Privacy

Summary

YES Energy Solutions is committed to protecting the privacy and security of personal information entrusted to us.

This privacy notice is for individuals connected with, or employed by, business clients, consultants, and other professional third parties, such as suppliers and service providers with whom YES Energy Solutions has a business relationship.

We refer to such individuals in this notice as our “Business Contacts”.

This privacy notice describes how we, as a “Data Controller”, collect and use personal information about you during and after your relationship with us, in accordance with Data Protection Laws like General Data Protection Regulations (GDPR), the Data Protection Act 2018 and Privacy and Electronic Communications Regulations (PECR). It only applies to the processing of personal data of our Business Contacts.

The kind of information we hold about you

We may collect, store, and use the following categories of personal information about you:

• contact details such as name, title, addresses, telephone numbers and email addresses;
• identification details such as signatures and job titles to confirm your identity; and
• CCTV footage if you visit us at our offices.

Where permitted in accordance with local law, we may also in some circumstances record telephone conversations with you.

If you provide us with additional information about you, by email or on telephone calls, we may for regulatory reasons be required to store the record. This could include, in particular, but not limited to:

• information about your race or ethnicity, religious beliefs, sexual orientation, marital status, and political opinions; or
• information about your health, including any medical condition.

We ask that you do not disclose any such information to us if you are uncomfortable with it being stored on our systems to comply with our regulatory obligations.

How is your personal information collected?

We typically collect personal information about our Business Contacts directly from them, from their employers or from other Business Contacts with whom we share a relationship. For example, our Local Authority clients will share with us the contact details for their advisers and service providers. We will collect additional personal information during our relationship as a necessary consequence of the services being provided.

How we will use information about you

We will only use your personal information when the law allows us to; this is known as a “legal basis” for processing.

Situations in which we will use your personal information

We may use your personal information to:

• communicate with Business Contacts in relation to, or to facilitate the provision of, our services; the legal basis for this will be for performing a contract we have entered with you personally, or in furtherance of your and our legitimate interests;
• communicate with Business Contacts to provide you with information about YES Energy Solutions and relevant events or research organised or produced by us, unless you have indicated to us that you do not wish to receive such information;
• process identification details of certain Business Contacts to confirm their identities, which is an anti-fraud measure to comply with our legal obligations;
• check identification details of Business Contacts against databases of individuals who are subject to sanctions, classified as “politically exposed persons”, or have committed crimes and to follow up any suspicions, to ensure that we comply with our anti-money laundering and terrorism obligations and to avoid fraud itself; and
• meet our other compliance and regulatory duties, for example to retain certain records.
• monitor your activity when using YES Energy Solutions information services to ensure conformance with our acceptable use policies.

We may also use your personal information in the following situations, which are likely to be rare: where we need to protect your interests (or someone else’s interests, such as a corporate client we have in common); or where it is needed in the public interest or for official purposes.

There may be overlap in the circumstances in which we use the same information about you.

Change of purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law or regulation.

Data Sharing

We may need to share your personal data with third parties, including other Business Contacts, other entities within the YES Energy Solutions group and our auditors. Where we share your personal data with another party performing services for us, we require those third parties to respect the security of your personal data and to treat it in accordance with the law.

Which third party service providers appointed by YES Energy Solutions will process my personal information?

We may share your contact details with our preferred partners for relevant event invitations such as conferences or award ceremonies. You may at any time inform us that you no longer wish to receive future invitations from us.

We may also need to share your personal information with a regulator or to otherwise comply with the law.

When might you share my personal information with other entities in the group?

We will share your personal information with other entities in our group in connection with our performance of the services or contracts we provide.

Data Security

We have put in place measures to protect the security of your information. Details of these measures are included in group-wide policies which cover the following:

• management and organisation of information security;
• classification of data which includes data handling rules;
• staff training on responsibilities connected to information security and the reporting of any information security incidents;
• physical and environmental security; and
• systems security, including backups, virus protection and access controls.

Our policies and controls are based on the international standard for information security, ISO27001. We are committed to implementing, maintaining and continually improving an information security management system in accordance with that standard. Our approach supports the enhancement of information security controls and our information governance framework is overseen by our Board who are responsible for managing risk within our organisation.

Data Retention

How long will you use my information for?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or regulatory requirements.

You will appreciate that as a regulated business, there are record retention obligations on us. We retain your personal data to comply with these obligations.

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

• Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to stop processing personal information where we are relying on a legitimate interest and there is something about your situation which makes you want to object to processing on this ground.
• Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transfer of your personal information to another party.

You can exercise these rights by contacting your usual YES Energy Solutions relationship contact.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights).

Right to withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact your usual YES Energy Solutions relationship contact in writing.

Once we have received notification you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

Find out more about how we process your data

If you have any questions about this privacy notice or how we handle your personal information, or if you are unhappy with how we handle your personal information, please contact your usual YES Energy Solutions relationship contact. If we do not resolve your concerns to your satisfaction, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.

Changes to this Privacy Notice

We may update this privacy notice from time to time and will communicate such updates through our website. We will not do so where we believe this would materially impact your rights and freedoms: in those circumstances we will expressly notify you. We may also notify you in other ways from time to time about the processing of your personal information.

If you have any questions about this privacy notice, please contact your usual YES Energy Solutions relationship contact, who will be happy to assist you.

