YES Energy Solutions

View how we use your data below

Business contacts

Summary

YES Energy Solutions is committed to protecting the privacy and security of personal information entrusted to us.

This privacy notice is for individuals connected with, or employed by, business clients, consultants, and other professional third parties, such as suppliers and service providers with whom YES Energy Solutions has a business relationship.

We refer to such individuals in this notice as our “Business Contacts”.

This privacy notice describes how we, as a “Data Controller”, collect and use personal information about you during and after your relationship with us, in accordance with Data Protection Laws like General Data Protection Regulations (GDPR), the Data Protection Act 2018 and Privacy and Electronic Communications Regulations (PECR). It only applies to the processing of personal data of our Business Contacts.

 

The kind of information we hold about you

We may collect, store, and use the following categories of personal information about you:

  • contact details such as name, title, addresses, telephone numbers and email addresses;
  • identification details such as signatures and job titles to confirm your identity; and
  • CCTV footage if you visit us at our offices.

Where permitted in accordance with local law, we may also in some circumstances record telephone conversations with you.

If you provide us with additional information about you, by email or on telephone calls, we may for regulatory reasons be required to store the record. This could include, in particular, but not limited to:

  • information about your race or ethnicity, religious beliefs, sexual orientation, marital status, and political opinions; or
  • information about your health, including any medical condition.

We ask that you do not disclose any such information to us if you are uncomfortable with it being stored on our systems to comply with our regulatory obligations.

 

How is your personal information collected?

We typically collect personal information about our Business Contacts directly from them, from their employers or from other Business Contacts with whom we share a relationship. For example, our Local Authority clients will share with us the contact details for their advisers and service providers. We will collect additional personal information during our relationship as a necessary consequence of the services being provided.

 

How we will use information about you

We will only use your personal information when the law allows us to; this is known as a “legal basis” for processing.

 

Situations in which we will use your personal information

We may use your personal information to:

  • communicate with Business Contacts in relation to, or to facilitate the provision of, our services; the legal basis for this will be for performing a contract we have entered with you personally, or in furtherance of your and our legitimate interests;
  • communicate with Business Contacts to provide you with information about YES Energy Solutions and relevant events or research organised or produced by us, unless you have indicated to us that you do not wish to receive such information;
  • process identification details of certain Business Contacts to confirm their identities, which is an anti-fraud measure to comply with our legal obligations;
  • check identification details of Business Contacts against databases of individuals who are subject to sanctions, classified as “politically exposed persons”, or have committed crimes and to follow up any suspicions, to ensure that we comply with our anti-money laundering and terrorism obligations and to avoid fraud itself; and
  • meet our other compliance and regulatory duties, for example to retain certain records.
  • monitor your activity when using YES Energy Solutions information services to ensure conformance with our acceptable use policies.

We may also use your personal information in the following situations, which are likely to be rare: where we need to protect your interests (or someone else’s interests, such as a corporate client we have in common); or where it is needed in the public interest or for official purposes.

There may be overlap in the circumstances in which we use the same information about you.

 

Change of purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law or regulation.

 

Data Sharing

We may need to share your personal data with third parties, including other Business Contacts, other entities within the YES Energy Solutions group and our auditors. Where we share your personal data with another party performing services for us, we require those third parties to respect the security of your personal data and to treat it in accordance with the law.

 

Which third party service providers appointed by YES Energy Solutions will process my personal information?

We may share your contact details with our preferred partners for relevant event invitations such as conferences or award ceremonies. You may at any time inform us that you no longer wish to receive future invitations from us.

We may also need to share your personal information with a regulator or to otherwise comply with the law.

 

When might you share my personal information with other entities in the group?

We will share your personal information with other entities in our group in connection with our performance of the services or contracts we provide.

 

Data Security

We have put in place measures to protect the security of your information. Details of these measures are included in group-wide policies which cover the following:

  • management and organisation of information security;
  • classification of data which includes data handling rules;
  • staff training on responsibilities connected to information security and the reporting of any information security incidents;
  • physical and environmental security; and
  • systems security, including backups, virus protection and access controls.

Our policies and controls are based on the international standard for information security, ISO27001. We are committed to implementing, maintaining and continually improving an information security management system in accordance with that standard. Our approach supports the enhancement of information security controls and our information governance framework is overseen by our Board who are responsible for managing risk within our organisation.

