top of page
Image of a row of houses

DESNZ Privacy Notice

Grant Recipient and Delivery Partner Employee Privacy Notice 

WHO WE ARE 

 

The Authority gathers and processes your personal data in accordance with this Privacy Notice and in compliance with relevant data protection law. Please carefully read this Privacy Notice to understand how we collect, process and share your personal data and the measures we take to protect it. 

 

This Privacy Notice sets out how the Authority will use personal data relating to Grant Recipient employees, workers, agents and contractors and employees, agents, workers and contractors of delivery partners, where a delivery partner is procured by the Grant Recipient, where this personal data is provided by the Grant Recipients or delivery partners in connection with their expression of interest under the Warm Homes Local Grant (WH:LG), subsequent implementation of WH;LG, communications and relationship management and sets out your rights.  

 

This Privacy Notice has been prepared in relation to compliance under Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR).  

 

In this notice: 

Grant Recipient means a local authority, Net-Zero Hub, or consortium expressing an interest under WH:LG; 

the Authority means the Department for Energy Security and Net Zero. 

​

HOW AND WHY WE USE YOUR PERSONAL DATA  

 

Data subjects 

The Authority will process personal data relating to a Grant Recipient's employees, workers, agents and contractors and, where a delivery partner is procured by a Grant Recipient, employees, workers, agents and contractors of the delivery partner.  

 

The personal data 

The Authority will process the following personal data:  

  • Names and contact details; 

  • Job role; 

  • Employer; and 

  • Contents of communications (e.g. email) to the extent this contains personal data. 

 

Purpose 

The purpose(s) for which the Authority is processing your personal data: 

  • Relationship management:  utilising our in-house Customer Relationship Management (CRM) system to enable better relationship management; 

  • Expression of interest: in the consideration of the Grant Recipient’s expression of interest; 

  • Implementation under WH:LG: in relation to the subsequent implementation under WH:LG if the expression of interest is successful; and 

  • Communicating with you: to communicate WH:LG updates, training notices, information on future schemes and opportunities and invitations to relevant events. 

 

Legal basis of processing  

The legal basis for processing your personal data is that the processing is necessary for the performance of a task carried out in the public interest. The public task is the performance of functions under s.31 of the Local Government Act 2003, the duty to ensure public money is used responsibly and functions under fuel poverty and climate change legislation. 

 

Recipients 

There are certain circumstances where we will transfer your personal data to third parties. These include: 

  • Authority Delivery Partners and contractors – any contractor or organisation the Authority appoints to act on their behalf in connection with WH:LG including to oversee the management and delivery of WH:LG projects.  A

  • Service providers – Other third parties may process your personal data on our instructions. These include IT suppliers (including website and software providers), email management service providers, cloud hosting providers, database providers and backup and disaster recovery specialists. Our suppliers and service providers will be required to meet appropriate standards on processing information and security when processing your personal data.  The information we provide them, including your personal data, will only be processed in connection with the performance of their function. They will not be permitted to use your information for any purposes other than those outlined in this Privacy Notice. 

  • Professional advisors – we may also appoint third party professional advisors such as legal advisors. These third parties will act as independent controllers and will process your personal data in accordance with their own privacy notice.  
    Your personal data may also be shared by us in certain scenarios such as: 

  • where we are required to do so by law, for example by court order or to prevent fraud or other crime; 

  • if we are exercising our legal rights and / or defending a legal claim your information may be transferred as required in connection with defending such claim or exercising such legal rights; or to protect yours', ours' or others' rights, property, or safety. 

 

Retention

Your personal data will be kept by us for a period of up to 8 years but no longer than needed from the date set for completing the implementation of the Grant Recipient's application under WH:LG or from the last provided update. 

 

INTERNATIONAL TRANSFERS 

As part of our IT infrastructure, your personal data will be stored in the UK on systems provided by our data processors - Microsoft and Amazon Web Services. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting our IT systems 

 

YOUR RIGHTS

You have a number of rights in relation to our handling of your personal data. These rights are not applicable in all circumstances and exemptions may apply. Your rights may include: 

 

  • You have the right to request information about how your personal data are processed, and to request a copy of that personal data.  

  • You have the right to request that any inaccuracies in your personal data are corrected.  

  • You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.  

  • You have the right to request that your personal data are erased in certain circumstances.  

  • You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.   

  • You have the right to object to the processing of your personal data. 

 

To exercise your rights please contact the Data Protection officer using the contact below: 

 

CONTACT DETAILS

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ). You can contact the DESNZ Data Protection Officer at:  

 

DESNZ Data Protection Officer  
Department for Energy Security and Net Zero  
3-8 Whitehall Place 
London 
SW1A 2AW 

Email: dataprotection@energysecurity.gov.uk 

 

COMPLAINTS

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an UK independent regulator.  The Information Commissioner can be contacted at:  

 

Information Commissioner's Office 

Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 

0303 123 1113 

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.  

 

 

UPDATES TO THIS NOTICE

This Privacy Notice may change from time to time.  

If we make changes to this Privacy Notice, the Grant Recipient will provide you with an updated version. 


If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly changes how or why we use your personal data, we will notify you by email or post if we hold your email address or postal address.
 

Last Updated: 27 February 2025  

bottom of page