Introduction

As a “data controller”, YES is committed to protecting the privacy and security of your personal information. This Privacy Notice describes how we collect and use personal information for the purpose of recruitment, and how long it will usually be retained for, in accordance with all applicable personal data protection laws and regulations.

If your application to work for us is successful, we will hold additional information about you as your employer in accordance with our Employee Privacy Notice, which will be provided at the relevant stage.

Application

The notice applies to all employment candidates and does not form part of any contract of employment or other contract to provide services. It may be updated at any time, if it is, we will let you know.

Approach

YES is a “data controller”. This means we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice.

It is important you read this notice, together with any other privacy notice provided by 3rd parties we work with as part of our recruitment process who collect or process personal information about you, so you are aware of how and why this information is used.

Data protection principles

We will comply with data protection law, which says personal information we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited only to those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

The kind of information we hold about you

We need to use your personal information to decide whether to enter into a contract of employment with you. In connection with your application for work with us, we may collect, store, and use the following categories of personal information about you:

• The information you have provided to us in your CV and covering letter
• The information you have provided on our application form, including name, title, address, telephone number, personal email address, date of birth, gender, nationality, employment history, education, and qualifications
• Any information you provide to us during an interview or through pre-recruitment testing
• Your bank account details (if these are necessary to reimburse reasonable travel expenses)

If your application progresses through the recruitment process, we will also collect, store, and use:

• Information about criminal convictions and offences (see section below)
• Information contained in references from previous employers
• Copies of right to work documentation and other immigration data

We may also collect, store and use the following “special categories” of more sensitive personal information:

• Information about your race or ethnicity, in order to ensure meaningful equal opportunity monitoring and reporting (carried out on an anonymised basis). If you do not want to disclose this information you can select the option ‘prefer not to say’ or choose to skip the question
• Information about your disability status if it is relevant to making appropriate adjustments to the recruitment process

How is your personal data collected?

We typically collect personal information about potential employees either directly from candidates or sometimes from an employment agency or background check provider. We will sometimes collect additional information from third parties including former employers, credit reference agencies or other background check agencies, including:

• United Kingdom Security Vetting (UKSV)
• Disclosure Barring Service (DBS)

How we will use information about you

We will use the personal information we collect about you to:

• Assess your skills, qualifications and suitability for the role
• For speculative applications, to match you to appropriate vacancies
• Carry out background and reference checks, where applicable
• Communicate with you about the recruitment process
• Keep records relating to our hiring processes (including equal opportunity monitoring and reporting)
• Comply with legal or regulatory requirements

If you fail to provide particular information which is necessary for us to consider your application, then we will not be able to process your application.

Information about criminal convictions

During the recruitment process, we may outsource our vetting process (including checking criminal records) to a third-party provider and, in this case, you will be asked to input your personal information to their portal. As an organisation operating in a highly regulated sector, YES needs a high degree of trust and confidence in all of our employees. This means that, as part of our pre-employment screening process, we carry out criminal record checks on individuals depending on the role requirements when joining the company. For regulated roles, these checks may be repeated during employment as required.

Unless relevant to the ongoing employment, data on criminal records will be deleted as soon as possible following recruitment or the decision not to recruit. Failure to provide the necessary information will preclude you from being eligible for a role with YES.

Data Sharing

We do not share your data with 3rd parties at the recruitment stage, once an offer of employment has been made and accepted, our employee privacy notice will be provided which will notify you who your data will be shared with as part of your employment.

Data Security

Preserving the security of your information is essential to ensure we meet legal, regulatory, and your own expectations, whilst maintaining high levels of confidence and trust. To support these objectives, YES has in place companywide policies and procedures covering information security to protect information and preserve the confidentiality, integrity and availability of the personal information we hold.

Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for. If your application is unsuccessful, we will retain your personal information for a period of 12 months from the closing date of the vacancy. If you have made a speculative application, this data will be held for 12 months.

Automated decision making

Automated decision-making takes place when an electronic system uses personal information to decide without human intervention. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

Your rights in connection with your personal information

Under certain circumstances, by law you have the right to:

• Request access to your personal information
• Request correction of the personal information that we hold about you if it is inaccurate
• Request erasure of your personal information if there is no good reason for us continuing to process it
• Ask us to stop processing personal information (where we are relying on a legitimate interest) if you wish to object to processing on this ground
• Request the restriction of processing of your personal information
• Request the transfer of your personal information to another party

For questions about this Privacy Notice, or if you have further questions about how we process your personal information, or to exercise one of the rights described above, please direct your email here.

If you are unhappy with our response, you can make a complaint about how we are holding or processing your personal information to the Information Commissioner’s Office (ICO), www.ico.org.uk.

Changes to this privacy notice

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We will also notify you in other ways from time to time about the processing of your personal information.

Controller privacy notice

Last updated: August 2026

Overview

YES Energy Solutions takes the privacy of its customers very seriously. This privacy notice provides you with information about how Yorkshire Energy Services CIC (herein referred to as YES Energy Solutions, ‘We’ or ‘Us’) collect, process and take care of your personal information.

Who we are

As a community interest company, we are committed to helping low-income households, customers in a vulnerable situation, and those with high bills live more comfortably. Our fully funded solutions make a lasting impact, ensuring warmer homes and lower costs for those who need it most.