 

Data Retention

How long will you use my information for?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or regulatory requirements.

You will appreciate that as a regulated business, there are record retention obligations on us. We retain your personal data to comply with these obligations.

 

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

  • Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
  • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to stop processing personal information where we are relying on a legitimate interest and there is something about your situation which makes you want to object to processing on this ground.
  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
  • Request the transfer of your personal information to another party.

You can exercise these rights by contacting your usual YES Energy Solutions relationship contact.

 

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).

 

Right to withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact your usual YES Energy Solutions relationship contact in writing.

Once we have received notification you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

 

Find out more about how we process your data

If you have any questions about this privacy notice or how we handle your personal information, or if you are unhappy with how we handle your personal information, please contact your usual YES Energy Solutions relationship contact. If we do not resolve your concerns to your satisfaction, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

 

Changes to this Privacy Notice

We may update this privacy notice from time to time and will communicate such updates through our website. We will not do so where we believe this would materially impact your rights and freedoms: in those circumstances we will expressly notify you. We may also notify you in other ways from time to time about the processing of your personal information.

If you have any questions about this privacy notice, please contact your usual YES Energy Solutions relationship contact, who will be happy to assist you.

Candidates

Introduction

As a “data controller”, YES is committed to protecting the privacy and security of your personal information. This Privacy Notice describes how we collect and use personal information for the purpose of recruitment, and how long it will usually be retained for, in accordance with all applicable personal data protection laws and regulations.

If your application to work for us is successful, we will hold additional information about you as your employer in accordance with our Employee Privacy Notice, which will be provided at the relevant stage.

 

Application

The notice applies to all employment candidates and does not form part of any contract of employment or other contract to provide services. It may be updated at any time, if it is, we will let you know.

 

Approach

YES is a “data controller”. This means we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

It is important you read this notice, together with any other privacy notice provided by 3rd parties we work with as part of our recruitment process who collect or process personal information about you, so you are aware of how and why this information is used.

 

Data protection principles

We will comply with data protection law, which says personal information we hold about you must be:

  • Used lawfully, fairly and in a transparent way.
  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
  • Relevant to the purposes we have told you about and limited only to those purposes.
  • Accurate and kept up to date.
  • Kept only as long as necessary for the purposes we have told you about.
  • Kept securely.

 

The kind of information we hold about you

We need to use your personal information to decide whether to enter into a contract of employment with you. In connection with your application for work with us, we may collect, store, and use the following categories of personal information about you:

  • The information you have provided to us in your CV and covering letter
  • The information you have provided on our application form, including name, title, address, telephone number, personal email address, date of birth, gender, nationality, employment history, education, and qualifications
  • Any information you provide to us during an interview or through pre-recruitment testing
  • Your bank account details (if these are necessary to reimburse reasonable travel expenses)

If your application progresses through the recruitment process, we will also collect, store, and use:

  • Information about criminal convictions and offences (see section below)
  • Information contained in references from previous employers
  • Copies of right to work documentation and other immigration data

We may also collect, store and use the following “special categories” of more sensitive personal information:

  • Information about your race or ethnicity, in order to ensure meaningful equal opportunity monitoring and reporting (carried out on an anonymised basis). If you do not want to disclose this information you can select the option ‘prefer not to say’ or choose to skip the question
  • Information about your disability status if it is relevant to making appropriate adjustments to the recruitment process

 

How is your personal data collected?

We typically collect personal information about potential employees either directly from candidates or sometimes from an employment agency or background check provider. We will sometimes collect additional information from third parties including former employers, credit reference agencies or other background check agencies, including:

  • United Kingdom Security Vetting (UKSV)
  • Disclosure Barring Service (DBS)

 

How we will use information about you

We will use the personal information we collect about you to:

  • Assess your skills, qualifications and suitability for the role
  • For speculative applications, to match you to appropriate vacancies
  • Carry out background and reference checks, where applicable
  • Communicate with you about the recruitment process
  • Keep records relating to our hiring processes (including equal opportunity monitoring and reporting)
  • Comply with legal or regulatory requirements

If you fail to provide particular information which is necessary for us to consider your application, then we will not be able to process your application.

