords and equivalent account security information
Contact details	Name, address, phone numbers, email
Information required to be obtained and kept by law	Information required for customer identification and verification (e.g. government issued IDs)
Technical and behavioural tracking data	IP address, location data, pages viewed on our website, whether email communications (including embedded links within them) are opened, cookie identifiers, the types of devices you are using to access or connect to our applications, unique device IDs, device attributes, network connection type and provider, network and device performance, browser type, operating system, and application version

The purpose and legal basis for processing the personal data outlined above will be:

Purpose of processing the personal data	Legal basis for processing the personal data
To administer our site and applications and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes	· To pursue our legitimate interests
To provide you with our newsletter, if you have subscribed to receive it, and any other information that you request from us from time to time	· To pursue our legitimate interests
To communicate with you (via the use of surveys or by other means) about any comments, queries or feedback you might have about us, our website or our applications	· To pursue our legitimate interests
To keep our website and our applications safe and secure	· To comply with applicable law · To pursue our legitimate interests
To verify your identity as well as your personal and contact information	· To comply with applicable law · To pursue our legitimate interests
To initiate, exercise and defend any legal claim or collection procedure	· To comply with applicable law · To pursue our legitimate interests
To provide you with information about products and services we offer that we feel may interest you by post, telephone, SMS, email or via in-application notifications	· To pursue our legitimate interests · Where we are required by law to obtain your consent to provide this information, we will obtain your consent. If consent is not required we will provide you an option to opt-out of receiving this information each time that we send information to you.
To make suggestions and recommendations to you and other users of our website and our applications about goods or services that may interest you or them	· To pursue our legitimate interests
To comply with internal compliance procedures	· To comply with applicable law · To pursue our legitimate interests
To prevent misuse of our services	· To comply with applicable law · To pursue our legitimate interests
To carry out risk management and fraud prevention processes	· To comply with applicable law · To pursue our legitimate interests
To comply with applicable KYB/KYC, AML, book-keeping and capital adequacy laws and to report to tax authorities and other relevant law enforcement agencies	· To comply with applicable law · To pursue our legitimate interests
To communicate with you in relation to our services	· To comply with applicable law · To pursue our legitimate interests

Collecting information from third-parties

To ensure that the services we provide are secure and efficient we process personal data from selected third-parties. These third-party sources (and the categories of information) include:

Category of third-party	Category of personal data
Credit rating agencies	· Financial information · Information required to be obtained and kept by law
Fraud detection agencies	· Information required to be obtained and kept by law
Financial institutions such as banks and card networks	· Financial information · Information required to be obtained and kept by law
Tax authorities	· Information required to be obtained and kept by law
Publicly available registries maintained by or on behalf of national authorities	· Contact details · Information required to be obtained and kept by law
Companies in the same corporate group as us	· Contact details

Sharing your information with others

Sharing your information with credit reference and fraud prevention agencies

When processing your application, we will carry out credit and identity checks on you with one or more credit reference agencies. To do this, we will give the credit reference agencies your personal data and they will give us information about you.

This may make it difficult for you to get credit in the future. We will also continue to exchange information about you with credit reference agencies while you have a relationship with us, for example, if we have asked you to pay an amount you owe us and we do not receive a satisfactory reply from you within our stated time limit, or if you give us false or inaccurate information. The credit reference agencies may share your personal data with other organisations.

Records we share with credit reference agencies will stay on your file for six years after your file is closed, whether you’ve settled the debt or failed to pay it off.

If you’d like to know about the information credit reference agencies hold about you, you should contact them directly (please note, they will charge you a fee for this service). Not every agency will hold the same information, so you should consider contacting them all.

We will share your information with fraud prevention agencies who will use it to prevent fraud and money laundering, and to confirm your identity. We and fraud prevention agencies may also allow law enforcement agencies to access and use your personal data to detect, investigate and prevent crime. If fraud is detected, you could be refused certain services or finance.

Fraud prevention agencies can hold your personal data for different periods of time, and if you are considered to present a fraud or money-laundering risk, they can hold your information for up to six years.