We are registered in England and Wales under company number 03995784 and have our registered office at Units 8-9, Victoria Mills Stainland Road, Greetland, Halifax, West Yorkshire, England, HX4 8AD.

We are also registered as an information protection fee payer with the Information Commissioner’s Office. Our registration reference number is Z495697X.

How to contact us

If you have any questions about this notice or how we collect, use, store, share or otherwise process your personal information, please call our customer service team on 01422 880 100, contact us via the contact form on our website (www.yesenergysolutions.co.uk), email us at dataprotection@yesenergysolutions.co.uk, or write to us at:

Data Protection manager
YES Energy Solutions
Unit 8-9, Victoria Mills, Stainland Road
Greetland HX4 8AD

What this privacy notice covers

This privacy notice covers the processing of personal information where YES Energy Solutions acts as the data controller of customer personal information. We act as the data controller when YES Energy Solutions exercises overall control of the personal information processed – in other words, why and how personal information is collected, stored, used and shared.

This privacy notice does not apply to data we process as the data processor – in other words, personal data we process on behalf of another organisation. It also does not apply to our employees, candidates or business contacts.

For more information on how your personal information is processed when third parties, such as local authorities, charities, housing associations, partners or suppliers are acting as the data processor, please refer to their privacy notices.

How do we collect your data?

We work with a wide variety of organisations, like local authorities, charities and housing associations with the goals of reducing carbon emissions and alleviating fuel poverty. This means for us to provide our services to you; we will sometimes need to collect your personal data indirectly.

Depending on our relationship with you, your personal data can be provided to us in two ways:

• direct: we may receive your data directly from you. This could be by submitting a contact form on our website, contacting us by email our social media channels or when you provide information to us on the phone.
• in-direct: your information may be shared with us by a third party. This could be your local authority, a charity, build association, your landlord, contractor or your support network, such as a friend or family member, as well as other partners we work with such as Distribution Network Operator (DNO), government departments and regulators. We could also collect your personal data from government portals, land registry UK or other publicly available sources of information.

Where personal data can be collected indirectly about you, we have noted this below.

What personal information do we process about you?

Depending on the circumstances we interact with you, we may process the following personal information:

• identity and contact information: Such as your name, date of birth, gender, salutation, pronoun, email address, phone number and home address.
• eligibility information: Such as whether you are eligible for financial assistance with the funding of the services we offer. Depending on the service we are providing, this may include evidence of your home ownership, copies of bills, receipt of any benefits being received, and/or evidence of income, such as bank statements. Please note that some schemes may contain sensitive data, including health information.
• health information: Such as your health-related information relevant to eligibility criteria, housing conditions, mobility limitations, disability, or medical needs, as well as reports from healthcare professionals when relevant to the services we provide.
• housing information: Such as evidence of home ownership, utility requirements, whether you live in council housing, and pictures of your home.
• energy usage information: Such as copies of energy bills and details about energy debt, serial numbers for energy meters, energy usage, how many people live in your household (including children), appliance usage in your home and any other information we need to provide our services to you.
• bank account details
• communications information: Such as records of interactions you have with us, including messages, emails, meetings notes and call transcripts.
• service and works records: Such as including property characteristics and measure records, installation evidence (including photos and guarantees where applicable), completion records, audit findings and compliance evidence, certificates, checklists, maintenance and repair logs, technician / installer notes and service summaries, dates, locations and scope of work performed, Statements of Intent and declarations where relevant, and any other supporting documentation.
• concerns we may have about your safety or wellbeing or the wellbeing of our contractors
• device and technical information: Such as your IP address, browser type, device ID, language preferences, browsing behaviour, cookie preferences, and location.
• behavioural and performance information: Such as clicks, scrolls, mouse movements, form inputs and metadata like session ID, user device/browser, performance data and geolocation (certain data, such as contact information entered on website forms, is automatically masked).
• feedback or complaints information: Any feedback or other information provided to us about our services.
• marketing information: such as whether you consent or have opted out from direct marketing communications from us.
• any other information you choose to provide to us, including information about other vulnerabilities, your income or your living situation.

We may collect the following information indirectly:

• identity, contact and eligibility information from third parties we partner with, such as your local authority, a charity, building association, your landlord, contractor or support network
• housing information from third parties we partner with or contract to carry on work on our behalf
• identity, contact, eligibility and housing information from publicly available sources including Land Registry UK
• device and technical information collected automatically when you visit our website

How do we process your personal information?

The below table describes the purposes we may process your personal information and our lawful basis for doing so.

We may also process your personal data to fulfil our legal obligations and establish, exercise and defend against legal claims.

Sometimes, you will be required by law or under contract to provide personal data to us. For example, we may not be able to provide you with a service, unless you provide evidence of meeting certain eligibility criteria required by the scheme, or other information we need to provide the service (for example, information on your energy usage).

When we receive your information from a source other than you, we will provide you with information about who gave us your data and for what purpose.

What do we do with your data?

We use your data to provide services to you which you have asked for, or a 3rd party partner we work with, believes you will benefit from. We will never sell your data or share it with a 3rd party unless there is a lawful basis to do and it is in your interest to do so. For example, we may identify through the course of providing your service you would benefit from additional support from one of our partners.

Cookies and similar technologies

We use cookies and similar technologies on our website to improve your experience, analyse traffic, and support marketing activities.

For detailed information about the types of cookies we use, the purposes they serve, and how you can manage your preferences, please see our cookie notice.

Recording of calls

We record all inbound and outbound telephone calls made through our telephone system. Calls are recorded automatically when they are first connected. Once a call has been transferred to a human member of staff, call recording can be disabled or re‑enabled at your request.

We process call recordings for the following purposes:

• Training and development: to support staff learning and improve the quality and consistency of our service.
• Quality assurance: to monitor interactions, maintain standards, and identify areas for improvement.
• Audit and compliance: to help us meet our regulatory or contractual obligations and evidence the accuracy of information provided.
• Dispute resolution: to investigate and respond to complaints, queries, or concerns raised by callers or staff.

Call recordings are stored securely and accessed only by authorised personnel.

As described above, we record calls for our legitimate interests, namely for quality assurance, training, audit and compliance, and dispute resolution purposes.

We will ask for your explicit consent to record special category data, including health data, during our call. If you wish to discuss matters relating to sensitive data, such as your health, please let us know and we will stop the recording.

Analysis of calls using AI and machine learning

At the end of our call with you, we will ask you whether you object to us processing our call using AI. This means you can tell us you would not like your call to be processed using AI.

We will also ensure your call with us is not processed by AI if you disclose any ‘special category data’ with us over the call, for example about your health.

If you do not object, we will use machine learning to automatically identify and remove sensitive information from audio recordings and transcripts, before it is analysed by AI against our predefined quality assurance (QA) criteria. This is so we can use the analysis to provide improved coaching and support for frontline staff, an enhanced customer experience and greater fairness and consistency in AQ evaluations.

We keep call recordings for six months.

If you have any questions or concerns about how we record calls or use AI, please contact us.

Profiling by cookies on our website

We may use cookies and similar technologies to track performance, build audience awareness and collect information about your browsing behaviour over time. This data may be used to build a profile of your interests and infer characteristics about your identity, to personalise your experience and improve our services.

AI and profiling

We do not use AI in a way which has legal or similarly significant effects. However, we currently do use profiling to help assess which services you may be eligible for. This means we may use your personal information to better understand what services you may need and be eligible for. We may do this for current customers and for individuals that have previously had communications with us.

We do so based on our legitimate interests (to ensure services are appropriately targeted so support is direct to those most in need and identify eligibility for schemes and funding). We may use your eligibility, housing and energy usage data to do this. Where any of this information contains special category data, including health information, we will only do so based on your explicit consent.

Who do we share your personal information with?

Like many businesses, YES Energy Solutions uses a variety of third-party organisations to assist with running our business and sometimes to provide special expertise when providing services to you, or our other customers.

The categories of third parties we may share your personal data with include:

We may also share your personal data with businesses that process personal data on our behalf (‘processors’ and ‘subprocessors’), such as cloud storage providers and website hosting software, as well as consultancies that support the analysis of calls, etc. In this instance, we remain the controller of your personal data and are required to have a contract (called a data processing agreement) in place.

Where is your data stored?

YES Energy Solutions uses digital systems to process customer data. We do not process or transfer your data outside the UK and EEA. Where we have a need to process physical copies of your data, those copies are digitised and then secured within our IT systems. Original documents will be returned to you or securely destroyed depending on your instruction.

How long do we keep your personal information for?

We only ever keep your personal information for as long as we have a legitimate business reason to retain it. When we no longer have a business reason to keep your information, we securely delete it.

To determine the appropriate retention period, we consider:

• the amount, nature and sensitivity of the personal data,
• the potential risk of harm from unauthorised use or disclosure of your personal data,
• the purposes for which we may process your personal data and
• the applicable legal, regulatory, tax, accounting or other requirements.

How do we keep your personal information secure?

It is really important to us to keep your personal information safe and secure. We have implemented appropriate technical and organisational measures to help safeguard your personal information and help prevent unauthorised access to your personal information, including:

• management and organisation of information security;
• classification of data which includes data handling rules;
• staff training on responsibilities connected to information security and the reporting of any information security incidents;
• physical and environmental security; and
• systems security, including backups, virus protection and access controls.

Our policies and controls are based on the international standard for information security, ISO27001 and are certified to meet the requirements of the UK government-backed Cyber Essentials scheme. We are committed to implementing, maintaining and continually improving an information security management system in accordance with those standards.

Our approach supports the enhancement of information security controls and our information governance framework is overseen by our Board who are responsible for managing risk within our organisation.

For more information on how we keep your personal information secure, please contact us.

It is your data, so what are your rights?

You have certain rights protected by law over how your personal information is processed (subject to certain exceptions):

• right to access: you have the right to ask us if we process your personal information and for copies of your personal information
• right to be informed: you have the right to be informed about how we process your personal information
• right to rectification: you have the right to ask us to correct personal information you think it inaccurate
• right to erasure: you have the right to ask us to delete your personal information in certain circumstances
• right to restrict processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances
• right to information portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances
• right to withdraw consent: you have the right to withdraw your consent at any time.

To exercise any of your rights in respect to the personal information we process, please contact us and we will respond to you as soon as we can (usually, within one calendar month).

Right to object

You have the right to object to the processing of your personal information in certain circumstances. Please note that you have an absolute right to object to any direct marketing you receive from us.