 

Information about criminal convictions

During the recruitment process, we may outsource our vetting process (including checking criminal records) to a third-party provider and, in this case, you will be asked to input your personal information to their portal. As an organisation operating in a highly regulated sector, YES needs a high degree of trust and confidence in all of our employees. This means that, as part of our pre-employment screening process, we carry out criminal record checks on individuals depending on the role requirements when joining the company. For regulated roles, these checks may be repeated during employment as required.

Unless relevant to the ongoing employment, data on criminal records will be deleted as soon as possible following recruitment or the decision not to recruit. Failure to provide the necessary information will preclude you from being eligible for a role with YES.

 

Data Sharing

We do not share your data with 3rd parties at the recruitment stage, once an offer of employment has been made and accepted, our employee privacy notice will be provided which will notify you who your data will be shared with as part of your employment.

 

Data Security

Preserving the security of your information is essential to ensure we meet legal, regulatory, and your own expectations, whilst maintaining high levels of confidence and trust. To support these objectives, YES has in place companywide policies and procedures covering information security to protect information and preserve the confidentiality, integrity and availability of the personal information we hold.

 

Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for. If your application is unsuccessful, we will retain your personal information for a period of 12 months from the closing date of the vacancy. If you have made a speculative application, this data will be held for 12 months.

 

Automated decision making

Automated decision-making takes place when an electronic system uses personal information to decide without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

 

Your rights in connection with your personal information

Under certain circumstances, by law you have the right to:

  • Request access to your personal information
  • Request correction of the personal information that we hold about you if it is inaccurate
  • Request erasure of your personal information if there is no good reason for us continuing to process it
  • Ask us to stop processing personal information (where we are relying on a legitimate interest) if you wish to object to processing on this ground
  • Request the restriction of processing of your personal information
  • Request the transfer of your personal information to another party

For questions about this Privacy Notice, or if you have further questions about how we process your personal information, or to exercise one of the rights described above, please direct your email here.

If you are unhappy with our response, you can make a complaint about how we are holding or processing your personal information to the Information Commissioner’s Office (ICO), www.ico.org.uk.

 

Changes to this privacy notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We will also notify you in other ways from time to time about the processing of your personal information.

Customer

Overview

YES Energy Solutions takes the privacy of its customers very seriously. As an organisation we instruct all employees and partners who handle your information to treat it with the same respect we would when dealing with you in person, when we deliver services to you. We comply fully with all Data Protection Laws, including the UK General Data Protection Regulation and Data Protection Act 2018.

 

Contact us about your data

To contact us about the data we hold about you, call our customer service team on 01422 880 100, contact us via the contact form on our website (www.yesenergysolutions.co.uk), email us at dataprotection@yesenergysolutions.co.uk, or write to us at:

Data Protection Manager
YES Energy Solutions
Unit 8-9, Victoria Mills, Stainland Road
Greetland HX4 8AD

 

How do we receive your data?

We work with a wide variety of organisations, like Local Authorities, Charities and Housing Associations with the goals of reducing carbon emissions and alleviating fuel poverty. For us to provide our services to you, we will need to process some of your personal data. This data can be provided to us in two ways.

Direct – We have received your data directly from you. This could be by submitting a contact form on our website, via our social media channels or phone in response to Marketing you have seen.

In-direct – Your information has been shared with us by a 3rd party. This could be your local authority, a charity, your support network, your landlord or even a friend or family member.

 

What data do we hold about you?

We may hold different data dependent on you depending on which of our two main types of customer you are. Generally, we will process the following categories of data about you.

Customer type Description Data
Able to pay You are not eligible for financial support for the services we provide to you. Contact information like your name, address, and phone number
Funded You are eligible for financial assistance with the funding of services we provide to you. Contact information like your name address and phone number. Eligibility information which may contain sensitive data like your financial or health status.

For detailed information about how we process your data, if you are actively receiving one of our services, please see our scheme information page Schemes & Partners | YES Energy Solutions. Each scheme has specific privacy information and the link provides more detail than this general notice.

When we receive your information from a source other than you, we will provide you with information about who gave us your data and for what purpose.

 

What do we do with your data?

We use your data to provide services to you which you have asked for, or a 3rd party partner we work with, believes you will benefit from. We will never sell your data or share it with a 3rd party unless there is a lawful basis to do and it is in your interest to do so. For example, we may identify through the course of providing your service you would benefit from additional support from one of our partners.

 

Where is your data?

