Privacy

Fuel Poverty Action work to embed our principles into our policies. That’s why we don’t use Google Analytics or invasive tracking on our site.

We take data protection seriously – we want members and supporters to feel safe sharing information with our staff.

Data complaints procedure

If you wish to make a complaint to Fuel Poverty Action about any aspect of how we have handled your data, you can put your complaint in writing and email it to us at: contact@fuelpovertyaction.org.uk

We will acknowledge your complaint as soon as we can, and no later than 30 days after we receive it, as required by the Data (Use and Access) Act 2025. Your complaint will be investigated and we will inform you of the outcome as soon as we can. If the investigation is complex and likely to take some time, we will keep you informed along the way.

Data Protection Policy

Our Data Protection Policy sets out the details of our compliance with our legal obligations under the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR) in respect of data privacy and security.

If any conflict arises between those laws and the Policy, Fuel Poverty Action intends to comply with the 2018 Act and the GDPR.

The following excerpts from the Policy apply to current a former employees, workers, volunteers, and consultants, but may help give a sense of FPA’s approach to data protection.

---

Data protection principles

Fuel Poverty Action processes personal data in accordance with the following data protection principles. Data must:

• Be processed fairly, lawfully and transparently
• Be collected and processed only for specified, explicit and legitimate purposes
• Be adequate, relevant and limited to what is necessary for the purposes for which it is processed
• Be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay
• Not be kept for longer than is necessary for the purposes for which it is processed
• Be processed securely

We are responsible for ensuring and demonstrating compliance with these principles. 

How we define personal data

‘Personal data’ means information which relates to a living person who can be identified from that data (a ‘data subject’) on its own or when taken together with other information which is likely to come into our possession. It includes any expression of opinion about the person and an indication of the intentions of us or others in respect of that person. It does not include anonymised data.

How we define processing

‘Processing’ means any operation which is performed on personal data, such as:

• Collection, recording, organisation, structuring or storing
• Adaption or alteration
• Retrieval, consultation or use
• Disclosure by transmission, dissemination or otherwise making available
• Alignment or combination
• Restriction, destruction or erasure

‘Processing’ includes processing personal data which forms part of a filing system and any automated processing.

Data retention

We will only retain personal data and sensitive data for as long as necessary for the purposes for which we collected it. After this time, it will be deleted or archived. We will make sure data subjects are provided with information about the period for which data is stored and how that period is determined in any applicable Privacy Notice.

Data Protection Officer

Our DPO at the time of writing is Holly Donovan.

Our DPO can be contacted via email – holly@fuelpovertyaction.org.uk