Privacy Notice

1. Our Privacy Commitment

Padlock is built with privacy and security by design. We process your household and energy data solely to help you understand your energy bills, monitor rates, and identify fair energy deals. We never sell your personal information or usage data to third-party advertisers.

2. Personal Data We Collect

• Account & Home Information: First name, email address, property type, number of bedrooms/occupants, and postcode to check local tariff eligibility.
• Energy Bill Documents & Meter Data: PDF or image bills you upload, including MPAN/MPRN meter identifiers, annual consumption (kWh), current rates, standing charges, supplier name, and tariff end dates.
• Consent & Audit Records: Specific consent logs, timestamped agreements, and switch application records.

3. Purpose-Specific Consents & Legal Basis

We process data based on your explicit, purpose-specific consent and performance of our service agreement:

4. Data Retention & Document Storage

Uploaded bills are kept in secure, private storage buckets accessible only through short-lived signed URLs. When you delete a bill, both the physical file and AI extractions are permanently removed. If you close or delete your account, all associated personal records are immediately erased.

5. Your GDPR Rights

Under UK GDPR, you have full control over your data:

• Right of Access & Export: Download a full machine-readable JSON archive of your personal data at any time in Settings.
• Right to Erasure (“Right to be Forgotten”): Delete your stored documents or erase your account completely with one click.
• Right to Rectification: Review and correct any energy figures from your bill before they are saved.
• Right to Withdraw Consent: Grant or revoke purpose-specific consents at any time in your Account Settings.