YES Energy Solutions uses digital systems to process customer data. We do not process or transfer your data outside the EU. Where we have a need to process physical copies of your data, those copies are digitised and then secured within our IT systems. Original documents will be returned to you or securely destroyed depending on your instruction.

 

It’s your data, so what are your rights?

You have several rights related to the processing of your personal data. You can find out more about your rights in detail at the UK Information Commissioners Office (ICO) website https://ico.org.uk/for-the-public/. In summary, you have the right to know we are processing your data and for what purposes. You can ask us what data we hold about you and how it is being used. If any of your information is incorrect you can ask for it to be rectified and in some circumstances you have the right to have your information deleted which is also known as a the right to be forgotten. You can restrict how we use your data in certain circumstances and you can object about how we process your data, for example where you have previously agreed to allow us to use it for marketing purposes. Where we have used an automated process to decide on your access to our services, you can ask for person to review the decision.

 

Who do we share your information with?

Like many businesses, YES Energy Solutions uses a variety of 3rd party organisations to assist with running our business and sometimes to provide special expertise when providing services to you, or our other customers. The categories of company we work with are: Financial Auditors; Certification providers; specialist consultancies; IT service providers; and business partners who are aligned to the services we provide to you.

 

Cookies and similar technologies

Cookies and similar technologies
We use cookies and similar technologies on our website to improve your experience, analyse traffic, and support marketing activities. For detailed information about the types of cookies we use, the purposes they serve, and how you can manage your preferences, please see our cookie notice below.
How do you complain about our use of your data?

In the first instance you should contact us and ask to speak to our Data Protection Team. We will resolve your complaint as quickly as possible and to your satisfaction. However, in the rare case we have not been successful in resolving your complaint, you can make a complaint to the Information Commissioners Office. You can do this via their website https://ico.org.uk/make-a-complaint/ or calling their helpline on 0303 123 1113.

Thank you for taking the time to read this privacy notice.

Notice updated: 11/09/2025

Cookies

Yes Energy Solutions – Cookie Notice

Last updated: 11 November 2025

 

1) How we use cookies

Our website uses small files called cookies and similar technologies to make the site work, understand how it’s used, and show relevant messages on other websites. Some cookies are essential and always on. Others are optional and only set if you accept them in our cookie banner or manage your settings.

You can change your choices at any time via “Cookie settings” in the site footer. You can also block cookies in your browser, but parts of the site may not work properly if you do.

 

2) Who is responsible for your data?

· Controller: Yes Energy Solutions CIC t/a YES Energy Solutions

· Purpose: Operating our website, measuring performance, and running marketing campaigns.

· Legal bases:

o Strictly necessary cookies: our legitimate interests in delivering a secure, functional website.

o Analytics & marketing cookies: your consent.

· Contact: dpo

For more on how we handle personal data, see our Privacy Notice above.

 

3) Your choices

· Accept all optional cookies (Analytics + Marketing)

· Reject non-essential cookies (only Strictly Necessary will run)

· Manage settings (choose per category)

You can withdraw consent at any time using Cookie settings in the footer. You can also clear cookies in your browser and use tools such as Do Not Track or Global Privacy Control (where available).

 

4) Cookie categories we use

A. Strictly Necessary (always on)

These keep the site secure and working (for example, security tokens and session management). They do not require your consent.

· SM (Microsoft Clarity) – Maintains internal routing during your visit (session).

· ANONCHK (Microsoft/Bing) – Verifies ad-clicks during a session to keep reports accurate; helps enforce your ad-personalisation choices (10 minutes).

Note: We do not use these for advertising; they are required for site and campaign integrity.


B. Analytics (requires consent)

These help us understand how people use our site so we can improve it. We use this data in aggregate and do not identify you directly.

· _ga (Google Analytics) – Sets an ID to distinguish users (1 year).

· _ga_2MPMRK1ZRV (Google Analytics) – Persists session-level analytics for this property (1 year).

· _clck (Microsoft Clarity) – Stores a unique ID to maintain Clarity insights across pages (1 year).

· _clsk (Microsoft Clarity) – Connects page views into a single session (24 hours).

· CLID (Microsoft Clarity) – Records first-time Clarity visit information (1 year).

 

C. Marketing (requires consent)

These help us show relevant ads on other websites and measure campaign performance.

· _gcl_au (Google/AdSense) – Stores ad-click info to measure conversions (3 months).

