Our privacy notice
This Privacy Notice will help you understand your privacy rights, how and why we need to process your Personal Data, and how you can get in touch with us if you need to. Processing Personal Data involves any activity to do with that data, for example collection, storage, editing and deletion.
We’ve presented this information in different sections so you can access the information you need more easily. You’ll find our general privacy information under the headings below, with to cover the different types of individuals whose data we us. We encourage you to read each section thoroughly.
We take your Personal Data privacy very seriously and we're committed to protecting your Personal Data by complying with the relevant privacy legislation (including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018).
We also endeavour to follow relevant industry best practice and Codes of Practice and Guidance, such as ICO’s Data Sharing Code of Practice.
We frequently review and update this Privacy Notice to reflect changes in our services as well as to comply with changes in Data Protection Laws and Legislation. We would, therefore, encourage you to review this Notice on a regular basis and if we make any significant changes impacting your privacy, we'll make this clear on our website. Please remember to check from time to time.
We use some formal terms in this Notice, such as Data Subject, Personal Data and Data Controller. For an explanation of these terms, please see the definitions section.
Updated: 30 June 2022
Who we are?
We are South West Water Limited (including Bournemouth Water (BW)) and may describe ourselves as "We" “Us” or "SWW" in this Notice). We are the statutory water and wastewater undertaker (supplier, also known as provider) for the South West of England, covering the whole of Devon, Cornwall, The Scilly Isles and parts of Somerset, and Dorset
For a map showing the areas we cover, please click here for SWW and here for BW. Some households in the wider area that we cover might have more than one provider, for example if your property is on the border of two different statutory providers area, or if your property is part of a new build housing estate, where the developer chose to “self-supply” water or waste services; these “self-supply” arrangements used to be known as “inset agreements” but are now known as “new appointments and variations” or “NAVs” for short. Please see your water or sewerage bill for details if you are unsure of who provides you with relevant services or look at www.water.org.uk/advice-for-customers/find-your-supplier/ for more information.
We are a company registered in England and Wale under number 02366665 with our registered office at Peninsula House, Rydon Lane, Exeter, Devon, EX2 7HR. SWW is part of a group of companies owned by Pennon Group Plc. In addition to SWW, some of the other companies in the Pennon group will look after and process your Personal Data. Some of these companies are separately responsible for your data (referred to as Data Controllers) and some carry out processing on our behalf (referred to as Data Processors).
Pennon Group Companies include the following companies or brand names listed below (updated from time to time):
Bournemouth Water (part of South West Water Limited)
Pennon Group Plc (parent company for SWW)
Source Contact Management Ltd (a SWW water subsidiary)
Pennon Water Services Ltd (also known as “PWS”) and trading under the brand Source for Business (a “sister company” of SWW)
South West Water Limited (also known as “SWW”).
The company/companies or brand names listed above which are relevant to you will depend upon who you are and what type of interaction you have with SWW. Your point of contact for all matters relating to privacy and Personal Data in connection with us will be SWW or Pennon Group.
For the purposes of Data Protection laws, SWW is the Data Controller of Personal Data. This means that we make decisions about how and why we process Personal Data, and, because of this, we’re responsible for making sure Personal Data is only used in accordance with those Data Protection laws. When we work with third-party companies, they will process Personal Data on our behalf. These companies are referred to as ‘processors’. When we use processors, they’ll use your Personal Data on our behalf and only for the services and limited purpose that we instruct them to use it. When we use processors, we remain responsible, as a controller, for compliance with all data protection legislation.
More detail about our working with third parties is detailed in the section - Third Party Processing.
If you want more information about this Privacy Notice, or have any comments or observations about it or about the way that we handle your Personal Data or if you would like to exercise any of your Data Subject Rights (see below for more information) or want to contact us about how we process your Personal Data, see section below on “Who can I contact about my Personal Data?”
While we would prefer you to contact us first, you can also contact the Information Commissioner’s Office via ico.org.uk or 0303 123 1113 for information, advice or to make a complaint.
Definitions and phrases used in this Notice
As mentioned above, we use various formal expressions or phrases in this Notice. Below is an explanation about what these mean in this context:
Data Controller - The data controller determines the purposes for which and the means by which Personal Data is processed. SWW is considered to be a data controller for most of the Personal Data it holds. There are some circumstances where we might be a” joint controller” with another party (such as Ofwat or other regulated body), but SWW will remain liable to you in how we used your Personal Data
Data Subject - A Data Subject is any person whose personal data is being collected, held or processed. For example, each SWW customer will be a Data Subject
Data Processor - A processor is responsible for processing Personal Data on behalf of a controller. For example, where we have used a third party to processor to provide us with bill processing services, SWW would be the controller and the third party would be our processor
Personal Data - Personal Data is any information which are related to an identified or identifiable natural person. (Full definition provided in Article 4 of the UK GDPR)
Special Category Data – Special Category Data is data relating to sensitive information about an individual that is given a further level of protection such as their ethnic or racial background, political opinions, health, biometric data (where used for identification purposes). (Full definition provided in Article 4 of UK GDRP).
