Privacy Policy

Information about the way we collect and store data and how we keep it secure

This “Privacy Policy” was last updated on the 10th November 2025.

The objectives of this policy is to outline how we handle, manage, and control your data. This Privacy Policy complies with the UK GDPR Act (“GDPR”), 2018. The policy covers all Youtility’s businesses including all paid staff and all contractors. 

This document may be amended from time to time. Please check our website for the latest version of this Privacy Policy and our “Terms of Service”

In this Privacy Policy we outline how we shall handle and treat your Data, the expressions “we” “our” or “us” means Youtility Limited (“Youtility”), and references to “you” or “yours” means you as the customer/end user and how you can be assured that your Data will be treated fairly.

Our Service allows you to find alternative service providers by comparing pricing and helping you complete the switching process from our “Commercial Partners”' or the Commercial Partner linking to our web based products.  By  using our products you agree to this Privacy Policy, which should be read in conjunction with our Terms and Conditions. If you think that there is a mistake, if you need anything explaining, please contact us at help@youtility.co.uk

Youtility Limited is a company registered in England and Wales under company registration number 09802196. Our registered office is 6 Corunna Court, Corunna Road, Warwick, England, CV34 5HQ. Our ICO number is ZA255938.

This Privacy Policy was last updated on the 10st of November 2025.

Key takeaways

  • We hold and process your Data securely and we are open and transparent about how your Data is used.
  • When you use our Service via a Commercial Partner, we use your Data to generate a list of energy, telecoms or other deals and if you choose to submit a switch application, we will pass your Data onto the New Provider you have chosen.
  • Our Commercial Partners may share offers with you from time to time where considered suitable. Any marketing by the Commercial Partners is covered by their marketing preferences and their privacy policy and is not covered within our Privacy Policy.
  • We will never share your Data with any third parties unless we have explained the sharing in this Privacy Policy or if we obtain your consent.
  • We will share your Data with some third parties who we use for the delivery of our We always use written agreements to require them to comply with our instructions and the GDPR.
  • We are required to share your Data with the New Provider as necessary to submit your switch application.
  • We are the Data Controller for the Service we provide to you. We are responsible for our use of your Data, as explained in this Privacy Policy.
  • If a Commercial Partner has shared your Data with us, the Commercial Partner is the Data Controller for the Data they hold about you. The Commercial Partner’s use of your Data will be set out in their own privacy policy, and we are not responsible for their use of your Data.
  • If we are the Data Controller you can ask us to have your Data deleted, amended, ask for a copy of your Data, or ask for your Data to be transferred to another Data Controller at any time.
  • We respect your Data and comply with data protection laws and good practice both in the UK and in other jurisdictions we may operate in, e.g. the EU.
  • When we pass your Data to a New Provider, the New Provider becomes the Data Controller for any Data they hold and process. They may use the Data we share with them to enter into an agreement with you and to provide their services to you.  The New Provider’s use of your Data will be set out in their own privacy policy, and we are not responsible for their use of your Data.
  • If you agree to commence a switch you will inform us of your marketing preferences with the New Provider. We will pass these preferences over to the New Provider. The New Provider’s use of your marketing preference Data will be set out in their own privacy policy, and we are not responsible for their use of your marketing preference Data.
  • We use tracking in our journey flow to capture insights about our customer experiences helping to deliver a better experience for our customers. No personally identifiable data is retained or referenced as part of this process.
  • We use tracking in our journey flow to capture insights about our customer experiences helping to deliver a better experience for our customers. No personally identifiable data is retained or referenced as part of this process.
  • We are fully accountable to the UK data protection authority, the Information Commissioner’s Office known as the “ICO”.
  • If you have any concerns about your Data, we have a complaints procedure. If you are unsatisfied with our responses, you have the right to escalate your case to the ICO for an independent decision.

Scope of Privacy Policy

This Privacy Policy applies to all personal data we process through our Service. This Privacy Policy explains how Youtility processes, stores, and protects your Data, and what your rights are as a data subject.

Your Data can be defined as information about living, identifiable individuals, covering both facts and opinions about the individual, but need not be sensitive information. It can be as little as name and address but must be processed in accordance with the Data Subject’s rights. Such data can either be automated (i.e. part of a computer record) or a manual record.

