Summary
YES Energy Solutions is committed to protecting the privacy and security of personal information entrusted to us.
This privacy notice is for individuals connected with, or employed by, business clients, consultants, and other professional third parties, such as suppliers and service providers with whom YES Energy Solutions has a business relationship.
We refer to such individuals in this notice as our “Business Contacts”.
This privacy notice describes how we, as a “Data Controller”, collect and use personal information about you during and after your relationship with us, in accordance with Data Protection Laws like General Data Protection Regulations (GDPR), the Data Protection Act 2018 and Privacy and Electronic Communications Regulations (PECR). It only applies to the processing of personal data of our Business Contacts.
The kind of information we hold about you
We may collect, store, and use the following categories of personal information about you:
Where permitted in accordance with local law, we may also in some circumstances record telephone conversations with you.
If you provide us with additional information about you, by email or on telephone calls, we may for regulatory reasons be required to store the record. This could include, in particular, but not limited to:
We ask that you do not disclose any such information to us if you are uncomfortable with it being stored on our systems to comply with our regulatory obligations.
How is your personal information collected?
We typically collect personal information about our Business Contacts directly from them, from their employers or from other Business Contacts with whom we share a relationship. For example, our Local Authority clients will share with us the contact details for their advisers and service providers. We will collect additional personal information during our relationship as a necessary consequence of the services being provided.
How we will use information about you
We will only use your personal information when the law allows us to; this is known as a “legal basis” for processing.
Situations in which we will use your personal information
We may use your personal information to:
We may also use your personal information in the following situations, which are likely to be rare: where we need to protect your interests (or someone else’s interests, such as a corporate client we have in common); or where it is needed in the public interest or for official purposes.
There may be overlap in the circumstances in which we use the same information about you.
Change of purpose
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law or regulation.
Data Sharing
We may need to share your personal data with third parties, including other Business Contacts, other entities within the YES Energy Solutions group and our auditors. Where we share your personal data with another party performing services for us, we require those third parties to respect the security of your personal data and to treat it in accordance with the law.
Which third party service providers appointed by YES Energy Solutions will process my personal information?
We may share your contact details with our preferred partners for relevant event invitations such as conferences or award ceremonies. You may at any time inform us that you no longer wish to receive future invitations from us.
We may also need to share your personal information with a regulator or to otherwise comply with the law.
When might you share my personal information with other entities in the group?
We will share your personal information with other entities in our group in connection with our performance of the services or contracts we provide.
Data Security
We have put in place measures to protect the security of your information. Details of these measures are included in group-wide policies which cover the following:
Our policies and controls are based on the international standard for information security, ISO27001. We are committed to implementing, maintaining and continually improving an information security management system in accordance with that standard. Our approach supports the enhancement of information security controls and our information governance framework is overseen by our Board who are responsible for managing risk within our organisation.
Data Retention
How long will you use my information for?
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or regulatory requirements.
You will appreciate that as a regulated business, there are record retention obligations on us. We retain your personal data to comply with these obligations.
Rights of access, correction, erasure, and restriction
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
You can exercise these rights by contacting your usual YES Energy Solutions relationship contact.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact your usual YES Energy Solutions relationship contact in writing.
Once we have received notification you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Find out more about how we process your data
If you have any questions about this privacy notice or how we handle your personal information, or if you are unhappy with how we handle your personal information, please contact your usual YES Energy Solutions relationship contact. If we do not resolve your concerns to your satisfaction, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
Changes to this Privacy Notice
We may update this privacy notice from time to time and will communicate such updates through our website. We will not do so where we believe this would materially impact your rights and freedoms: in those circumstances we will expressly notify you. We may also notify you in other ways from time to time about the processing of your personal information.
If you have any questions about this privacy notice, please contact your usual YES Energy Solutions relationship contact, who will be happy to assist you.
Introduction
As a “data controller”, YES is committed to protecting the privacy and security of your personal information. This Privacy Notice describes how we collect and use personal information for the purpose of recruitment, and how long it will usually be retained for, in accordance with all applicable personal data protection laws and regulations.
If your application to work for us is successful, we will hold additional information about you as your employer in accordance with our Employee Privacy Notice, which will be provided at the relevant stage.
Application
The notice applies to all employment candidates and does not form part of any contract of employment or other contract to provide services. It may be updated at any time, if it is, we will let you know.
Approach
YES is a “data controller”. This means we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.
It is important you read this notice, together with any other privacy notice provided by 3rd parties we work with as part of our recruitment process who collect or process personal information about you, so you are aware of how and why this information is used.