Complaints or queries

Please contact us if you have any complaints or queries about how your personal information is processed, using the contact details set out in this Privacy Notice.

In line with ICO guidance, we will acknowledge receipt of your complaint within 30 days and make enquiries into the complaint without undue delay.

You have the right to raise a complaint with the supervisory authority in the jurisdiction you live, work or where the infringement took place. In the UK, this is the Information Commissioner’s Office. You can do this via their website https://ico.org.uk/make-a-complaint/ or calling their helpline on 0303 123 1113.

If you do have a query or a complaint, we would really appreciate the opportunity to respond to your concern in the first instance so please contact us.

Yes Energy Solutions – Cookie Notice

Last updated: 11 November 2025

1) How we use cookies

Our website uses small files called cookies and similar technologies to make the site work, understand how it’s used, and show relevant messages on other websites. Some cookies are essential and always on. Others are optional and only set if you accept them in our cookie banner or manage your settings.

You can change your choices at any time via “Cookie settings” in the site footer. You can also block cookies in your browser, but parts of the site may not work properly if you do.

2) Who is responsible for your data?

· Controller: Yes Energy Solutions CIC t/a YES Energy Solutions

· Purpose: Operating our website, measuring performance, and running marketing campaigns.

· Legal bases:

o Strictly necessary cookies: our legitimate interests in delivering a secure, functional website.

o Analytics & marketing cookies: your consent.

· Contact: dpo

For more on how we handle personal data, see our Privacy Notice above.

3) Your choices

· Accept all optional cookies (Analytics + Marketing)

· Reject non-essential cookies (only Strictly Necessary will run)

· Manage settings (choose per category)

You can withdraw consent at any time using Cookie settings in the footer. You can also clear cookies in your browser and use tools such as Do Not Track or Global Privacy Control (where available).

4) Cookie categories we use

A. Strictly Necessary (always on)

These keep the site secure and working (for example, security tokens and session management). They do not require your consent.

· SM (Microsoft Clarity) – Maintains internal routing during your visit (session).

· ANONCHK (Microsoft/Bing) – Verifies ad-clicks during a session to keep reports accurate; helps enforce your ad-personalisation choices (10 minutes).

Note: We do not use these for advertising; they are required for site and campaign integrity.

B. Analytics (requires consent)

These help us understand how people use our site so we can improve it. We use this data in aggregate and do not identify you directly.

· _ga (Google Analytics) – Sets an ID to distinguish users (1 year).

· _ga_2MPMRK1ZRV (Google Analytics) – Persists session-level analytics for this property (1 year).

· _clck (Microsoft Clarity) – Stores a unique ID to maintain Clarity insights across pages (1 year).

· _clsk (Microsoft Clarity) – Connects page views into a single session (24 hours).

· CLID (Microsoft Clarity) – Records first-time Clarity visit information (1 year).

C. Marketing (requires consent)

These help us show relevant ads on other websites and measure campaign performance.

· _gcl_au (Google/AdSense) – Stores ad-click info to measure conversions (3 months).

· test_cookie (DoubleClick/Google) – Checks whether your browser accepts cookies (15 minutes).

· _fbp (Meta/Facebook) – Enables ad delivery and remarketing (3 months).

· MUID (.bing.com / Microsoft) – Unique browser ID used for ads and analytics (1 year).

· MR (.c.bing.com / Microsoft) – Short-term cookie used for analytics and ad performance (7 days).

· SRM_B (.c.bing.com / Microsoft) – User/device-level information for ad delivery (1 year).

These services may process data outside the UK/EEA under appropriate safeguards (e.g., SCCs). You can opt out by rejecting Marketing cookies at any time.

5) Detailed cookie list (detected on our site)

Name Provider / Domain Category Purpose Expires

SM Microsoft Clarity (.c.clarity.ms) Strictly necessary Keeps Clarity working during your visit (routing and performance). Session

ANONCHK Microsoft/Bing (.c.clarity.ms) Strictly necessary Verifies ad clicks for reporting; respects ad-personalisation choices. 10 minutes

_ga Google Analytics (.yesenergysolutions.co.uk) Analytics Tells us if two visits come from the same browser. 1 year

_ga_2MPMR

K1ZRV Google Analytics (.yesenergysolutions.co.uk) Analytics Stores state for this GA property to measure visits and pages. 1 year

_clck Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Remembers a unique ID so we can see how the site is used over time. 1 year

_clsk Microsoft Clarity (.yesenergysolutions.co.uk) Analytics Groups page views into a single session for reporting. 24 hours

CLID Microsoft Clarity (www.clarity.ms) Analytics Notes that your browser visited our site to enable heatmaps and session insights. 1 year

_gcl_au Google/AdSense (.yesenergysolutions.co.uk) Marketing Stores ad-click info to help us 3 months

measure conversions.

test_cookie DoubleClick/Google (.doubleclick.net) Marketing Checks if your browser supports cookies. 15 minutes

_fbp Meta/Facebook (.yesenergysolutions.co.uk) Marketing Helps deliver ads and measure their performance. 3 months

MUID Microsoft/Bing (.bing.com) Marketing Unique ID for ads and analytics across Microsoft sites. 1 year

MR Microsoft/Bing (.c.bing.com) Marketing Short-term analytics and ad performance cookie. 7 days

SRM_B Microsoft/Bing (.c.bing.com) Marketing Stores user/device info to help serve relevant ads. 1 year

6) Third-party cookies and transfers

Some cookies belong to third parties (Google, Microsoft, Meta). These partners may process limited personal data (e.g., online identifiers, IP address, device data) to provide analytics and advertising services. Where data is sent outside the UK/EEA, appropriate safeguards (such as Standard Contractual Clauses) are used by those providers. You can limit this by rejecting the relevant categories.