Your Data 

To provide the Service we process your Data. 

As stated above Data can be defined as information about living, identifiable individuals, covering both facts and opinions about the individual, but need not be sensitive information. It can be as little as name and address but must be processed in accordance with the Data Subject’s rights. Such data can either be automated (i.e., part of a computer record) or a manual record. 

Personal data can include “Sensitive Data” which includes racial or ethnic origin, political opinions, religious or philosophical beliefs; trade-union membership; genetic data, biometric data processed solely to identify a human being; health-related data; data concerning a person’s sex life or sexual orientation. As part of the switching journey, we may capture you if you are considered vulnerable. This data is Sensitive Data and will be treated with respect and will be stored in an encrypted database and deleted as soon as is practically possible.

Data Shared with Youtility

Our Commercial Partners can embed our Service into their mobile application or website or link to our website.

To assist you your Data may be automatically pre-filled into the Youtility platform via API by our Commercial Partner under their privacy policy. Alternatively you may input your Data directly into our web products either branded as Youtility, co-branded with our Commercial Partner or branded as our Commercial Partner. You may be asked to fill in additional information. 

Before seeing results you will be made aware of this Privacy Policy. 

We store the following data: 

  • Name, address, your current energy provider, tariff, and energy usage. 

We may store (if you share with us) Sensitive Data about you. This will only be stored if it relates to your switch. This is:

  • if you are considered to be vulnerable and eligible for additional support from your New Supplier. 

If you then choose to switch to a New Provider the appropriate and necessary data will be passed over to the New Provider, you have chosen they will also become a Data Controller of your Data.

Any Data you enter into the Youtility platform shall be retained for seven (7) days unless you request to be kept up to date about renewals and related offers. Data storage is covered within our Data Retention Policy.

rvices and grow our business) or consent, having obtained your prior consent to receiving direct marketing communications.

Operational Data

When using our Service, we may also record your location, device type, browser and browser version, OS version, App version as part of normal request processing and session management, and to support you and our service in the event of problems occurring.

Additionally, we may ask you questions related to your attitudes or experiences. This data is combined with conversion tracking data to build generic market level insights. We do not use or combine with any personal or sensitive data. 

Data Processing

When you use our Service, the information you provide may be shared with selected third party suppliers to perform certain data processing tasks on our behalf. We engage these providers on terms that ensure the confidentiality and security of your Data and that is not shared and only used for the express purpose and process stipulated and that they comply with our Privacy Policies.

Third Party Links

Our Service may contain links to other websites or applications which are not controlled by us including by our Commercial Partners. We are not responsible for the privacy practices or content of such other websites, services, or applications. As such, visiting these other websites or applications is at your own risk.

Cookies

We use cookies on our Service and website to facilitate proper functioning and analyse how you and others interact with our website and service. You have the right to reject the use of cookies, accept only essential cookies or to accept all cookies.

Non-essential cookies, for example for statistics or analytics, are deployed only on the basis of User consent. You can adjust your cookie preferences at any time by clearing the cookie cache in your web browser, which will present you with the cookie consent management platform when you visit the Youtility website again. 

For more information about the cookies we use, please see our “Cookies Policy”.

Abandoned Cart

Upon receiving a quote for switching if you have entered your email address we shall record and retain your switch for a period of 120 days and provide you with the ability to complete your transaction. This is conducted under legitimate interest. You have the right to opt out of the communications. 

Communications

We may need to contact you as part of the switching process if there is an issue with your switch. We will contact you from help@youtility.co.uk and any communications will only be related to your switch. 

You may also contact us in relation to your switch. If this is the case then your communications will be stored in our Customer Relationship Management (CRM) platform. Once a case is closed we will delete your data. 

Marketing 

Our Commercial Partner may display offers including personalised offers. Any offers are provided under the Commercial Partners privacy policy and not covered within our Privacy Policy. Any offers displayed or recommended are done so without using any personally identifiable information. 

We do not retain your data and will not contact you unless related to the Service with which you have shared your Data with us or our Commercial Partner. 