Data protection principles
We will comply with data protection law, which says personal information we hold about you must be:
The kind of information we hold about you
We need to use your personal information to decide whether to enter into a contract of employment with you. In connection with your application for work with us, we may collect, store, and use the following categories of personal information about you:
If your application progresses through the recruitment process, we will also collect, store, and use:
We may also collect, store and use the following “special categories” of more sensitive personal information:
How is your personal data collected?
We typically collect personal information about potential employees either directly from candidates or sometimes from an employment agency or background check provider. We will sometimes collect additional information from third parties including former employers, credit reference agencies or other background check agencies, including:
How we will use information about you
We will use the personal information we collect about you to:
If you fail to provide particular information which is necessary for us to consider your application, then we will not be able to process your application.
Information about criminal convictions
During the recruitment process, we may outsource our vetting process (including checking criminal records) to a third-party provider and, in this case, you will be asked to input your personal information to their portal. As an organisation operating in a highly regulated sector, YES needs a high degree of trust and confidence in all of our employees. This means that, as part of our pre-employment screening process, we carry out criminal record checks on individuals depending on the role requirements when joining the company. For regulated roles, these checks may be repeated during employment as required.
Unless relevant to the ongoing employment, data on criminal records will be deleted as soon as possible following recruitment or the decision not to recruit. Failure to provide the necessary information will preclude you from being eligible for a role with YES.
Data Sharing
We do not share your data with 3rd parties at the recruitment stage, once an offer of employment has been made and accepted, our employee privacy notice will be provided which will notify you who your data will be shared with as part of your employment.
Data Security
Preserving the security of your information is essential to ensure we meet legal, regulatory, and your own expectations, whilst maintaining high levels of confidence and trust. To support these objectives, YES has in place companywide policies and procedures covering information security to protect information and preserve the confidentiality, integrity and availability of the personal information we hold.
Data Retention
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for. If your application is unsuccessful, we will retain your personal information for a period of 12 months from the closing date of the vacancy. If you have made a speculative application, this data will be held for 12 months.
Automated decision making
Automated decision-making takes place when an electronic system uses personal information to decide without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.
Your rights in connection with your personal information
Under certain circumstances, by law you have the right to:
For questions about this Privacy Notice, or if you have further questions about how we process your personal information, or to exercise one of the rights described above, please direct your email here.
If you are unhappy with our response, you can make a complaint about how we are holding or processing your personal information to the Information Commissioner’s Office (ICO), www.ico.org.uk.
Changes to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We will also notify you in other ways from time to time about the processing of your personal information.
Overview
YES Energy Solutions takes the privacy of its customers very seriously. As an organisation we instruct all employees and partners who handle your information to treat it with the same respect we would when dealing with you in person, when we deliver services to you. We comply fully with all Data Protection Laws, including the UK General Data Protection Regulation and Data Protection Act 2018.
Contact us about your data
To contact us about the data we hold about you, call our customer service team on 01422 880 100, contact us via the contact form on our website (www.yesenergysolutions.co.uk), email us at dataprotection@yesenergysolutions.co.uk, or write to us at:
Data Protection Manager
YES Energy Solutions
Unit 8-9, Victoria Mills, Stainland Road
Greetland HX4 8AD
How do we receive your data?
We work with a wide variety of organisations, like Local Authorities, Charities and Housing Associations with the goals of reducing carbon emissions and alleviating fuel poverty. For us to provide our services to you, we will need to process some of your personal data. This data can be provided to us in two ways.
Direct – We have received your data directly from you. This could be by submitting a contact form on our website, via our social media channels or phone in response to Marketing you have seen.
In-direct – Your information has been shared with us by a 3rd party. This could be your local authority, a charity, your support network, your landlord or even a friend or family member.
What data do we hold about you?
We may hold different data dependent on you depending on which of our two main types of customer you are. Generally, we will process the following categories of data about you.
| Customer type | Description | Data |
|---|---|---|
| Able to pay | You are not eligible for financial support for the services we provide to you. | Contact information like your name, address, and phone number |
| Funded | You are eligible for financial assistance with the funding of services we provide to you. | Contact information like your name address and phone number. Eligibility information which may contain sensitive data like your financial or health status. |
For detailed information about how we process your data, if you are actively receiving one of our services, please see our scheme information page Schemes & Partners | YES Energy Solutions. Each scheme has specific privacy information and the link provides more detail than this general notice.
When we receive your information from a source other than you, we will provide you with information about who gave us your data and for what purpose.