Sharing your information with third-parties

We may also share your information with the following third-parties:

companies that are in the same corporate group as us;
suppliers and subcontractors who provide, for example, IT support, logistics, communication, customer support, marketing, acquiring and PCI compliance services and our business partners who we may share personal data with in order for them to provide you with information about similar goods and services (with your consent);
advertisers and advertising networks that require anonymised data to select and serve relevant adverts to you and others. We shall provide them with aggregate information about our users (for example, we may inform them that 150 men aged 35-45 have clicked on their advertisement on any given day). We shall also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, men in a particular location). We shall make use of the information we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience;
user experience, service design and market research agencies that assist us in the improvement and optimisation of the products and services that we offer to customers as well as with other market research projects;
analytics and search engine providers that assist us in the improvement and optimisation of our website and our applications;
credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you (please see earlier in this Privacy Policy for detail on this);
sharing your information with a party we assign our rights to, under applicable contractual arrangements; and
sharing information with our funding partners in circumstances concerning our financial affairs.

An example of when we may share your personal data with our partners:

If you apply for a merchant instant settlement product, we or our lending partner (the provider of this product) will carry out a credit check to better understand your financial circumstances and repayment history.

An example of how we use your personal data for marketing:

If you are a Payee Solutions’ customer, we may contact you about optional extras, loyalty bonuses or promotional offers where you have consented to this. We may use information we gather about you through your use of our services to tailor these offers to you.

We may also disclose your personal data to third-parties:

in the event that we sell or buy any business or assets, to the prospective seller or buyer of such business or assets and their advisors;
if we or substantially all of the company’s assets are acquired by a third-party, in which case personal data held by the company about our customers will be one of the transferred assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our various terms, policies and other agreements; or to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for AML and fraud prevention, and credit risk purposes

We shall share an end-customer’s personal data with a merchant when it is to enable the merchant to fulfil the end-customer’s order and mitigate the risk of fraud and other criminal activities. The personal data will also be processed when handling potential complaints and disputes. Personal data shared with a merchant will be subject to the merchant’s data protection policy and not this Privacy Policy.

Where merchants process card transaction data and cardholder data, they must process this in line with our Terms and Conditions. Please refer to these Terms and Conditions for further information.

If a third-party processes personal data on our instruction they are likely to be a data processor. An example of this will be in relation to our suppliers of IT and marketing services. In such cases, we only share personal data for purposes that are compatible with the reasons contained in this Privacy Policy. All data processors are subject to written agreements that ensure the security of personal data and limit the transfer of personal data to third countries.

If a third-party is considered to be a data controller, we are not able to dictate how that third-party will process the data that has been provided. Examples of common third-party data controllers would be credit rating agencies or financial institutions. In such cases, the data protection policies of the third-party data controller will apply.

Links to third-party websites

Our website features third-party advertising which provides links to and from third-party websites. If you follow a link to any of these third-party websites, you should be aware that these websites have their own privacy policies and the operators of those websites will handle your information in accordance with such policies and not with this Privacy Policy. We have no control over such third-parties or their websites or privacy policies. These third-parties may contact you or permit third-parties to contact you for marketing purposes in accordance with their own privacy policies, unless you opt out of such communications.

We do not accept any responsibility or liability for third-party websites or their privacy policies. We strongly advise you to check such policies and the reputation of the website before you submit your information to, or carry out any transaction on, any third-party website.

We welcome any feedback you may have about third-party websites linked to from our website. Please email us at info@energysolutions.co.uk or by phone on 0330 135 8266.

Our relationship with Apple and Google Play

We acknowledge that when you use our application, as provided on Apple’s App Store and Google’s Play Store, any end-user licence agreement is concluded between us and you – and not with either Apple or Google. You further agree to observe the App Store Terms of Service and the Google Play Terms of Service.

How we secure your information

We have in place a level of security appropriate to the nature of the information stored and the harm that might result from a breach of security. Your information is stored on our secure servers. The transmission of any payment transactions will be encrypted using TLS technology.

All environments that are used in the transmission of payment transactions are hosted in an environment that has passed PCI DSS Level 1 service provider accreditation, and are therefore required to adhere to all the requirements stated by the PCI Security Standards Council.

To get more information about the different requirements of the PCI Security Standards Council please read more here.

Please note that the transmission of information via the internet is not completely secure and, although we will do our best to protect your information, we cannot guarantee the security of any of your information transmitted via our website or our applications. Any transmission is at your own risk. If we become aware that the security of your information has been compromised, we will notify you by email or as otherwise required by law.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website or our applications, you are responsible for keeping this password confidential and you must not share it with anyone.

