Privacy Policy

1. Who We Are

Oakwood Energy Brokerage Limited (“Oakwood Energy”, “we”, “us”, or “our”) is the data controller responsible for your personal data collected through the ExportMyEnergy.com platform (“the Platform”, “our services”). 

2. What this policy covers 

This policy explains how we collect, use, share, and protect your personal data when you use ExportMyEnergy - our platform for managing and optimising the export of energy generated at your property. It applies to: 

• Visitors to our website and landing pages 

• Registered users of the ExportMyEnergy platform 

• Customers who have connected energy meters, inverters, or smart devices to the Platform 

• Anyone who contacts us for support or information 

We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. 

3. Data we collect 

We collect the following categories of personal data: 

4. How and why we use your data 

We process your personal data only where we have a lawful basis to do so under UK GDPR: 

5. Energy and smart meter data 

The ExportMyEnergy platform is specifically designed to access and process half-hourly smart meter and generation data. This data allows us to: 

• Accurately calculate your electricity exports to the grid 

• Provide dashboards and analytics on your generation and consumption 

Access to your smart meter data is obtained through ElectraLink. You will be asked to grant explicit consent for this access during onboarding and registration for the Platform by executing a letter of authority.

Half-hourly energy data can, in aggregate, reveal behavioural patterns within a home. We treat this data with the same level of care as other sensitive personal information and do not sell it to third parties. 

6. Sharing your data 

We do not sell your personal data. We may share it with: 

• Energy industry parties - network operators, grid balancing services and energy suppliers.

• Technology and hosting providers - cloud infrastructure, database, development, analytics, and customer support platforms acting as our data processors under written agreements. 

• Professional advisers - auditors, legal counsel, and insurers who are bound by confidentiality obligations. 

• Regulatory and law enforcement bodies - where we are required to do so by law or court order. 

All third-party processors are contractually required to protect your data and use it only for specified purposes. 

7. Cookies and tracking technologies 

We use cookies and similar technologies on our website and Platform. These include: 

• Strictly necessary cookies — required for login, security, and core Platform functions. 

• Performance cookies — anonymous analytics to help us understand how the Platform is used. 

• Preference cookies — to remember your settings and preferences. 

You can manage your cookie preferences through our cookie banner or your browser settings. Blocking strictly necessary cookies may impair Platform functionality. 

8. International transfers 

We process and store data primarily within the UK and the European Economic Area. If any processing occurs outside these territories, we ensure appropriate safeguards are in place (such as UK adequacy regulations, standard contractual clauses, or equivalent protections) in accordance with UK GDPR.

9. How long we keep your data 

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law: 

• Account and contract data: for the duration of your account plus 6 years (for contractual and legal purposes) 

• Smart meter and energy data —   following account closure 

• Marketing preferences — until you unsubscribe or withdraw consent 

10. Your rights 

Under UK GDPR, you have the following rights in relation to your personal data:

To exercise any of these rights, email us at privacy@oakwoodenergy.co.uk. We will respond within one calendar month. You will not be charged a fee unless your request is manifestly unfounded or excessive. 

11. Security 

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction. These include encrypted data transmission (TLS), access controls, and regular security reviews. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) as required by law. 

12. Changes to this policy 

We may update this policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by email or a prominent notice on the Platform. The “last updated” date at the top of this page will always reflect the most recent revision. Continued use of ExportMyEnergy after changes take effect constitutes acceptance of the updated policy. 

13. How to complain 

If you have concerns about how we handle your data, please contact us first at privacy@oakwoodenergy.co.uk. We will do our best to resolve any issue promptly. 

If you remain dissatisfied, you have the right to lodge a complaint with the ICO, the UK’s supervisory data authority: