Privacy Policy

Last updated: 7 May 2026

West Energy Procurement Ltd, trading as West Business Energy ("we", "us", "our"), is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, why we collect it, and how we use it, in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

Our registered business address is in Galway, Ireland. Our primary contact for data protection enquiries is Kyran Hamman, reachable at kyran@westbusinessenergy.ie.

1. What data we collect

When you submit an audit request through our website, we collect the following personal data:

Your name
Your business name
Your phone number
Your email address
Your business sector (optional)
Your approximate annual energy spend (optional)
Your contract renewal date (optional)
Any additional information you choose to provide in the message field
Energy bills or account documents you share with us directly by email

We may also collect basic analytics data about how visitors use our website (such as pages visited and time spent), through standard server logs or third-party analytics tools. This data is anonymised and not linked to identifiable individuals.

As part of our business development activities, we may also hold contact information for business prospects identified through publicly available sources, including company websites, LinkedIn, and business directories. This data is limited to business contact names, email addresses, phone numbers, business sector, and company name.

2. Why we collect it and our lawful basis

We collect your personal data for the following purposes:

To respond to your audit request — to review your energy contract, benchmark supplier rates, and present you with options. Our lawful basis is legitimate interests (GDPR Art. 6(1)(f)): you have approached us with a business enquiry and we have a legitimate interest in responding to it. We have assessed that this interest is not overridden by your privacy rights given the commercial nature of the communication.
To communicate with you about your enquiry and any follow-up. Our lawful basis is legitimate interests.
To fulfil our services if you proceed to engage us as your energy broker. Our lawful basis is contract performance (GDPR Art. 6(1)(b)).
To conduct direct marketing and business development outreach to business prospects. Our lawful basis is legitimate interests (GDPR Art. 6(1)(f)). See Section 7 for full details.

We do not use your data for automated decision-making or profiling.

3. How we use your data

Your personal data is used solely to:

Contact you about your energy audit request
Review your energy contract and usage
Present supplier options to you
Facilitate the group buying process if you choose to proceed

We do not share your personal data with energy suppliers or any other third parties without your explicit prior consent. We will always ask your permission before making contact with any supplier on your behalf.

4. Who we share your data with

We do not sell, rent, or trade your personal data. We may share your data with the following third parties, each of whom processes data on our behalf under GDPR-compliant terms:

Formspree Inc. — our website contact form processor. Form submissions are transmitted through Formspree's servers. Formspree is GDPR-compliant. See their privacy policy at formspree.io/legal/privacy-policy.
Google Workspace (Google LLC) — our email provider. All emails sent to and received from kyran@westbusinessenergy.ie are processed through Google's servers. Google processes data under standard contractual clauses approved by the European Commission.
Google Drive (Google LLC) — our document storage platform. Client energy bills, signed Letters of Authority, and Client Services Agreements are stored in a secured Google Drive folder accessible only by authorised personnel.
HubSpot Inc. — our customer relationship management platform. Prospect and client contact information, communication history, and engagement records are stored in HubSpot. HubSpot is GDPR-compliant and processes data under standard contractual clauses.
Mailreach — our email deliverability tool. Mailreach has limited access to our sending email account for the purpose of maintaining domain sender reputation. No client or prospect data is shared with Mailreach beyond what is necessary for this function.
Energy suppliers — only with your explicit written consent, confirmed through a signed Letter of Authority, and solely for the purpose of running a competitive tender on your behalf. We will never contact a supplier on your behalf without this authorisation.
Legal or regulatory authorities — if required to do so by applicable law or regulatory obligation.

5. How long we keep your data

If you submit an enquiry but do not proceed to engage our services, we will retain your contact information for up to 12 months for follow-up purposes, after which it will be deleted.

If you engage our services, we will retain relevant records for up to 6 years in line with standard Irish business and tax record requirements.

Energy bills and account documents shared with us will be deleted within 30 days of completing your audit unless we have your consent to retain them for ongoing procurement purposes.

Business prospect data held for marketing purposes will be retained for up to 12 months from the date of last contact. Individuals who have opted out of our communications will be removed from active lists immediately; a suppression record will be retained indefinitely to prevent future contact.

6. Your rights under GDPR

Under GDPR, you have the following rights regarding your personal data:

Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data ("right to be forgotten")
Right to restrict processing — you can ask us to limit how we use your data
Right to data portability — you can ask for your data in a portable format
Right to object — you can object to our processing of your data where we rely on legitimate interests
Right to withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at kyran@westbusinessenergy.ie. We will respond within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

7. Direct marketing and cold outreach

As part of our business development activities, we may contact businesses by email or phone where we have identified a legitimate commercial interest in making contact — for example, where a business is likely to benefit from our energy procurement services based on its sector, size, or location in Galway.

Our lawful basis for this activity is legitimate interests under GDPR Art. 6(1)(f), and we conduct a balancing test to ensure that our interest does not override the privacy rights of the individuals we contact. We comply with Regulation 13 of the Irish ePrivacy Regulations 2011 (S.I. No. 336 of 2011) in all direct marketing communications.

Every direct marketing communication we send will:

Clearly identify West Business Energy as the sender
State the purpose of the communication
Include a simple and immediate opt-out mechanism
Be honoured immediately and permanently upon receipt of an opt-out request

If you receive a communication from us and wish to opt out of future contact, simply reply with the word "unsubscribe" and we will remove you from our contact list immediately. We will not contact you again for marketing purposes.

8. Cookies

Our website does not currently use tracking cookies or advertising cookies. We may use basic session cookies required for the website to function correctly. If we introduce analytics or marketing cookies in future, this policy will be updated and you will be informed.

9. Security

We take reasonable steps to protect your personal data from unauthorised access, loss, or misuse. Form submissions are transmitted via encrypted (HTTPS) connections. Energy bills shared with us by email are stored securely in a designated, access-controlled Google Drive folder and accessed only by authorised personnel. Two-factor authentication is enabled on all accounts used to access personal data.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our services, data processing activities, or applicable law. The date at the top of this page will reflect the most recent revision.

Where changes are material — for example, where we add a new category of data processing or a new third-party processor — we will notify existing clients directly by email prior to the change taking effect. Minor administrative updates do not require individual notification.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact:

Kyran Hamman
West Energy Procurement Ltd t/a West Business Energy
Galway, Ireland
kyran@westbusinessenergy.ie
085 147 2147