What do we do with your data?
We use your data to provide services to you which you have asked for, or a 3rd party partner we work with, believes you will benefit from. We will never sell your data or share it with a 3rd party unless there is a lawful basis to do and it is in your interest to do so. For example, we may identify through the course of providing your service you would benefit from additional support from one of our partners.
Where is your data?
YES Energy Solutions uses digital systems to process customer data. We do not process or transfer your data outside the EU. Where we have a need to process physical copies of your data, those copies are digitised and then secured within our IT systems. Original documents will be returned to you or securely destroyed depending on your instruction.
It’s your data, so what are your rights?
You have several rights related to the processing of your personal data. You can find out more about your rights in detail at the UK Information Commissioners Office (ICO) website https://ico.org.uk/for-the-public/. In summary, you have the right to know we are processing your data and for what purposes. You can ask us what data we hold about you and how it is being used. If any of your information is incorrect you can ask for it to be rectified and in some circumstances you have the right to have your information deleted which is also known as a the right to be forgotten. You can restrict how we use your data in certain circumstances and you can object about how we process your data, for example where you have previously agreed to allow us to use it for marketing purposes. Where we have used an automated process to decide on your access to our services, you can ask for person to review the decision.
Who do we share your information with?
Like many businesses, YES Energy Solutions uses a variety of 3rd party organisations to assist with running our business and sometimes to provide special expertise when providing services to you, or our other customers. The categories of company we work with are: Financial Auditors; Certification providers; specialist consultancies; IT service providers; and business partners who are aligned to the services we provide to you.
Cookies and similar technologies
Cookies and similar technologies
We use cookies and similar technologies on our website to improve your experience, analyse traffic, and support marketing activities. For detailed information about the types of cookies we use, the purposes they serve, and how you can manage your preferences, please see our cookie notice below.
How do you complain about our use of your data?
In the first instance you should contact us and ask to speak to our Data Protection Team. We will resolve your complaint as quickly as possible and to your satisfaction. However, in the rare case we have not been successful in resolving your complaint, you can make a complaint to the Information Commissioners Office. You can do this via their website https://ico.org.uk/make-a-complaint/ or calling their helpline on 0303 123 1113.
Thank you for taking the time to read this privacy notice.
Notice updated: 11/09/2025
Yes Energy Solutions – Cookie Notice
Last updated: 11 November 2025
1) How we use cookies
Our website uses small files called cookies and similar technologies to make the site work, understand how it’s used, and show relevant messages on other websites. Some cookies are essential and always on. Others are optional and only set if you accept them in our cookie banner or manage your settings.
You can change your choices at any time via “Cookie settings” in the site footer. You can also block cookies in your browser, but parts of the site may not work properly if you do.
2) Who is responsible for your data?
· Controller: Yes Energy Solutions CIC t/a YES Energy Solutions
· Purpose: Operating our website, measuring performance, and running marketing campaigns.
· Legal bases:
o Strictly necessary cookies: our legitimate interests in delivering a secure, functional website.
o Analytics & marketing cookies: your consent.
· Contact: dpo
For more on how we handle personal data, see our Privacy Notice above.
3) Your choices
· Accept all optional cookies (Analytics + Marketing)
· Reject non-essential cookies (only Strictly Necessary will run)
· Manage settings (choose per category)
You can withdraw consent at any time using Cookie settings in the footer. You can also clear cookies in your browser and use tools such as Do Not Track or Global Privacy Control (where available).
4) Cookie categories we use
A. Strictly Necessary (always on)
These keep the site secure and working (for example, security tokens and session management). They do not require your consent.
· SM (Microsoft Clarity) – Maintains internal routing during your visit (session).
· ANONCHK (Microsoft/Bing) – Verifies ad-clicks during a session to keep reports accurate; helps enforce your ad-personalisation choices (10 minutes).
Note: We do not use these for advertising; they are required for site and campaign integrity.
B. Analytics (requires consent)
These help us understand how people use our site so we can improve it. We use this data in aggregate and do not identify you directly.
· _ga (Google Analytics) – Sets an ID to distinguish users (1 year).
· _ga_2MPMRK1ZRV (Google Analytics) – Persists session-level analytics for this property (1 year).
· _clck (Microsoft Clarity) – Stores a unique ID to maintain Clarity insights across pages (1 year).
· _clsk (Microsoft Clarity) – Connects page views into a single session (24 hours).
· CLID (Microsoft Clarity) – Records first-time Clarity visit information (1 year).
