This Privacy Policy explains how Vast Global Ltd ("Vast Global", "we", "us", "our") collects, uses, shares and protects personal data when you visit our website, submit our utility audit form, contact us, or interact with our advertising on Meta platforms (Facebook and Instagram). We are committed to handling your data lawfully and transparently in line with the UK GDPR and the Data Protection Act 2018.
1. Who We Are
Vast Global Ltd is a company registered in England, with its registered office in London, UK. We act as the data controller for the personal data described in this policy. We are an independent intermediary for non-domestic (business) energy and water services, and we also provide web development and digital marketing services.
Contact: info@vastlgobal.co.uk · +44 7465 759889
2. Personal Data We Collect
Depending on how you interact with us, we may collect:
- Identity and business details: your name, job role, and your company's legal name.
- Contact details: business email address and telephone or mobile number.
- Utility information: the type of utility you want audited and any invoices, bills or usage records you upload (these may include meter numbers, supply addresses, contract dates and tariff details).
- Letter of Authority (LOA): if you choose to give us one so we can speak to suppliers on your behalf.
- Communications: messages, emails and call notes when you contact us or we contact you.
- Technical and advertising data: IP address, browser and device type, pages viewed, and advertising event data (for example "Lead" or "Form Submitted") recorded through Meta tools described in section 5.
We do not ask for payment card details or bank account details through our audit form, and we ask that you do not include them in uploaded documents. We do not knowingly collect special category data.
3. How We Collect Your Data
- Directly from you, when you complete our forms, upload documents, call or email us.
- From Meta, if you submit a lead form on Facebook or Instagram, or click on one of our adverts.
- Automatically, through cookies and similar technologies on our website.
4. Why We Use Your Data and Our Lawful Basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Reviewing your utility documents, comparing them with market rates and sending you results | Steps at your request before entering a contract; our legitimate interests in providing the service you asked for |
| Contacting you about your enquiry by phone, email or message | Your consent and/or our legitimate interests in responding to business enquiries |
| Acting on your behalf with suppliers under a Letter of Authority | Your consent and performance of our agreement with you |
| Measuring and improving our advertising (Meta Pixel and similar tools) | Your consent, where cookies or similar technologies require it |
| Keeping records, preventing fraud and complying with legal obligations | Legal obligation and legitimate interests |
Where we rely on consent you can withdraw it at any time (see section 9). Marketing messages to individuals are sent only where permitted under the Privacy and Electronic Communications Regulations (PECR); business-to-business contact with corporate subscribers is handled in line with those rules, and you can ask us to stop at any time.
5. Meta Advertising, Pixel and Tracking
We advertise on Facebook and Instagram. Our website may use the Meta Pixel, Conversions API and similar tools. These record actions such as page views and form submissions, and may share limited identifiers (such as cookie IDs, IP address, and hashed email or phone number) with Meta so that we can measure results and show our adverts to relevant audiences.
Meta acts as an independent controller for the data it receives and processes it under its own privacy policy. We do not send your uploaded utility documents or invoices to Meta. You can manage your ad preferences through your Facebook and Instagram account settings (Settings → Ad preferences) and can opt out of personalised ads there. If you submit information through a Meta lead form, Meta passes that information to us so we can respond to your request.
6. Who We Share Data With
We do not sell your personal data. We share it only where necessary with:
- Energy and water suppliers and other intermediaries, where you ask us to obtain quotes or act under a Letter of Authority.
- Service providers who help us run our business, such as cloud storage, email, CRM, website hosting and analytics providers, who act on our instructions.
- Meta Platforms, as described in section 5.
- Professional advisers, regulators and authorities, where required by law.
7. International Transfers
Some of our providers, including Meta, may process data outside the UK. Where this happens we make sure an appropriate safeguard is in place, such as a UK adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
8. How Long We Keep Your Data
We keep personal data only for as long as needed for the purposes above. As a general guide: enquiries that do not lead to a contract are kept for up to 12 months; client and contract records are kept for up to 6 years after the relationship ends to meet legal and accounting requirements; uploaded invoices are deleted or returned once the audit is complete unless you ask us to retain them. Advertising event data is retained according to Meta's own settings.
9. Your Rights
Under UK data protection law you have the right to:
- be informed about how we use your data and request a copy of it (access);
- have inaccurate data corrected (rectification);
- have your data deleted in certain circumstances (erasure);
- restrict or object to our processing, including direct marketing;
- receive your data in a portable format, where applicable;
- withdraw consent at any time, without affecting earlier processing.
To exercise any of these rights, email info@vastlgobal.co.uk. We will respond within one month. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, although we would appreciate the chance to resolve your concern first.
10. Data Deletion Requests
If you want us to delete the data we hold about you, including data received from Meta advertising or lead forms, email info@vastlgobal.co.uk with the subject line "Data Deletion Request" and the name and email or phone number you used. We will confirm once it has been completed.
11. Security
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse, including encrypted connections (HTTPS), access controls and secure storage. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Cookies
Our website may use cookies and similar technologies for essential site operation, analytics and advertising measurement (including the Meta Pixel). Where required by law we ask for your consent before using non-essential cookies. You can control or delete cookies through your browser settings.
13. Children
Our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on this page with its effective date shown at the top.
15. Contact Us
Vast Global Ltd
Registered Office: London, UK
Email: info@vastlgobal.co.uk
Phone: +44 7465 759889