Privacy Policy

Last updated: June 2026

Who We Are

This privacy policy applies to Energy Review, operating at energy-review.co.uk. We publish data-driven comparisons of the UK's major domestic energy suppliers to help consumers make informed choices. This site is informational only; we do not sell energy or process any energy contracts.

For any privacy-related queries, please contact us at privacy@energy-review.co.uk.

What Data We Collect

Energy Review does not require you to create an account or provide any personal information to use the public site. We do not collect names, email addresses, postal addresses, or payment details from visitors.

The only personal data we may process relates to your visit to this website (e.g. IP address, browser type, pages viewed), and only if you have given explicit consent for analytics cookies via our cookie consent banner. Analytics are off by default; they are activated only upon your affirmative opt-in.

Cookies

We use a consent management platform provided by Silktide to manage cookie preferences. When you first visit the site, a consent banner is shown. No analytics or behavioural cookies are set until you accept them.

The following cookie categories may be active on this site:

Strictly Necessary

These cookies are required for the website to function. They do not require consent and cannot be disabled via the cookie banner.

• Silktide consent cookie — Stores your cookie preferences so we do not show the banner on every page. Duration: approximately 1 year.

Analytics (consent required)

These cookies are only set if you opt in. They help us understand how visitors use the site so we can improve content and user experience.

• Google Analytics 4 (GA4) — Collects anonymised usage data including pages visited, time on site, and referral source. Cookies include _ga and _ga_*. Duration: up to 2 years.
• Microsoft Clarity — Records anonymised session data including scroll depth and click patterns for behaviour analytics. Cookies include _clck and _clsk. Duration: up to 1 year.

Third-Party Services

Supabase

Our site content (supplier reviews, scores, tariff data) is stored in a Supabase database. Supabase does not receive any personal data about site visitors. No visitor-identifiable information is stored in or retrieved from Supabase.

Google Analytics 4

If you consent to analytics cookies, visit data is sent to Google Ireland Limited. We have configured GA4 with IP anonymisation enabled. Google's privacy policy is available at policies.google.com/privacy.

Microsoft Clarity

If you consent to analytics cookies, behavioural session data is sent to Microsoft Corporation. Microsoft Clarity does not collect or store personally identifiable information. Microsoft's privacy policy is available at privacy.microsoft.com.

Legal Basis for Processing

We rely on the following legal bases under UK GDPR for any data processing that occurs:

• Legitimate interests — For the technical operation of the website (e.g. server logs required for security and reliability). We have assessed that our legitimate interests are not overridden by your fundamental rights in this context.
• Consent — For analytics and behavioural cookies (GA4 and Microsoft Clarity). You may withdraw consent at any time by revisiting the cookie preferences panel (accessible via the cookie icon in the footer).

Data Retention

• GA4 data is retained for 14 months (the minimum available setting), after which it is automatically deleted by Google.
• Microsoft Clarity session data is retained for 30 days by default.
• Server access logs (held by our hosting provider) are typically retained for up to 30 days for security purposes.

Your Rights Under UK GDPR

As a data subject in the United Kingdom you have the following rights with respect to any personal data we hold about you:

• Right of access — You may request a copy of any personal data we hold about you.
• Right to rectification — You may ask us to correct inaccurate personal data.
• Right to erasure — You may ask us to delete your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing — You may ask us to halt processing while a dispute is resolved.
• Right to data portability — Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object — You may object to processing carried out on the basis of legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at privacy@energy-review.co.uk. We will respond within one month of receiving your request.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113

Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.