If you think your password or any other aspect of your account has become compromised, you must inform us immediately at info@energysolutions.co.uk or by phone on 0330 135 8266.

How long will we will keep your information

We will keep your information for as long as is needed for the purposes set out above or as required by any laws that apply.

If you close your account, if we refuse your application for an account or product, or you decide not to go ahead with your application for an account or product, we’ll still keep your information. We may also continue to collect information from credit reference agencies to use after your account is closed. We’ll do this for as long as we’re allowed to for legitimate business purposes, to help prevent fraud and other financial crime, and for other legal and regulatory reasons.

Sharing your information outside the European Economic Area (EEA)

When we or fraud prevention agencies transfer your information outside the EEA, we or the fraud prevention agencies will:

make sure that the organisations we transfer your information to apply an equivalent level of protection;
include conditions in the contract with the organisations receiving your personal data to protect it to the standard required in the EEA; and
possibly ask the organisations receiving your information to subscribe to international frameworks intended to allow information to be shared securely.

If we are transferring your information, we may also transfer it to either a country considered by the European Commission to provide adequate protection of your information, or to a different country if you agree to this. If we transfer your information outside the EEA in other circumstances (for example, because we have to reveal the information to help prevent or detect a crime), we’ll make sure we share that information lawfully.

What are my rights?

Your right to:	What this means
ask us to send you (or someone you nominate) a copy of the information we hold about you	We provide this privacy notice to explain how we use your personal data
access your personal data with us	If you make a ‘data subject access request’ to us, we will provide a copy of the personal data we hold about you. We can’t give you any information about other people, information which is linked to an ongoing criminal or fraud investigation, or information which is linked to settlement negotiations with you. We also won’t provide you with any communication we’ve had with our legal advisers
ask us to correct or delete any incorrect or incomplete information we hold about you (we will correct any information we believe is incorrect or incomplete)	You can have incomplete or inaccurate information corrected. Before we update your records with us, we may need to check the accuracy of the new information you have provided
ask us to stop using your information	We will stop using your information if there is no legal reason for us to continue to hold or use it
object to any automated decision-making	In the event that you request the deletion of personal data or for the use of personal data to be restricted, we reserve the right to no longer provide services and products to you under any applicable contract
ask us to transfer certain personal data to you or to another organisation, including service providers, in a format they can use where this is technically possible (known as the ‘right to data portability’)	We will transmit personal data in structured, commonly used and machine readable formats
ask us to transfer a copy of some of your information to you or to another organisation, including service providers, where this is technically possible	We will transmit personal data in structured, commonly used and machine readable formats
withdraw any permission you have previously given to allow us to use your information	If you have given us any consent we need to use your personal data, you can withdraw your consent at any time by contacting us at: info@energysolutions.co.uk or by phone on 0330 135 8266
ask us to stop or start sending you marketing messages at any time	Please get in touch with us on info@energysolutions.co.uk or by phone on 0330 135 8266 to do this

How we use cookies

Please see at Cookies Policy.

Other legal information

Children

We do not knowingly collect information from individuals who are under the age of 16. If you are under the age of 16, please do not register an account with our website or provide any information about yourself on our website. If you have already done so, please contact us.

Changes to our Privacy Policy

By submitting your information to us, you consent to the use of the information as set out in this Privacy Policy.

If we change our Privacy Policy, we will post the changes on this page and may place notices elsewhere on our website (such as the home page) for a reasonable period of time.

Your continued use of our website and our services following any changes to this Privacy Policy will mean you accept those changes.

Glossary and interpretation

What words and phrases in bold mean

AML means anti-money laundering.

customer portal means the portal you use to access information regarding your use of the services through the Payee Solutions website and the Payee Solutions app, verofy, if you have installed it.

data controller has the meaning given in the GDPR.

data processor has the meaning given in the GDPR.

data protection laws means the GDPR and other laws or regulations that apply to the processing of personal data.

data subject has the meaning given in the GDPR.

GDPR means the General Data Protection Regulation (EU 2016/679) or substantially equivalent laws enacted later in the UK.

KYB means Know Your Business.

KYC means Know Your Customer.

MOTO means mail order telephone order.

PCI DSS means the Payment Card Industry Data Security Standard.

Privacy Policy of Payee Solutions

Quick links