Privacy Policy

Last Updated: 01/01/2026

GreenRock Energy is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website or our consultancy services.

1. Who We Are

We are an energy consultancy specialising in commercial buildings, offering services including ESOS compliance, energy assessments, carbon reduction strategies, and building optimisation.

Data Controller:
GreenRock Energy
11 Dunkirk Business Park, Southwick, Trowbridge, Wiltshire BA14 9NL
info@greenrockenergy.co.uk
01225 753755


2. Information We Collect

a. Information You Provide Directly

When you contact us, request a quote, or submit forms, we may collect:

  • Name
  • Job title
  • Company name
  • Email address
  • Phone number
  • Building details (e.g. size, type, energy usage)
  • Any additional information you voluntarily provide
b. Information Collected Automatically

Through cookies and analytics tools, we may collect:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • Time spent on the Site
  • Referring URL’s
c. Service Delivery Data

If we work with you, we may also collect:

  • Energy consumption data
  • Building performance data
  • ESOS and compliance documentation
  • Audit reports
  • Procurement, meter, or utility data

3. How We Use Your Information

We use your data to:

  • Provide consultancy services and respond to enquiries
  • Deliver energy assessments and compliance services (e.g., ESOS)
  • Prepare proposals, reports, and optimisation strategies
  • Improve website performance and user experience
  • Send updates, service information, or industry alerts (only with consent)
  • Maintain internal records and client files
  • Comply with legal obligations

We never sell your data.


4. Legal Basis for Processing

We process personal data under the following GDPR legal grounds:

  • Contractual necessity โ€“ to deliver our services
  • Legitimate interests โ€“ e.g., improving services, responding to enquiries
  • Consent โ€“ e.g., marketing communications
  • Legal obligation โ€“ e.g., compliance with ESOS, audit trail requirements

5. Sharing Your Information

We may share information with:

  • Trusted service providers (e.g., data hosting, CRM tools)
  • Regulatory bodies for compliance purposes (if required)
  • Professional advisors (legal, financial, technical)

We do not share data for marketing by third parties.

All third parties are required to comply with GDPR and handle data securely.


6. Data Retention

We retain personal data only as long as necessary for:

  • Providing services
  • Meeting regulatory or audit requirements
  • Maintaining business records

Typically, project-related data is retained for 6โ€“7 years, unless regulations require longer.


7. Your Data Rights

Under GDPR, you have the right to:

  • Access your data
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent (where applicable)

To exercise these rights, contact us at info@greenrockenergy.co.uk.


8. Data Security

We implement appropriate technical and organisational measures, including:

  • Secure servers
  • Encrypted data storage
  • Access controls
  • Staff training
  • Regular reviews of cybersecurity practices

However, internet transmission can never be guaranteed as fully secure.


9. International Transfers

If data is transferred outside the UK/EU, we ensure appropriate safeguards such as:

  • Standard contractual clauses
  • Equivalent data protection standards

10. Updates to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated โ€œLast Updatedโ€ date.


11. Contact Us

For questions or data requests:

  • Email: info@greenrockenergy.co.uk
  • Phone: 01225 753755
  • Address: 11 Dunkirk Business Par, Southwick, Trowbridge, Wiltshire, BA14 9NL