Privacy Policy
Last updated: 17 June 2026
Aston Energy ("Aston Energy", "we", "us", "our") is a trading name of Radius Services Group Ltd, a company registered in England & Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We are the data controller for the personal data we collect about you. We are registered with the Information Commissioner's Office (ICO) in the UK (reference ZC176588).
This policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and your rights under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. The data we collect
When you request a quote, contact us, or use our website we may collect:
- Identity & contact data: name, job title, company name, email, phone, address.
- Energy data: meter numbers (MPAN/MPRN), current supplier, contract end date, annual consumption (kWh), spend, tariff details, copies of recent bills you send us.
- Communications data: emails, call recordings (where lawfully recorded), webchat messages, notes from conversations.
- Technical data: IP address, browser type, device, operating system, referring URL, pages viewed, timestamps. Collected via cookies and similar technologies — see Section 7.
- Marketing preferences: your opt-ins, opt-outs and consent records.
We do not knowingly collect special category data (e.g. health, ethnicity, biometrics) and we do not process data of children under 18.
2. How we use your data and our lawful basis
| Purpose | UK GDPR lawful basis |
|---|---|
| Respond to your quote request, contact you about the enquiry, prepare and present tariff comparisons. | Article 6(1)(b) — performance of a contract / steps prior to entering a contract at your request. |
| Submit your contract to your chosen supplier and manage the switch. | Article 6(1)(b) — contract. |
| Comply with our legal and regulatory obligations (Ofgem TPI compliance, anti-fraud, accounting, ADR scheme records). | Article 6(1)(c) — legal obligation. |
| Improve our services, train staff, monitor service quality, prevent fraud and secure our systems. | Article 6(1)(f) — legitimate interests (running and protecting our business). |
| Send marketing emails about energy market updates, renewals and related services. | Article 6(1)(a) — your consent (you can withdraw at any time), or 6(1)(f) — soft opt-in for existing business customers, with an easy opt-out on every message. |
| Set non-essential cookies (analytics, marketing). | Article 6(1)(a) — your consent via our cookie banner. |
3. Who we share your data with
We only share your data where necessary, with:
- Energy suppliers you ask us to tender to or contract with (e.g. British Gas, EDF, E.ON Next, ScottishPower, TotalEnergies, SEFE Energy, Drax, Yu Energy, Pozitive, Crown Gas & Power, SmartestEnergy, Shell Energy, Corona Energy and other panel members).
- Industry data providers for meter lookups (e.g. Electralink, Xoserve).
- Service providers who process data on our behalf as processors under written contract: CRM, email, hosting, telephony, analytics, identity / fraud checks, and IT security providers.
- Our group company Radius Services Group Ltd and other entities within the group for internal administration and reporting.
- Regulators, authorities and advisors where we are legally required (Ofgem, the Energy Ombudsman, the ICO, HMRC, our auditors and legal advisors).
We never sell your personal data.
4. International data transfers
We host and process data in the United Kingdom and the European Economic Area where possible. Where a processor is located outside the UK/EEA, we rely on UK adequacy regulations or the ICO's International Data Transfer Agreement (IDTA) / EU Standard Contractual Clauses with the UK Addendum, together with supplementary safeguards as required.
5. How long we keep your data
- Quote enquiries that don't proceed: up to 24 months from last contact, then deleted or anonymised.
- Customer contract records: for the life of the contract and 6 years after expiry to meet HMRC, Ofgem and ADR scheme requirements.
- Call recordings: typically 12 months unless needed for a complaint or dispute.
- Marketing data: until you withdraw consent or we identify you are no longer engaged.
- Cookie data: per the lifetimes shown in our cookie banner and Section 7.
6. Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your data (this policy).
- Access a copy of the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased (the "right to be forgotten"), where applicable.
- Restrict or object to certain processing, including direct marketing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, where we rely on consent.
- Not be subject to a decision based solely on automated processing — we do not carry out solely automated decision-making that produces legal or similarly significant effects.
To exercise any right, email privacy@astonenergy.co.uk or write to Aston Energy, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. We will respond within one calendar month. We may need to verify your identity before fulfilling the request.
You have the right to complain to the Information Commissioner's Office (ICO) — ico.org.uk or 0303 123 1113.
7. Cookies and similar technologies
We use cookies and similar technologies (collectively, "cookies") on our website. They fall into three categories:
- Strictly necessary — required to make the site work (e.g. CSRF tokens, load balancing, your cookie preferences). Always on, no consent required.
- Analytics — help us understand how visitors use the site so we can improve it. Set only with your consent.
- Marketing — used to measure ad campaigns and personalise content. Set only with your consent.
When you first visit the site we show a banner so you can accept all, reject non-essential, or set preferences. You can change your choice at any time by clicking (also linked in the footer).
8. How we protect your data
We use technical and organisational measures including TLS encryption in transit, encrypted backups, role-based access controls, staff training, supplier due diligence and ongoing monitoring. No system is 100% secure — if we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify you directly.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top tells you when. If we make material changes we will draw them to your attention by email or a banner on the site.
10. Contact us
Data protection queries: privacy@astonenergy.co.uk
General contact: hello@astonenergy.co.uk · +44 20 3355 2506
Post: Aston Energy, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.