Who does this Notice apply to?
This Notice relates to the collection and use (Processing) of the Personal Data of individuals, sole traders and individuals who are in business partnerships. It does not apply to commercial information we collect or use in relation to companies or other organisations.
It is intended that this Notice covers:
- Existing, potential and previous customers and those acting on their behalf
- Members of our customers’ households (if we have been provided with information about them)
- Competition entrants and winners
- Those applying for any grant schemes or funding arrangement that we manage
- Those who interact with us on social media platforms (whether as our customers or otherwise)
- Individuals who work for suppliers and contractors
- Members of Customer Challenge Groups
- Members of Parliament and Members of the European Parliament
- Members of Regional Action Groups
- Members of Environmental Action Groups
- Motorists encountered by our staff
- Visitors to our sites (including in vehicles)
- Visitors to our websites
- Individuals interacting with our legal department
- Individuals who make general enquires about our services or make requests under the Environmental Information Regulations or make complaints or comments about our services
- Advisors to all of the above or other people providing assistance to them
- Other individuals not listed above who interact with us or our sites.
This Notice does not apply to how we process Personal Data relating to our employees, former employees, pensioners, agency staff or contractors (or their employees).
How do we collect Personal Data?
We collect your Personal Data in a number of direct or indirect ways. These, for example, include:
- anything you have provided us with in "MyAccount", on our websites (including www.southwestwater.co.uk and www.bournemouthwater.co.uk) provided over the telephone, via video calls in a letter, e-mail, WhatsApp, facsimile, Mobile Application (App), our LiveChat service or via social media like Twitter and Facebook. We may also access information about you that is already publicly available
- data received from water meters or other similar technology
- if we have merged with or acquired a company who has supplied water or wastewater services to you
- outbound and inbound calls, which usually are recorded for training and quality purposes
- CCTV cameras (and where used, body worn cameras) on our sites or when we (or our contractors) are working in public spaces on our assets to capture images of people and vehicle identification information such as number plates. This may include recorded conversations between our staff or contractors and members of the public
- Some SWW vehicles are fitted with dashcams to capture images and footage in the event of road traffic incidents and may also capture instances of poor driving. When required, dashcam footage will be provided to insurers and may also be provided to the relevant police force if requested or required by law
- All employees and visitors may be subject to surveillance for the purposes of safety and crime prevention. Recorded material may be used in the monitoring, prevention and investigation of Health & Safety incidents and crimes and bringing crimes to justice
- We also collect Personal Data given to us if we meet in person for example whilst visiting your home, worksite or business premises or if you come to one of our sites. In addition, we may take photographs to help identify and record locations of damage, theft, faults, leaks, locations for future or planned works, and for work undertaken and completed by us or our contractors
- Photographs are also routinely taken by our staff during inspections to identify breaches of legislation, and for which we have legal duty to enforce, namely The Water Supply (Water Fittings) Regulations 1999
- photographs are also taken to identify and prosecute occurrences damage to the network and theft of water from our network. Photographic evidence is used in enforcement and in prosecution actions
- From time to time customers provide us with photographs they have taken, to assist in reporting concerns they might have and have requested that we follow up.
In addition, we collect your Personal Data from third parties, for example, from:
- Individuals that have permission to contact us on your behalf
- New residents of a former supply address, estate/letting agents or solicitors acting on behalf of you or a new resident of a
- former supply address, for example, where you are moving home and the third party is providing a forwarding address (with or without your consent)
- Landlord of your supply address
- Our regulators including OFWAT, the Consumer Council for Water, Water Redress Scheme (WATRS) the Drinking Water
- Inspectorate, the Environment Agency and the Information Commissioners Office
- Partners or subcontractors such as Kier who work on our behalf under a contract
- Public authorities and agencies with whom we work in connection with the provision of water and sewerage services, such as local councils and the lead local flood authorities and the Benefits Agency for our Social Tariffs.
- Law enforcement agencies
- Other water and sewerage companies where required for the supply of water or sewerage services to your supply address
- Credit reference and tracing agencies and the Electoral Roll, for example, where it has not been possible to identify the person responsible for payment of water or services charges
- Other organisations or individuals not listed above who interact with us and provide us with data
What Personal Data do we process?
The Personal Data that we process about you will depend on the type of relationship that we have with you (for example if you are a customer, this will be different from Personal Data we hold about journalists).
However, generally for customers and others, we collect and process the following data about you:
- Identification and contact data: this would include your title, name and contact details such as your email address and mobile telephone number
- Information about your SWW customer account: this would include your supply address, correspondence address, billing address, billing history (which may include accounts previous addresses), water meter serial number and water usage, information required to estimate water usage, data from smart meters and customer password and customer contact/complaints history
- Payment information: this would include transaction records of payments made in connection with your SWW customer account and details of your bank account or credit or debit card in order to process payments or set up direct debits
- Personal circumstances information: this means information that would affect our supply arrangements and your entitlements, for example for registration on the Priority Services Register or WaterSure or WaterCare social tariff schemes (see below for more details). Such data may include your welfare benefit entitlements, national insurance number, dates of birth of your children or dependants and medical information (special category data) of those persons living at your supply address, if relevant
- Delegated Authority: including powers of attorney or people you have authorised to discuss your account, e.g. partner, adult children, solicitor etc.
- Supply network information: this means information relating to the supply address that is necessary for the supply of water and sewerage services such as location of network infrastructure (whether owned by South West Water or not) present on or near to the supply address and the maintenance and repair history
- Financial performance data: means information received from and provided to credit reference agencies
- Behavioural information: if there has been any vexatious or abusive behaviour made towards South West Water staff, contactors or agents
- Our own enforcement activities: including using powers under our obligations under the Water Industry Act, such as our water quality sampling or powers under the Water Supply (Water Fittings) Regulations 1999 or our own investigations
- Data received from and provided to law enforcement agencies: this means information to assist in the prevention, detection, apprehension and prosecution of criminal activity from agencies such as the Police, Department for Work and Pensions, HM Revenues and Customs (HMRC), UK Visas and Immigration and the Environment Agency
- Website tracking information: this means details of transactions you carry out through our website and details of your visits to our website
- Information gathered My Account and social media interaction: including customer comment and contacts
- Survey information and focus groups: this means information you provide as part of customer or stakeholder surveys. On request, we shall provide Ofwat with customer contact data so that Ofwat may contact customers to complete additional surveys or to verify services received
- Preference information: this means any opt in or opt out preferences that you have provided us with confirming whether you wish to receive information about offers and information that may be of interest to you
- Grant or funding applications: made either by a customer for themselves or on behalf of a group (for example a community society or charity).
Why do we process your Personal Data (our lawful basis for processing)?
We’re required by law to always have a permitted reason or justification (called a “lawful basis” or “legal basis”) for processing your Personal Data. We only process your Personal Data if we have a lawful basis to do so, if the processing is necessary, reasonable and proportionate, and in accordance with the way in which we describe in this Privacy Notice.
Depending on the processing activity, we may use one or more of the following lawful basis for processing your data:
- Consent: where you’ve given your consent for the processing
- Contract: where processing is necessary for the performance of a contract
- Legal obligation: where processing is needed to comply with our legal obligations
- Vital interests: where processing is needed to protect your vital interests or those of another person
- Public task: where processing is needed for us to perform a task in the public interest of for our official functions
- Legitimate interests: where processing is needed for our legitimate interests or those of a third party unless on balance, these are outweighed by the need to protect your individual rights.
Providing water or sewerage services
As a water and sewerage undertaker, we have legal (statutory) obligations to supply water, maintain water quality, promote water efficiency, to maintain adequate drainage and make charges. These legal obligations are regulated by OFWAT and our other regulators. These obligations include compliance with legislation such as the Water Industry Act 1991, tax laws, and consumer protection laws, as well as the need to provide information to law enforcement agencies or other authorities when we’re required to do so.
Most of the processing we carry out at SWW in relation to your Personal Data is necessary for the performance of one of our legal obligations or statutory entitlements as a statutory water and sewerage undertaker (e.g. supplying clean water to you; removing sewerage (also called wastewater)); managing our network; encouraging water efficiency; raising and collecting our charges; reducing debt; and our duty to protect the health, safety and wellbeing of those who visit our sites. So that we can provide the services that we are obliged to provide, we need to process Personal Data for the following purposes:
- Managing enquiries, including customer queries and complaints
- Metering and billing
- Receiving payment and debt recovery
- Managing network operations (e.g., customer water quality sampling, water supply and blockage issues)
- Dealing with new connections to our network
- Fraud prevention and detection of criminal activity
- Public education on matters affecting our regulated services (such as water efficiency and leakage)
- Internal training
- Listening and addressing concerns and customer satisfaction surveys, customer focus groups and service improvement communications
- Research and statistical analysis for matters affecting our regulated services (such as predicting water demand)
- Managing legal claims
- Responding to requests for information and media queries/broadcasts
- Enforcement of government legislation, for example, the Water Supply (Water Fittings) Regulation 1999
- To comply with our legal obligations under the Water Industry Act 1991.
