Last updated: 27 October 2026
1. Who we are
This website is operated under the Aura WM name. The data controller is the legal entity operating Aura WM. Before publication, insert its full legal name, postal address and contact details. You can contact us at contactus@aurawm.co.uk.
2. Information we may collect
Depending on your enquiry and our relationship, we may collect your name, business contact details, company name, job role, property and site details, meter and supply information, contract renewal dates, correspondence, instructions and records of services provided. We may also receive information from Suppliers or your organisation where authorised and relevant to the Services.
3. How we use information
- Respond to enquiries and arrange portfolio reviews.
- Assess energy procurement options and provide the Services you request.
- Communicate with Suppliers and coordinate agreed administrative activity.
- Maintain business records, handle complaints and protect our legal rights.
- Meet legal, regulatory, accounting and security obligations.
- Send marketing communications only where we have a lawful basis and any required consent.
4. Lawful bases
Depending on the context, we may rely on steps taken at your request before entering a contract, performance of a contract, compliance with a legal obligation, our legitimate interests in operating and improving a business-to-business service, or consent where required. We will assess the appropriate basis for each use.
5. Sharing information
We may share relevant information with energy Suppliers, authorised representatives, IT and hosting providers, email and customer-management providers, professional advisers or public authorities where necessary and lawful. We do not sell personal information. We will limit information shared to what is reasonably needed for the relevant purpose.
6. International transfers and security
If a service provider processes personal information outside the UK, we will take steps required by applicable data protection law. We use appropriate technical and organisational measures intended to protect information, but no method of transmission or storage can be guaranteed completely secure.
7. Retention
We retain information for no longer than reasonably necessary for the purposes described above, including service delivery, legal obligations, resolving disputes and maintaining business records. Actual retention periods should be set based on the data type and legal requirements.
8. Your rights
Subject to applicable law, you may have rights to request access to personal information, correction, erasure, restriction, objection, portability, or withdrawal of consent where processing is based on consent. You may also complain to the UK Information Commissioner’s Office (ICO). We may need to verify your identity before responding.
9. Cookies and analytics
This starter website does not intentionally require analytics cookies. If analytics, advertising, embedded media or other non-essential cookies are added, update this policy and implement any required consent mechanism before those technologies run.
10. Third-party websites
Links to Supplier or other websites are provided for convenience. Their privacy practices are governed by their own notices and policies.
11. Changes and contact
We may update this policy from time to time. The current version will be published on this page. For privacy requests, contact contactus@aurawm.co.uk. Add the data controller’s full legal identity and postal address before launch.