Privacy notice

1. Who we are and how to contact us about your data

Nova Business Energy Ltd is the data controller for the personal information described in this notice. We are a business energy broker: we find and recommend energy contracts for businesses. We are registered in England and Wales, company number 17469396. Registered office: c/o KDM Accountants Ltd, Northampton Science Park, Kings Park Road, Moulton Park Industrial Estate, Northampton NN3 6LG. We are registered with the Information Commissioner's Office (ICO), registration number ZC267063.

Nova Business Energy Ltd is part of the Ignite Business Group. Our parent company is Ignite Business Group Ltd, company number 17469380. Section 4 explains when we share information within the group.

If you have a question about your personal information, want to exercise any of the rights in section 6, or want us to stop contacting you, use any of these:

• Email: complaints@novabusinessenergy.com
• Phone: 01604 913608, Monday to Friday, 9am to 5.30pm
• Post: Data Protection, Nova Business Energy Ltd, at the registered office above

We do not have a statutory data protection officer. Our Group Operations Director is responsible for data protection and will handle your request.

This notice covers the people we deal with when we work with a business: owners, directors, partners, sole traders and staff who contact us or whom we contact. Where you run your business as a sole trader or partnership, information about the business is often information about you, and this notice applies to it in full.

2. What we collect through the Energy Health Check and why

When you complete the Energy Health Check on our website we collect: your name, your company name, your work email address, your phone number, why you are getting in touch, roughly when your current contract ends, how many sites your business has, and where you heard about us if you tell us.

We use this to contact you about your energy contract, to understand your situation and to prepare a comparison for you. Our lawful basis is that we are taking steps at your request before entering into a contract with you, and our legitimate interest in responding to your enquiry.

If you decide to go ahead with us, we collect what we need to find and arrange a contract: your business address and site addresses, meter numbers (MPAN for electricity, MPRN for gas), your current supplier and contract end date, your consumption, copies of recent bills, your job title and confirmation that you are authorised to act for the business, and your signature on a letter of authority. We use the letter of authority to obtain your contract, pricing and consumption data from your current supplier. Our lawful basis is performance of our contract with you and our legitimate interest in arranging the contract you have asked for.

Calls we record

We record telephone calls with customers and prospective customers for training, quality checking and to keep a record of what was agreed. When you agree a contract with us by phone, the recording is our record of your confirmation and we keep it for the period in section 5.

Credit checks

Energy suppliers normally run a credit check on a business before offering it a contract. For sole traders and partnerships this can include a check on the individuals. The supplier carries out the check as its own data controller under its own privacy notice. We do not run credit checks ourselves.

3. If we called you and you had not contacted us first

Part of our business is contacting businesses that have not asked to hear from us, to tell them what we do and to offer a free comparison. If we have called or emailed you without you contacting us first, this section explains where your details came from and what you can do about it.

Where we got your details

• Licensed business marketing data from a licensed business data provider, which supplies business contact details for marketing use.
• Public sources, such as Companies House, your business website, online directories and professional networking sites.
• Referrals from energy suppliers, business partners or other businesses that thought we could help you.
• Other companies in the Ignite Business Group, such as Ignite Commercial Finance Ltd, where their privacy notice allows them to share your business contact details with us for this purpose.

We will tell you which of these applies to you if you ask.

Our lawful basis

We rely on our legitimate interest in marketing our energy brokerage service to businesses that may benefit from it. We have assessed that interest against your rights and have put limits on how we use your details: we only call during business hours; we say who we are and why we are calling at the start of every call; we screen every number against the Telephone Preference Service (TPS) and the Corporate Telephone Preference Service (CTPS) before we call and do not call numbers registered on either; and we check every number against our own do-not-call list.

If you are a sole trader or partnership, we will only send you marketing by email or text message if you have agreed to receive it. If your business is a limited company or other corporate body, we may email you about our service; you can opt out at any time.

Your right to object

You can object to us using your details for marketing at any time, and we will stop. Tell the person who called you, email complaints@novabusinessenergy.com, or call 01604 913608. We will add your number and email address to our do-not-call list straight away and keep them there only so that we do not contact you again. We will not pass your details to any other company in the Ignite Business Group for marketing once you have objected.

If we have contacted you and you do not go ahead with us, we keep your details for the period in section 5 and then delete them.

4. Where your data goes

We share personal information only where we need to in order to provide our service, run our business or meet a legal obligation. We do not sell personal information.

• Energy suppliers: to obtain quotes for you and, if you go ahead, to set up your contract. Each supplier is its own data controller and has its own privacy notice.
• Your current supplier: to request your contract, pricing and consumption data under your letter of authority.
• Our quoting and pricing platform provider, which processes meter and consumption data to obtain supplier prices on our behalf.
• Our customer relationship management system, HubSpot. Nova has its own HubSpot account, separate from any other group company. HubSpot may process data outside the UK; see international transfers below.
• Microsoft 365, which we use for email, documents and storage, and our telephone system provider, which stores call recordings.
• Anthropic, whose Claude AI tools we use to help draft documents, summarise information and support our systems. Where personal information is processed in this way, Anthropic acts as our processor under contract and does not use it to train its models.
• Other companies in the Ignite Business Group. We may tell Ignite Commercial Finance Ltd about businesses we think could benefit from its business finance service, relying on our legitimate interest in promoting group services. Ignite Commercial Finance will contact you under its own privacy notice, and you can opt out at any time by contacting either company. Group companies also provide us with shared administrative services, such as IT and accounting, under confidentiality arrangements.
• The Energy Ombudsman, if you make a complaint that is referred to it, and Ofgem, the ICO, a court or another authority where the law requires or allows it.
• Our professional advisers, such as accountants, solicitors and insurers, where we need their advice.
• A buyer or prospective buyer of our business, if the business or its assets are sold, under confidentiality.

International transfers

Some of our service providers, including HubSpot and Microsoft, may process personal information outside the UK, including in the United States. Where they do, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, so that your information has protection equivalent to the UK's.

5. How long we keep it

We keep your information only for as long as we need it:

• Customers: 7 years after your energy contract ends or our last dealings with you, whichever is later, so we can deal with commission, tax, complaints and disputes.
• Everyone else: up to 24 months after our last contact with you, unless you ask us to stop sooner.
• Call recordings: kept for the same periods as the records they belong to.
• If you ask us not to contact you, we keep just enough to make sure we do not contact you again.

After that, we delete or anonymise it.

6. Your rights and how to complain to the ICO

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, where there is no good reason for us to keep it;
• ask us to limit how we use your information while a question about it is resolved;
• receive the information you gave us in a usable electronic form, or ask us to send it to another organisation, where we process it by automated means on the basis of contract;
• object to our use of your information where we rely on legitimate interests, and to object to marketing at any time, which we will always honour.

We do not make decisions about you by purely automated means.

To exercise any of these rights, contact us using the details in section 1. There is no charge. We will respond within one month, and may ask you to confirm your identity first. If we cannot do what you ask, we will tell you why.

If you are unhappy with how we have handled your information, please tell us first and give us the chance to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

7. Cookies

Our website uses only cookies that are strictly necessary for it to work and to keep it secure, such as those set by our hosting provider, Cloudflare, to protect against automated abuse. We do not use analytics, advertising or tracking cookies. If that changes, we will update this notice and ask for your consent before setting any cookie that is not strictly necessary.

Changes to this notice

We review this notice at least once a year and whenever our processing changes. This version is dated 12 October 2026. Previous versions are available on request.