Privacy Policy & Cookie Notice
This Privacy Notice was last updated in June 2026
Introduction
This Privacy Notice explains how the Sustainable Energy Association (SEA) collects, uses, stores, shares and protects personal data in accordance with applicable data protection law, including:
- the UK General Data Protection Regulation (UK GDPR);
- the Data Protection Act 2018; and
- the Privacy and Electronic Communications Regulations (PECR).
This Privacy Notice applies to:
- SEA members;
- users of the website;
- event attendees;
- newsletter subscribers; and
- suppliers, business contacts and individuals who contact SEA.
Please read this Privacy Notice carefully together with the terms of use for this website and this Cookie Notice.
This website is not intended for children, and we do not knowingly collect personal data relating to children through it. This Privacy Notice does not cover personal data processed for recruitment or employment purposes.
Who are we?
Data Controller
The Sustainable Energy Association is the Data Controller of the personal data processed under this Privacy Notice.
Full company details of SEA are as follows:
Name: Sustainable Energy Association, Company number 08718110
Registered office address: 77 Gracechurch Street, London, EC3V 0AS
Data processor
Talan UK & Ireland Limited (Talan), formerly Gemserv Ltd, acts as a data processor on behalf of SEA in relation to the provision of administration, website and support services.
Full company details of Talan are as follows:
Name: Talan UK & Ireland Limited, Company number 04419878
Registered office address: 77 Gracechurch Street, London, EC3V 0AS
Contact Details
The data protection enquiries may be directed to SEA via Talan’s Data Privacy Team acting on SEA ‘s behalf. If you have any questions about this Privacy Notice or SEA’s privacy practices, please email tuk.dataprivacy@talan.com.
Personal data we collect
We may collect and process the following categories of personal data:
- identity data (name, job title, organisation)
- contact data (email address, telephone number, postal address)
- technical data (IP address, browser type, device information)
- usage data (how you use the website)
- communication data (enquiries and correspondence)
- cookie and tracking data
- event attendance records
- marketing and communication preferences
- information submitted through forms or registration
- governance participation records
- complaint records
We do not intentionally collect special category personal data unless this is specifically required and we have a lawful basis to do so.
How we collect your data
We collect personal data when you:
- use or access the website;
- submit forms or register for services, events or communications;
- contact us directly;
- subscribe to newsletters or other communications; or
- attend meetings or events.
How we use your personal information
We will use your personal information for the purposes described to you when you provided it to us. These purposes include:
|
Purpose of processing |
Data types |
Lawful basis |
|
To send operational updates and industry communications to SEA members |
Contact details (such as name, email address and telephone number) |
Legitimate interests – providing SEA membership services and stakeholder engagement |
|
For invoicing and compliance with legal obligations such as tax reporting |
Contact and payment-related details |
Legal obligation |
|
To send optional marketing communications and newsletters |
Name, email address and communication preferences |
Consent |
|
To organise meetings and events |
Name, organisation and email address |
Legitimate interests – administering SEA services and events |
|
To organise, record and maintain governance meeting records and attendance |
Name, organisation, meeting attendance, meeting contributions and, where applicable, recordings or transcripts |
Legitimate interests – governance, administration and stakeholder coordination |
|
To manage tickets raised through our helpdesk |
Name, business address, email address, telephone number, job role, message content, IP address (if applicable), support logs and audit trails |
Legitimate interests – provision of IT and network administration |
|
To send key updates to SEA members where this is necessary to administer membership |
Name, organisation and email address |
Legitimate Interest providing SEA membership services and stakeholder engagement |
|
To operate website cookies and similar technologies |
Cookie information, IP address, browser and device information, and website usage data |
Consent, except for strictly necessary cookies |
|
To maintain website and network security and prevent misuse |
IP address, device data, log files and browser information |
Legitimate interests – website and network security |
|
To manage and investigate complaints, including data protection complaints |
Name, contact details, complaint details, correspondence and investigation records |
Legal obligation and legitimate interests |
|
To administer SEA governance activities, committees and stakeholder engagement |
Name, organisation, role, correspondence and attendance records |
Legitimate interests – governance administration and stakeholder engagement |
|
To manage supplier and other business relationships |
Business contact details, contractual correspondence and payment information |
Contract and legitimate interests |
We may also conduct data processing:
- to enforce the terms of any contract between you and us, including our website terms of use; and
- to comply with applicable law or respond to requests from regulators, courts or law enforcement bodies.
Disclosure of your information
We will only share your personal information where necessary and lawful to do so, including with the following categories of recipients:
- Talan as SEA’s service provider and processor;
- third-party service providers who may store personal data or use it while providing services to us, including Microsoft as our IT cloud service provider for services such as Microsoft Outlook and SharePoint;
- website hosting providers;
- professional advisors, including lawyers, banks, auditors and insurers;
- HM Revenue & Customs, regulators and other authorities; and
- event service providers and contractors supporting SEA activities.
We require third parties processing personal data on our behalf to:
- implement appropriate security measures; and
- process personal data only on our documented instructions, except where they are required to do otherwise by law.
International transfers
Some of our third-party service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we will ensure that appropriate safeguards are in place in accordance with UK GDPR, including:
- adequacy regulations;
- the UK International Data Transfer Agreement (IDTA); or
- approved international transfer clauses, such as the International Data Transfer Addendum to the EU Standard Contractual Clauses, where appropriate.
Data security
We implement appropriate technical and organisational measures, including role-based access controls, authentication controls, encryption, monitoring, supplier due diligence and restricted access to personal data. These measures are designed to protect personal data against:
- accidental loss;
- unauthorised access or unlawful processing;
- alteration; or
Access to personal data is limited to individuals and service providers who have a legitimate business need to access it. We maintain procedures for identifying and managing suspected personal data breaches.
Your rights
Under UK GDPR, you have the right to:
- request access to your personal data;
- request correction of inaccurate personal data;
- request erasure of your personal data, in certain circumstances;
- request restriction of processing, in certain circumstances;
- object to processing based on legitimate interests;
- request the transfer of your personal data to another organisation, in certain circumstances;
- withdraw consent where processing relies on consent; and
- lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise any of these rights, please contact us first at tuk.dataprivacy@talan.com.
If you have concerns about how SEA has handled your personal information, we encourage you to contact first so that we can investigate an attempt to resolve the matter.
Storage of your personal data
We retain personal information only as long as necessary to fulfil the purposes for which it was collected, to comply with legal, regulatory and governance obligations and to establish, exercise or defend legal claims were necessary.
|
Purpose of processing |
Retention period |
|
To administer membership applications and maintain membership records |
Duration of membership +6 years after membership ceases |
|
To keep members updated on policy changes and relevant industry information |
For the duration of SEA membership |
|
To retain correspondence relating to membership governance and enquiries |
6 years after the Membership or business relationship ends |
|
For invoicing and compliance with legal obligations such as tax reporting |
6 years after the end of the relevant financial year in which the record was created |
|
To maintain audit trails and governance records |
6 years unless a longer retention period is required for governance, legal or regulatory purposes |
|
To confirm the accuracy of meeting discussions |
For the duration of the association, or longer where required by governance retention schedule |
|
To organise, record and maintain governance meeting records and attendance |
For the duration of the association and for up to 6 years thereafter unless a longer retention period is required for governance, legal or regulatory purposes |
|
To manage tickets raised through the helpdesk |
2 years |
|
To send key updates to SEA members |
For the duration of SEA membership |
|
To operate website analytics, performance monitoring and optional marketing cookies |
Analytics cookies: 12 to 24 months Consent records: up to 6 years, where retained for evidential purposes Session cookies: session only |
Use of your personal information submitted to other websites
SEA is not responsible for the privacy practices, content or security of third-party websites linked from this website. You should review the privacy notice of any external website you visit.
SEA primarily stores personal data within the United Kingdom. Where certain service providers require restricted transfers of personal data outside the United Kingdom, SEA will ensure that appropriate safeguards are implemented in accordance with UK data protection law, including adequacy regulations, the IDTA, approved international transfer clauses or equivalent contractual safeguards, as appropriate.
Contact Details
You can write to us to request access to your personal information or to exercise your other rights at:
Sustainable Energy Association
77 Gracechurch Street
London
EC3V 0AS
We will require proof of your identity before responding to any request from you.
If you have any query about this Privacy Notice or SEA’s data protection practices, you may also contact the Data Privacy team using the details above.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO) on any data protection issues.
Cookies and other technologies
We use cookies and similar technologies on the website to distinguish you from other users, support core website functionality, understand how the website is used and, where enabled, provide certain third-party features. This helps us provide a good user experience and improve the website. Specifically, we use cookies for:
- strictly necessary purposes (website functionality and security)
- analytics (understanding website usage)
- third-party services (e.g. embedded Google Maps)
Non-essential cookies, including analytics and third-party cookies, are only set where you have provided consent through the cookie banner. Google Maps is not loading before consent is obtained.
Strictly necessary cookies do not require consent.
What are Cookies:
Cookies are small text files stored on your device when you visit a website. They help website’s function, remember your preferences and provide information about how the website is used.
Cookies have different durations. Session cookies expire when you close your browser. Persistent cookies remain on your device for longer, unless you delete them earlier. We may use information collected through cookies to compile reports and improve the functionality and user experience of our website.
Cookies can be set by different parties. This usually happens in one of two ways:
- First-party cookies: these are cookies set by this website.
- Third-party cookies: these are cookies set by third parties whose services or features are used on our website. We do not control the operation of third-party cookies. Some third-party cookies may be set by Google. For more information about Google’s use of cookies, please see Google’s Cookie Policy.
|
Cookie Name |
Cookie Type |
Domain |
Description |
Retention |
|
tab_id |
Functional |
First party |
Maintain session or tab state functionality across the website |
Session |
|
cmplz_statistics |
Strictly necessary |
First party |
This cookie is used to store cookie consent preferences. |
1 year |
|
cmplz_consented_services |
Strictly necessary |
First party |
This cookie is used to store cookie consent preferences. |
1 year |
|
cmplz_marketing |
Strictly necessary |
First party |
This cookie is used to store cookie consent preferences. |
1 year |
|
cmplz_preferences |
Strictly necessary |
First party |
This cookie is used to store cookie consent preferences. |
1 year |
|
cmplz_functional |
Strictly necessary |
First party |
This cookie is used to store cookie consent preferences. |
1 year |
|
Cmplz_policy_id |
Strictly necessary |
First party |
Stores the version of the cookie policy accepted by the user |
1 year |
|
Complz-banner-status |
Strictly necessary |
First party |
Records whether the cookie banner has been dismissed |
1 year |
|
cmplz_saved_categories |
Strictly necessary |
First party |
Stores selected cookie consent categories |
1 year |
|
cmplz_saved_services |
Strictly necessary |
First party |
Stores consent selections relating to third-party services |
1 year |
|
_pk_ses.12271.946b |
Statistics/analytics |
First party |
Temporary cookies used by Matomo analytics to track active browsing sessions |
Session/30 minutes |
|
pk_ref_12271_946b |
Statistics/analytics |
First party |
Stores attribution information about how a visitor reached the website |
6 months |
|
_pk_ses_12271_946b |
Statistics/analytics |
First party |
Temporary cookie used by Matomo analytics to track active browsing sessions |
Session/30 minutes |
|
wp-settings-time-12 |
Functional |
First party |
Used by WordPress to store customised user interface and administration preferences |
1 year |
|
_ga |
Statistics/analytics |
Third party |
Associated with Google Analytics and used to distinguish users for analytics purposes |
2 years |
|
_ga_ 7BX7EY5Y3F |
Statistics/analytics |
Third party |
Associated with Google Analytics and used to maintain session state and measure site usage |
2 years |
Your rights in relation to cookies.
When you first visit this website, we will ask for your consent to place non-essential cookies on your device. You can use our cookie banner to accept, reject or manage non-essential cookies. You can also adjust your browser settings to block or delete cookies, although doing so may affect how the website functions.
Updating your details
If any of the information that you have provided to us changes, please let us know the correct details by sending an e-mail to tuk.dataprivacy@talan.com.
If you have any questions about this Privacy Notice or SEA’s privacy practices, please also email us at tuk.dataprivacy@talan.com.
Changes to the Privacy Notice
We may change this Privacy Notice from time to time. You should check this notice occasionally to ensure you are aware of the most recent version that will apply each time you access the Website.