- Privacy
Privacy
Policy
Publish the final Brislow Privacy Policy separately at /privacy-policy/. It must reflect the actual information Brislow collects and the systems used on the live site.
Controller: Brislow Ltd, Northdown House, 2 Stanley Road, Carshalton, Surrey, SM5 4LF. General enquiries: e@brislow.co.uk. Complaints: complain@brislow.co.uk. ICO reference: ZC251091.
Last updated: October 2026
Brislow Ltd respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, ask us to review your business utilities, request quotations, use our services or otherwise deal with us.
1. Who we are
Brislow Ltd is a company registered in England and Wales under company number 17462211. Our registered office is Northdown House, 2 Stanley Road, Carshalton, Surrey, SM5 4LF.
For the purposes of UK data protection law, Brislow Ltd is the controller of personal information where we determine how and why that information is processed.
General enquiries: e@brislow.co.uk
Data protection or privacy complaints: complain@brislow.co.uk
ICO registration reference: ZC251091
2. Information we may collect
Contact information, such as your name, job title, business email address, telephone number and correspondence details.
Business information, such as company or trading name, business type, number of sites, premises details and relevant company information.
Utility and contract information, such as current supplier, renewal dates, meter/supply identifiers, consumption, tariffs, contract information and billing information.
Documents you provide, including energy or utility bills and other documents relevant to a quotation, contract review, change of occupancy, new connection or service request.
Enquiry and communication records, including messages, emails, telephone notes and records of the services you ask us to provide.
Quotation and transaction information, including options presented, supplier quotations, contract status and information needed to administer a chosen arrangement.
Technical website information, such as IP address, browser/device information and information generated by cookies or similar technologies where used.
Marketing preferences, objections and suppression records.
Information obtained from suppliers, procurement partners and legitimate business or industry sources where necessary to provide or administer our services.
3. How we obtain information
We obtain information directly from you when you complete a website form, upload a bill, email or call us, sign a Letter of Authority, request a quotation or use our services. We may also receive relevant information from energy or utility suppliers, procurement/aggregator partners, industry databases and publicly available business sources where lawful and necessary for the service requested.
4. How and why we use personal information
| Purpose | Typical information | Typical lawful basis |
|---|---|---|
| Responding to enquiries and requested business reviews | Contact, business and utility information | Legitimate interests and/or steps requested before entering a contract |
| Reviewing existing utility arrangements and obtaining quotations | Bills, contract, meter/supply and consumption information | Legitimate interests and/or performance of a contract |
| Arranging and administering supplier contracts or related services | Contact, business, contract and transaction information | Performance of a contract and legitimate interests |
| Communicating with suppliers and procurement partners | Information reasonably required to obtain or administer the requested service | Performance of a contract and legitimate interests |
| Managing customer service, complaints and disputes | Correspondence, contract and service records | Legal obligations and legitimate interests |
| Keeping business and regulatory records | Relevant customer, transaction and communication records | Legal obligations and legitimate interests |
| Preventing fraud and protecting our systems and business | Identity, contact, technical and transaction information | Legitimate interests and legal obligations |
| Relevant B2B marketing where permitted | Business contact details and marketing preferences | Legitimate interests and/or consent where required |
| Operating and improving our website | Technical and usage information | Legitimate interests, consent, or an applicable storage/access exception as appropriate |
Where we rely on legitimate interests, we consider whether the processing is necessary for a legitimate business purpose and balance that purpose against the rights and interests of the individual.
5. Uploaded bills and utility documents
If you upload or send us a bill or other utility document, it may contain names, contact details, supply numbers, account information, usage information and other business data. We use the document only for purposes connected with your enquiry or the services you request, unless we are required by law to retain or use information for another purpose. Please avoid sending information that is not relevant to the enquiry.
6. Who we may share information with
We may share relevant information with:
energy, water or other utility suppliers where needed to obtain a quotation, arrange a contract or administer a service;
procurement, aggregator or TPI partners used by Brislow to access supplier quotations or support the requested service;
metering, data, technical or other service providers where relevant to the service requested;
IT, website, hosting, communications, CRM, document storage and professional service providers acting for Brislow;
regulators, ombudsman/ADR bodies, law enforcement, courts or public authorities where disclosure is required or appropriate by law;
professional advisers, insurers, auditors or prospective purchasers/investors where appropriate and subject to suitable confidentiality safeguards.
Brislow does not sell personal information. A supplier contract arranged through Brislow is normally entered into directly between the customer and the relevant supplier, and that supplier will process information under its own privacy arrangements.
7. Credit and verification checks
A supplier or procurement partner may carry out business credit, identity, fraud-prevention or eligibility checks before accepting a contract. Where Brislow itself carries out or initiates a check, we will do so only where appropriate for the requested service and in accordance with applicable law. The supplier’s own privacy information may also apply to checks it performs.
8. Direct marketing
Brislow is a B2B business. We may contact business customers and business contacts about relevant services where the law permits us to do so. The rules can differ depending on the communication method and whether the recipient is a corporate subscriber, sole trader or certain type of partnership. Where consent is required, we will seek it. Every recipient can object to direct marketing at any time. We maintain suppression records so that an opt-out can be respected.
To opt out, use the unsubscribe method in the communication or contact e@brislow.co.uk.
9. Cookies and similar technologies
Our website may use cookies and other storage or access technologies. Some may be necessary for the website to operate; others may be used for statistics, preferences, security or other purposes. Where consent is required, we will ask for it before using the relevant technology. More information is available in our Cookie Policy and through the website’s cookie preference controls.
10. International transfers
Some service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we will use an appropriate lawful transfer mechanism and safeguards where required by UK data protection law.
11. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing services, managing the customer relationship, handling complaints, meeting legal/accounting requirements and establishing or defending legal claims. Different records may therefore have different retention periods.
Unsuccessful or preliminary enquiries will generally be retained for a shorter period than records connected with a completed contract or ongoing customer relationship. Brislow will maintain an internal retention schedule and periodically review information that is no longer required.
12. Security
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to people and service providers who need the information for legitimate business purposes.
13. Your data protection rights
Depending on the circumstances, you may have rights to request access to personal information, correction, erasure, restriction, objection to processing, data portability and withdrawal of consent where processing is based on consent. You also have an absolute right to object to processing of your personal information for direct marketing.
To exercise a right, contact e@brislow.co.uk. We may need to verify your identity before acting on a request.
14. Data protection complaints
If you believe Brislow has not handled your personal information properly, please contact complain@brislow.co.uk or write to Brislow Ltd at the registered office above. We will provide a clear route for data protection complaints, acknowledge a complaint within the period required by law, investigate it appropriately and communicate the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concern first, but this does not affect your right to contact the ICO.
15. Other websites
Our website may link to third-party websites. Brislow is not responsible for the privacy practices of those websites. Please read the relevant third party’s privacy information when leaving our website.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in law, our services, suppliers or technology. The current version will be published on this page with the date of the latest update.