7) Keeping this notice up to date

We review our cookie list regularly and update this page when our cookies change or when we run new campaigns that add cookies. The cookie banner will always reflect the current set of cookies in use.

8) Manage your settings

· Cookie settings (footer) – change or withdraw consent

· Browser controls – block or delete cookies

· Advertising opt-outs – Google Ads Settings; Meta Ad Preferences; Microsoft Advertising opt-out

Useful information

Optional banner wording (for your consent tool)

Cookies on this site We use essential cookies to make our site work. We’d also like to use analytics cookies to understand how you use the site and marketing cookies to help us show relevant messages. You can accept all, reject non-essential, or manage your choices. [Accept all] [Reject non-essential] [Manage settings]

Implementation notes for your web team (non-public)

· Categories & default state:

o Strictly necessary: on (no toggle)

o Analytics: off by default (requires opt-in)

o Marketing: off by default (requires opt-in)

· Geography: Apply the same consent model for UK/EEA visitors.

· Granular control: Ensure “Manage settings” allows per-category consent.

· Respect withdrawal: On consent withdrawal, remove existing non-essential cookies and stop setting new ones (e.g., block GA/Clarity/Ads tags).

· Records: Keep a consent log (timestamp, categories accepted, banner version).

· Scan cadence: Re-scan quarterly and after major site changes; update this notice and the banner configuration accordingly.

Summary

Yorkshire Energy Services t/a YES Energy Solutions (YES) uses personal information to communicate with individuals, businesses, and community organisations about our services, research, and participation opportunities in energy and retrofit initiatives. This includes contacting existing customers and business contacts as well as contacting organisations and individuals where we believe our services, research, or initiatives may be relevant, including initial outreach. We are committed to ensuring that all communications are lawful, transparent, and easy to opt out of at any time.

Who this notice applies to

This notice applies to individuals, people working for or representing organisations, community groups, charities and local organisations, and other business contacts including suppliers and partners. We refer to these collectively as “Contacts”.

The information we use

We may use name and job role (where available), organisation name, contact details such as email address and telephone number, communication preferences including opt-out status, and records of communications with you. We do not intentionally collect special category data for marketing or communications purposes.

How we obtain contact information

We may obtain your data directly from you, from your organisation, from organisations we work with such as local authorities and delivery partners, from publicly available sources such as websites or directories, through referrals, or as a result of previous contact with us. Where we obtain information from a source other than you, we will provide this notice within a reasonable period where required.

How we use your information

We use contact information to communicate about services we provide or may provide, share information about programmes, schemes and initiatives including community energy, invite participation in research, surveys or engagement activity, send updates, newsletters or event invitations, and understand engagement to improve communications. Some communications may be one-off, for example initial outreach to gauge interest.

Lawful basis for processing

Depending on the circumstances, we rely on legitimate interests or consent for direct marketing communications:  

• Where we rely on legitimate interests, we assess these activities to ensure they are proportionate and do not override your rights, and you can object to direct marketing at anytime.  

• Where we rely on consent, you can withdraw your consent at any time.  

Marketing and opt-out rights

You have the right to object to direct marketing at any time. You can unsubscribe using links in emails, reply to communications to request removal, or contact us using the details below. We will act on opt-out requests promptly and maintain suppression records to ensure you are not contacted again.

Who we share information with

We may share limited contact information with delivery and programme partners such as local authorities and contractors, service providers supporting communications such as email platforms, and regulators or authorities where you receive a service from us. All personal data is processed and stored strictly within the UK and the European Economic Area (EEA), and we will never sell your data.

How long we keep your information

We retain contact information for 2 years following your last active interaction with us, until you opt out, or in line with regulatory or contractual requirements. Suppression records are retained to ensure we respect opt-out requests.

Your rights

You have the right to access your personal information, correct inaccurate information, request erasure where appropriate, restrict processing, object to processing for marketing purposes, withdraw consent where applicable, and lodge a complaint with the Information Commissioner’s Office.

Contact details

If you have questions about this notice or our communications, or wish to exercise your rights, or would like to get in touch with our Data Protection Officer, Trust Keith, please contact YES Energy Solutions using the details below.

• By Post: YES Energy Solutions, Unit 8‑9, Victoria Mills, Stainland Road, Greetland, West Yorkshire, HX4 8AD
• By phone: 01422 880 100
• By email: dataprotection@yesenergysolutions.co.uk

You also have the right to complain to the Information Commissioner’s Office by calling 0303 123 1113, or using the live chat on the ICO website https://ico.org.uk/make-a-complaint/

Changes to this notice

We may update this notice to reflect changes in our activities or legal requirements. The latest version will be available on our website.