Data Protection Responsibilities & Training

All members of staff, whether permanent or temporary, any suppliers including data processors, all have a duty to abide by the Youtility Data Protection Policy and this ensures our compliance with the GDPR legislation. This Policy is checked every 6-months and if appropriate updated from time to time to ensure it remains relevant and up to date. 

All staff are required to be trained into our data policies as part of any onboarding and an annual training programme to ensure compliance with our internal Data Protection Policy.  

No members of staff, supplier or data processor shall have access to Data unless absolutely necessary. The list of those able to access data shall be vetted on a quarterly basis. The development team shall not have access to the “live” database but undertake testing on our staging environment. 

Any Personal Data including any Sensitive Data shall be stored within an encrypted data.

Transfer of Data Outside the EEA 

In respect of your data we do not transfer data outside of the UK or EEA and do not intend to.  

If in future we use a supplier(s) that transfers your data outside the UK or EU to a country deemed to have a lower standard of data protection in place, for example to a third-party processor based in the US, we will ensure that your data is appropriately protected by meeting the obligations on us under GDPR and ensuring there is a transfer safeguard in place with the recipient. For example, the Standard Contractual Clauses issued by the European Commission.

Personal Data Retention

In general, we retain Personal Data for as long as is necessary for the purpose(s) for which we originally collected it, we intend only to store data for 6 months from visiting or using our service. We may also retain information as required by law. If you have viewed switching options or completed a switch your data will be stored on the Youtility switching platform.

Non personalised data including data metrics will be retained longer than this term.  

You have the right to delete your data at any time - please contact us at help@youtility.co.uk.

If you need to contact us and we have deleted your data, then we may ask you for data to help identify you with your new supplier. As soon as we resolve the issue we will within a week later again delete your personal data.

Your Data Protection Rights

Under the UK data protection laws, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information:

Right to Access – Subject Access Request (SAR)

If at any point you wish to either confirm whether your personal data is being processed and/or access the personal data we hold on you, you can request to see this information, free of charge, and we will respond to this request within a 1-month period.

To fulfil the SAR, the identity of the requester will be required to be verified before providing information. All requests shall be completed within 30 days of your identity being confirmed.

Right to Be Informed

This policy provides the information you need about how we collect and use your data which we have outlined within this document.

Right to Rectification

You are entitled to have data corrected if it is inaccurate or incomplete.

Right to Erasure

In certain circumstances, you have the right to have personal data that we hold about you erased.

Right to Object and Restrict

You can ask for the processing of your personal data to be restricted, for example for marketing purposes. Where your data is processed on the basis of consent, you may also withdraw your consent to that processing at any time. You can also object to the processing of your data entirely, but this may affect the service we are able to offer.

Right to Portability

You can request a copy of your personal data to be sent to another data controller or to yourself in a machine-readable format.

Contacting Us

Information is also stored when you communicate with us via email, social media, or other means by which you decide to contact us. This is usually limited to your name, email address and/or social media account depending on how you contact us and any correspondence on resolving your enquiry. We process this data based on our contract with you and/or our legitimate interests in providing an efficient service to you.

Issue Procedure

If you have any questions or concerns about how we handle your Data then please contact us at help@youtility.co.uk

If you feel your issue has not been dealt with fully then you can escalate your issue to our CEO, at complaint@youtility.co.uk

If you are still not satisfied with the outcome then you can escalate your issue for independent review to the ICO. 

Defined terms

Commercial Partner means an independent company which has arranged for us to provide our Service to you.  This could be via the Commercial Partner’s own website, or they might refer you to our own website.

Data means your personal data, i.e. any information which relates to you as an identifiable person.  It does not include any information which has been made anonymous so that you are not identifiable.

Data Controller means the person who decides the purpose(s) for collecting and/or processing your Data, and also the main ways that your Data will be processed.

Data Subject means a living individual, in this case, you.

GDPR means the General Data Protection Regulation 2018, as incorporated into UK law.

New Provider means a provider you have chosen to switch to via the Service.

Privacy Policy means this privacy policy.

Service means the Youtility service which you can use to compare prices and switch suppliers for various services and any other services or businesses operated by Youtility.

Terms and Conditions means our terms and conditions which govern your use of our Service.