· test_cookie (DoubleClick/Google) – Checks whether your browser accepts cookies (15 minutes).

· _fbp (Meta/Facebook) – Enables ad delivery and remarketing (3 months).

· MUID (.bing.com / Microsoft) – Unique browser ID used for ads and analytics (1 year).

· MR (.c.bing.com / Microsoft) – Short-term cookie used for analytics and ad performance (7 days).

· SRM_B (.c.bing.com / Microsoft) – User/device-level information for ad delivery (1 year).

These services may process data outside the UK/EEA under appropriate safeguards (e.g., SCCs). You can opt out by rejecting Marketing cookies at any time.

 

5) Detailed cookie list (detected on our site)

Name Provider / Domain Category Purpose Expires

SM Microsoft Clarity (.c.clarity.ms) Strictly necessary Keeps Clarity working during your visit (routing and performance). Session

ANONCHK Microsoft/Bing (.c.clarity.ms) Strictly necessary Verifies ad clicks for reporting; respects ad-personalisation choices. 10 minutes

_ga Google Analytics (.yesenergysolutions.co.uk) Analytics Tells us if two visits come from the same browser. 1 year

_ga_2MPMR

K1ZRV Google Analytics (.yesenergysolutions.co.uk) Analytics Stores state for this GA property to measure visits and pages. 1 year

_clck Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Remembers a unique ID so we can see how the site is used over time. 1 year

_clsk Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Groups page views into a single session for reporting. 24 hours

CLID Microsoft Clarity (www.clarity.ms) Analytics Notes that your browser visited our site to enable heatmaps and session insights. 1 year

_gcl_au Google/AdSense (.yesenergysolutions.co.uk) Marketing Stores ad-click info to help us 3 months

measure conversions.

test_cookie DoubleClick/Google (.doubleclick.net) Marketing Checks if your browser supports cookies. 15 minutes

_fbp Meta/Facebook (.yesenergysolutions.co.uk) Marketing Helps deliver ads and measure their performance. 3 months

MUID Microsoft/Bing (.bing.com) Marketing Unique ID for ads and analytics across Microsoft sites. 1 year

MR Microsoft/Bing (.c.bing.com) Marketing Short-term analytics and ad performance cookie. 7 days

SRM_B Microsoft/Bing (.c.bing.com) Marketing Stores user/device info to help serve relevant ads. 1 year

 

6) Third-party cookies and transfers

Some cookies belong to third parties (Google, Microsoft, Meta). These partners may process limited personal data (e.g., online identifiers, IP address, device data) to provide analytics and advertising services. Where data is sent outside the UK/EEA, appropriate safeguards (such as Standard Contractual Clauses) are used by those providers. You can limit this by rejecting the relevant categories.

 

7) Keeping this notice up to date

We review our cookie list regularly and update this page when our cookies change or when we run new campaigns that add cookies. The cookie banner will always reflect the current set of cookies in use.

 

8) Manage your settings

· Cookie settings (footer) – change or withdraw consent

· Browser controls – block or delete cookies

· Advertising opt-outs – Google Ads Settings; Meta Ad Preferences; Microsoft Advertising opt-out

Useful information

Optional banner wording (for your consent tool)

Cookies on this site We use essential cookies to make our site work. We’d also like to use analytics cookies to understand how you use the site and marketing cookies to help us show relevant messages. You can accept all, reject non-essential, or manage your choices. [Accept all] [Reject non-essential] [Manage settings]

Implementation notes for your web team (non-public)

· Categories & default state:

o Strictly necessary: on (no toggle)

o Analytics: off by default (requires opt-in)

o Marketing: off by default (requires opt-in)

· Geography: Apply the same consent model for UK/EEA visitors.

· Granular control: Ensure “Manage settings” allows per-category consent.

· Respect withdrawal: On consent withdrawal, remove existing non-essential cookies and stop setting new ones (e.g., block GA/Clarity/Ads tags).

· Records: Keep a consent log (timestamp, categories accepted, banner version).

· Scan cadence: Re-scan quarterly and after major site changes; update this notice and the banner configuration accordingly.

East Midlands

Greater London

Yorkshire & Humber

Ongo Homes – Privacy NoticeSuffolk WHLG Privacy Notice YES the Processor

North Yorkshire Council WH SHF- Privacy Notice YES the Processor

North Yorkshire Council WHLG – Privacy Notice YES the Processor