Version: 1.0

Date: 27/05/2026

• Age_Uk__Warm_and_Wise__Leicestershire_Referrals_-_Privacy_Notice
• Cadent Gas FPNES Partner – Privacy Notice
• Cadent- Magic Breakfast Privacy Notice
• Cadent- Warm Home Network (WHN) Privacy Notice
• Central and Southern Lincolnshire HUG2 Delivery – Privacy Notice
• City_of_Lincoln_LAD3_BEIS_Delivery_-_Privacy_Notice_3
• Community Homes – Privacy Notice
• Derby City Council HUG2 Delivery
• Derby City Council, ECO 4 Pilot Project – Normanton
• Derby Council LAD3 Delivery – Privacy Notice
• Derby Council Levelling up funding – Privacy Notice
• Derby WHLG- Privacy Notice YES the Controller
• Derby_Council_HUG2_Delivery_-_Privacy_Notice_2
• Derbyshire_Dales_District_Council_Devolution_scheme_Privacy_Notice (1)
• Derbyshire_Dales_District_Council_Devolution_scheme_Privacy_Notice
• East Lincolnshire Partnership – Privacy Notice
• Hinckley EPC Programme – Privacy Notice
• Leicestershire HUG2 Customer Journey Support – Privacy Notice
• Leicestershire LAD2 Customer Journey Support – Privacy Notice
• Leicestershire LAD3-HUG1 Customer Journey Support – Privacy Notice
• Leicestershire nottighamcitycouncil LAD3-HUG1 Customer Journey Support – Privacy Notice
• Leicestershirenottighamcitycouncil LAD3-HUG1 Customer Journey Support – Privacy Notice
• National Grid Advice to Installs – Privacy Notice
• National Grid Energy Affordability Fund – Privacy Notice
• NGN WHN – Privacy Notice
• North East Lincolnshire HUG2 Delivery – Privacy Notice
• North East Lincolnshire LAD2 Delivery – Privacy Notice
• North East Lincolnshire LAD3-HUG1 Delivery – Privacy Notice
• North East Lincs Household Support Grant – Privacy Notice
• North Lincolnshire Council WHLG- Privacy Notice YES the Processor
• North Lincolnshire HUG2 Delivery – Privacy Notice
• North Lincolnshire LAD2 Delivery – Privacy Notice
• North Lincolnshire LAD3-HUG1 Delivery – Privacy Notice
• North Lincolnshire LAD3-HUG1. Delivery – Privacy Notice
• North Lincs Council Dragonby – Privacy Notice
• Northern Powergrid – Privacy Notice
• Northern PowergridLCT Readiness Energy Advice Project – Privacy Notice
• Nottingham Council HUG1 Delivery – Privacy Notice
• Nottingham_Council_HUG1_Delivery_-_Privacy_Notice_1 (1)
• Nottingham_Council_HUG1_Delivery_-_Privacy_Notice_1
• Nottingham_Council_HUG2_Delivery_-_Privacy_Notice (1)
• Nottingham_Council_HUG2_Delivery_-_Privacy_Notice
• Nottinghamshire CC – HUG2 Sustainable Warmth Delivery – Privacy Notice
• Oadby & Wigston HUG2 Delivery – Privacy Notice
• Oadby & Wigston LAD3-HUG1 Delivery – Privacy Notice
• Tuntum Housing Association SHDF Privacy Notice
• Privacy notice – Central & Southern Lincolnshire Warm Homes Local Grant V2
• Nottingham City Council WHLG Y2 & Y3 -Privacy Notice YES the Processor
• Nottingham City Council WHLG Y2 & Y3 -Privacy Notice YES the Processor
• South Derbyshire WHLG Y2 & Y3 -Privacy Notice YES the Processor

• Essex Fire and Rescue Privacy Noticedocx

Suffolk WHLG Privacy Notice YES the Processor

• Able to Pay – Privacy Notice
• Beyond Housing ECO – Privacy Notice
• NEA Privacy Notice airpressuretesting- YES the Controller
• NEF ECO Referrals – Privacy Notice
• Octopus Energy Referral Pathway Privacy Notice
• St Johns & St Annes (SJSA) – Surveys Privacy Notice

• NGN WHN – Privacy Notice
• Northern Powergrid – Privacy Notice
• Northern PowergridLCT Readiness Energy Advice Project – Privacy Notice
• Cadent NGN WHN collaboration – Privacy Notice_

• Cadent Gas FPNES Partner – Privacy Notice
• Cadent- Magic Breakfast Privacy Notice
• Cadent Gas Holistic Advice (Enduring) – Privacy notice
• Cadent- Warm Home Network (WHN) Privacy Notice
• CumbriaWarm_Homes_Network_-_Privacy_Notice
• Liverpool City Council ECO4
• Liverpool Council ECO Flex Project – Privacy Notice
• One Manchester – Surveys
• Warm Homes Network (Cumbria) – Privacy Notice
• SP-Electricity-North-West-ENW-Privacy-Notice-YES-the-Processor-2
  YES the Processor
• Cadent Mobile Advice – Privacy Notice
• Cadent-Mobile-Advice-Privacy-Notice-2
• Cadent Hybrid Heat Pumps – Privacy Notice
• Cadent Mobile Advice Van – Privacy Notice
• Cadent NGN WHN collaboration – Privacy Notice_

• SGN-Help-to-Heat-Privacy-Notice-2
• SSEN Energy Advice – Privacy Notice
• SSEN Energy Advice .- Privacy Notice
• SSEN Energy Advice(extra) – Privacy Notice
• SSEN Energy Advice – Privacy Notice – Updated 2026
• SGN WWU VCMA collaboration