C. Marketing (requires consent)
These help us show relevant ads on other websites and measure campaign performance.
· _gcl_au (Google/AdSense) – Stores ad-click info to measure conversions (3 months).
· test_cookie (DoubleClick/Google) – Checks whether your browser accepts cookies (15 minutes).
· _fbp (Meta/Facebook) – Enables ad delivery and remarketing (3 months).
· MUID (.bing.com / Microsoft) – Unique browser ID used for ads and analytics (1 year).
· MR (.c.bing.com / Microsoft) – Short-term cookie used for analytics and ad performance (7 days).
· SRM_B (.c.bing.com / Microsoft) – User/device-level information for ad delivery (1 year).
These services may process data outside the UK/EEA under appropriate safeguards (e.g., SCCs). You can opt out by rejecting Marketing cookies at any time.
5) Detailed cookie list (detected on our site)
Name Provider / Domain Category Purpose Expires
SM Microsoft Clarity (.c.clarity.ms) Strictly necessary Keeps Clarity working during your visit (routing and performance). Session
ANONCHK Microsoft/Bing (.c.clarity.ms) Strictly necessary Verifies ad clicks for reporting; respects ad-personalisation choices. 10 minutes
_ga Google Analytics (.yesenergysolutions.co.uk) Analytics Tells us if two visits come from the same browser. 1 year
_ga_2MPMR
K1ZRV Google Analytics (.yesenergysolutions.co.uk) Analytics Stores state for this GA property to measure visits and pages. 1 year
_clck Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Remembers a unique ID so we can see how the site is used over time. 1 year
_clsk Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Groups page views into a single session for reporting. 24 hours
CLID Microsoft Clarity (www.clarity.ms) Analytics Notes that your browser visited our site to enable heatmaps and session insights. 1 year
_gcl_au Google/AdSense (.yesenergysolutions.co.uk) Marketing Stores ad-click info to help us 3 months
measure conversions.
test_cookie DoubleClick/Google (.doubleclick.net) Marketing Checks if your browser supports cookies. 15 minutes
_fbp Meta/Facebook (.yesenergysolutions.co.uk) Marketing Helps deliver ads and measure their performance. 3 months
MUID Microsoft/Bing (.bing.com) Marketing Unique ID for ads and analytics across Microsoft sites. 1 year
MR Microsoft/Bing (.c.bing.com) Marketing Short-term analytics and ad performance cookie. 7 days
SRM_B Microsoft/Bing (.c.bing.com) Marketing Stores user/device info to help serve relevant ads. 1 year
6) Third-party cookies and transfers
Some cookies belong to third parties (Google, Microsoft, Meta). These partners may process limited personal data (e.g., online identifiers, IP address, device data) to provide analytics and advertising services. Where data is sent outside the UK/EEA, appropriate safeguards (such as Standard Contractual Clauses) are used by those providers. You can limit this by rejecting the relevant categories.
7) Keeping this notice up to date
We review our cookie list regularly and update this page when our cookies change or when we run new campaigns that add cookies. The cookie banner will always reflect the current set of cookies in use.
8) Manage your settings
· Cookie settings (footer) – change or withdraw consent
· Browser controls – block or delete cookies
· Advertising opt-outs – Google Ads Settings; Meta Ad Preferences; Microsoft Advertising opt-out
Useful information
Optional banner wording (for your consent tool)
Cookies on this site We use essential cookies to make our site work. We’d also like to use analytics cookies to understand how you use the site and marketing cookies to help us show relevant messages. You can accept all, reject non-essential, or manage your choices. [Accept all] [Reject non-essential] [Manage settings]
Implementation notes for your web team (non-public)
· Categories & default state:
o Strictly necessary: on (no toggle)
o Analytics: off by default (requires opt-in)
o Marketing: off by default (requires opt-in)
· Geography: Apply the same consent model for UK/EEA visitors.
· Granular control: Ensure “Manage settings” allows per-category consent.
· Respect withdrawal: On consent withdrawal, remove existing non-essential cookies and stop setting new ones (e.g., block GA/Clarity/Ads tags).
· Records: Keep a consent log (timestamp, categories accepted, banner version).
· Scan cadence: Re-scan quarterly and after major site changes; update this notice and the banner configuration accordingly.
Ongo Homes – Privacy NoticeSuffolk WHLG Privacy Notice YES the Processor
North Yorkshire Council WH SHF- Privacy Notice YES the Processor
North Yorkshire Council WHLG – Privacy Notice YES the Processor