Privacy notice

Efficiency Professor Consultancy (a DBA of WFT Limited) (trading as refunds.energy) is the controller of personal data processed through this site. This notice sets out, in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018, what personal data we collect, why we process it, who we share it with, how long we keep it, and the rights available to you.

Controller and contact

Controller: Efficiency Professor Consultancy (a DBA of WFT Limited) (DBD Reg. 0105566203855), registered in England and Wales with its registered office at 237/49 Moo 50, Sukhumvit 93, Bangkok 10260, Thailand. Privacy queries: contact@refunds.energy. Efficiency Professor Consultancy (a DBA of WFT Limited) is registered with the Information Commissioner’s Office.

Personal data we collect

When you use the eligibility check, contact form, or correspond with us, we collect: your name; business name and role, where relevant; email address; phone number (optional); postcode or business address (optional); and the information you provide about your energy supply, finance arrangement, insolvency history or prospective claim. Where a case progresses we may also collect account numbers, supplier or lender correspondence, invoices and statements. We do not ask for, and ask you not to volunteer, special-category data or criminal-offence data.

We also collect limited technical data (IP address, browser type, pages viewed) through essential server logs for security and fraud-prevention purposes.

Purposes and legal bases

• Responding to your enquiry and assessing scope — taking steps at your request prior to entering a contract (UK GDPR Art. 6(1)(b)) and our legitimate interests in operating and developing our claim-origination business (Art. 6(1)(f)).
• Preparing, submitting and pursuing a claim once you have signed an engagement letter and letter of authority — performance of that contract (Art. 6(1)(b)).
• Referring personal-claim enquiries to a regulated solicitor on our panel — your explicit consent, given at the point of referral (Art. 6(1)(a)); consent may be withdrawn at any time before the referral is actioned.
• Occasional service updates to B2B enquirers and clients — our legitimate interests in keeping business contacts informed (Art. 6(1)(f)) and, where applicable, the soft opt-in under PECR reg. 22; you can opt out of every message and at contact@refunds.energy.
• Fraud prevention, security and legal or regulatory compliance — our legitimate interests (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c)).

Recipients

Access is limited to our caseworkers and, on your instruction, the supplier, broker, lender, administrator, ombudsman, regulator or court to whom the claim is addressed. For personal-claim enquiries that proceed to referral, we transmit your details to the panel solicitor you select and only after you give explicit consent. We may receive a referral fee from that solicitor; the solicitor’s own engagement with you will disclose this, and we will disclose it to you at the point of referral.

We rely on the following processors, each engaged under a written data-processing agreement: Resend Inc. (transactional email delivery), Vercel Inc. (website hosting and essential logs), and a UK-based case-management database provider once engaged. We do not sell personal data and we do not use it for profiling or automated decision-making that produces legal or similarly significant effects.

International transfers

Resend and Vercel are US-headquartered and may process data on infrastructure located outside the UK. Where that is the case, transfers are made under the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with a transfer risk assessment on file. A copy of the relevant safeguard is available on written request to contact@refunds.energy.

Retention

Eligibility enquiries that do not progress to engagement are retained for 12 months from last contact, then deleted. Active case files are retained for the duration of the engagement and for six years thereafter, to meet limitation, audit and tax-record requirements. Marketing suppression lists are retained indefinitely so that we can honour your opt-out.

Security

We apply appropriate technical and organisational measures including access controls, encryption of data in transit, supplier due diligence, and staff confidentiality obligations. No system is completely secure; we will notify the ICO and, where required, affected individuals of any personal-data breach that meets the reporting thresholds in UK GDPR Arts. 33 and 34.

Your rights

You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability, and to object to processing based on legitimate interests or for direct marketing. Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, email contact@refunds.energy; we will respond within one month.

If you are not satisfied with our response you may lodge a complaint with the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would, however, appreciate the chance to address your concerns first.

Cookies

We set only cookies that are strictly necessary to operate the site. See our cookie notice for detail.

Changes to this notice

We review this notice periodically and will update the “last updated” date at the top when we make changes. Material changes affecting existing enquirers or clients will be notified by email.