• SGN Help to Heat – Privacy Notice
• SSEN-Energy-Advice-Privacy-Notice-2
• SSEN_Energy_Advice_-_Privacy_Notice_7

• Wales_and_West_VCMA_Round_2_1

SGN WWU VCMA collaboration

• National Grid Advice to Installs – Privacy Notice
• National Grid Energy Affordability Fund – Privacy Notice
• Northern Powergrid – Privacy Notice
• Northern PowergridLCT Readiness Energy Advice Project – Privacy Notice
• Swansea Council Flex Project – Privacy Notice
• Swansea_Council_Flex_Project_-_Privacy_Notice_3
• Wales_and_West_VCMA_Round_2_1
• Wales_and_West_VCMA_Round_2_2
• SGN WWU VCMA collaboration

• Staffordshire WHLG – Privacy Notice YES the Processor
  • actonenergy
  • Cadent Gas FPNES Partner – Privacy Notice
  • Cadent- Magic Breakfast Privacy Notice
  • Cadent- Warm Home Network (WHN) Privacy Notice
  • High Aims Walsall Council HUG2 – Privacy Notice
  • High_Aims_Platform_Housing_-_Privacy_Notice_2 LAD Delivery Support(1)
  • High_Aims_Platform_Housing_-_Privacy_Notice_2LAD Delivery Support (1)
  • High_Aims_Walsall_Council_-_Privacy_Notice_3 (1)
  • High_Aims_Walsall_Council_-_Privacy_Notice_3 LAD-HUG & ECO Support (1)
  • High_Aims_Walsall_Council_-_Privacy_Notice_3
  • Keep-Herefordshire-Warm-Privacy-Notice-2
  • Keep_Herefordshire_Warm- warmth on prescription_-_Privacy_Notice
  • Marches Energy Agency Privacy Notice
  • National Grid Advice to Installs – Privacy Notice
  • National Grid Energy Affordability Fund – Privacy Notice
  • Northern Powergrid – Privacy Notice
  • Northern PowergridLCT Readiness Energy Advice Project – Privacy Notice
  • Rotherham Council ECO Flex Project – Privacy Notice
  • Warm Homes Network Birmingham- Privacy Notice
  • YES Energy Solutions Privacy Notice Herefordshire Council Household Support Fundround3
  • YES Energy Solutions Privacy Notice Herefordshire Council Household Support Fundround4
  • SSEN-Energy-Advice-Privacy-Notice-2
  • Wales_and_West_VCMA_Round_2_2
  • SP-Electricity-North-West-ENW-Privacy-Notice-YES-the-Processor-2
  • YES-Energy-Solutions-Privacy-Notice-Stratford-upon-Avon-2
  • YES-BDC-RBC_Privacy_Notice_-_updated

• Ongo Homes – Privacy NoticeSuffolk WHLG Privacy Notice YES the Processor
• North Yorkshire Council WH SHF- Privacy Notice YES the Processor
• North Yorkshire Council WHLG – Privacy Notice YES the Processor
• Calderdale Council Referrals – Privacy Notice
• Calderdale HUG2 – Privacy Notice
• Calderdale LAD3 Delivery – Privacy Notice
• GLEEN – Privacy Notice
• High_Aims_Platform_Housing_-_Privacy_Notice_2
• Michael Dyson Associates – Privacy Notice
• Michael Dyson Associates Retrofit Assessments leeds- Privacy Notice
• Michael Dyson Associates Retrofit Assessments York- Privacy Notice
• Michael Dyson Associates1 – Privacy Notice
• Michael Dyson AssociatesRetrofit Assessments Sheffield – Privacy Notice
• NGN WHN – Privacy Notice
• North Lincs Council Dragonby – Privacy Notice
• North East Lincs WHLG – Privacy Notice
• North Yorkshire Citizens Advice Referrals – Privacy Notice
• North Yorkshire Council – HUG2 Delivery – Privacy Notice
• North Yorkshire Council WHLG SHDF- Privacy Notice YES the Processor
• North Yorkshire LAD3-HUG1 Delivery – Privacy Notice
• Northern Powergrid – Privacy Notice
• Northern PowergridLCT Readiness Energy Advice Project – Privacy Notice
• Privacy_Notice_-_Accent_Housing_-_Energy_Assessments_2023
• Richmondshire Council ECO Referrals – Privacy Notice
• Ryedale Council Energy Saver – Privacy Notice
• Ryedale Council Energy Savercontract3 – Privacy Notice
• Ryedale_Council_Energy_Saver_-_Privacy_Notice_5
• Scarborough Council ECO Referrals- Privacy Notice
• Scarborough Council ECO Referralseco4- Privacy Notice
• Tangram Housing – Privacy Notice
• Unity Housing – Privacy Notice
• York Conservation- Privacy Notice
• Yorkshire Housing – Heat Pumps
• Yorkshire Housing Advice- Privacy NoticeAlign North Yorks SHDF 2.2 Retrofit Services – Privacy Notice YES the Processor (002) (1)
• Ongo Homes – Phase 2 – Privacy Notice YES the Processor
• Calderdale Healthy Homes Service Retrofit Demonstrator Scheme- Privacy Notice
• Unity Housing 2026 – Privacy Notice