In order to carry out these activities, we need to keep reliable, accurate and up-to-date records of customers' (and others) details as well as any interactions with them related to these regulated services. This also includes billing customers and taking surveys to improve customer satisfaction.
Providing Additional Services
Where we’re delivering a contractual service to you outside our legal (and statutory) obligations or taking steps at your request prior to entering into a contract with you, we process your Personal Data on the legal basis of a contract, for example our Con29 Search facility or additional products or services like water saving devices. Our regulated services include billing our customers under the legal basis of legal obligation; we do not require a contract or customer consent to process the information required to do this.
We use certain types of Personal Data collected to help us understand how we can focus on sending you information which is relevant to you or to your circumstances. This is usually because we have a legitimate interest in processing information required to help us become more effective and efficient.
For example, whether you could benefit from having a water meter or a more manageable payment scheme. We do not make choices based solely on automated decision-making or profiling.
Processing of sensitive Personal Data, including Priority Services Register
We sometimes need to process sensitive (special category) data, such as medical details, when we’re carrying out public tasks that have a substantial public interest. This processing is based on our Legitimate interest and Substantial public interest.
We also process sensitive data for other tasks with the explicit consent of the customer or stakeholder.
Along with others in the water and sewerage industry we follow industry guidance and operate a Priority Service Register (PSR) which holds details of individuals who may, from time to time, require priority assistance (for example in times of water leaks or if there is an interruption to supply of water in an area). If this applies to you (see next paragraph), we will rely on a “Substantial Public Interest” to justify using your Personal Data to protect you from harm or safeguard your interests (where we think that we need to, or where you tell us that you need assistance) by registering you on the PSR. This is so that we have a record of what your priority needs are in order to provide you with the support that you need.
The PSR contains the details of individuals who have particular requirements (eg. due to age, health, medical condition or extra communication requirements) where those requirements mean that we might need to contact the individuals in a particular way or as a matter of priority in the event of an interruption to supply or other operational emergency. Keeping information on the PSR means that we can respond quickly and adapt our services. For example, we might need to send a team to the address if someone can’t communicate by phone, or we might need to deliver bottled water if someone has a particular medical condition.
Including your Personal Data on our PSR also means that we could share your Personal Data with organisations in your area whose role also involves keeping you safe or safeguarding your interests, or providing essential services such as other utility providers, emergency services, local authorities and health services so that they can also help you during an emergency. Get in touch with us for more information on our PSR.
If we add you to the PSR because another organisation has let us know about your additional needs, we will let you know.
If you don’t want to receive Priority Services by being on the PSR, you can let us know by:
Emailing us at: email@example.com
In limited circumstances we require consent from you to process your Personal Data – for example where you provide us with Sensitive Personal Data such as medical or health information in discussions with us about our Social Tariffs (e.g. information relating to disability/sickness benefits). When we collect your Sensitive Personal Data for these purposes, we will ensure that we get your explicit consent to collect and record it (and share with others if applicable) and tell you how you can withdraw your consent if you change your mind (see paragraphs below on Exercising your Rights for further information on your right to withdraw your consent).
Where our processing is not necessary for compliance with a legal obligation or a Substantial Public Interest (as described above), we generally rely on our legitimate interests to run our business efficiently and improve our services (e.g. assisting our billing and collection activities; to enable us to deliver affordable bills to our customers; carrying out customer satisfaction surveys or market research; letting you know about campaigns such as “The 3 Ps” and informing you on how to help prevent “Fatberg” in our sewers and ways in which you can increase water efficiency).
Before rolling out any new campaign or business initiative, we carry out an internal review (known as a Data Privacy Impact Assessment or DPIA) to check that our legitimate interests are not overridden by your rights, and to check that we will only process your Personal Data in a way that we think you would reasonably expect (such as. as set out in this Notice).
Who will see your Personal Data?
We also process your Personal Data based on legitimate interests (whether in your interests, our interests or those of a third party, providing an impact assessment has been carried out). This includes providing you with information about and appeals made by or on behalf of Water Aid (a registered charity 288701 set up by the water industry to promote water efficiency and water for all), including the circulation of their annual charitable leaflet. You may request that you do not receive direct marketing communications from or about WaterAid by contacting firstname.lastname@example.org. Please refer to WaterAid in your email Subject heading.
Also, where we are obliged to fulfil our statutory duty or based on our legitimate interests to promote water efficiency, we share your contact details with third parties to provide relevant services on our behalf. At present, we contract with HomeServe plc (and its group companies) who periodically distribute information about their insurance backed water efficiency and plumbing services in a letter or bill insert along with your water and/or wastewater bill. This letter may be jointly branded between us and HomeServe, or it may be issued under our branding alone. When you give us your verbal consent (which is noted on our system by the call handler) and are on a phone call with our customers services teams, they may connect you to HomeServe or provide HomeServe with your contact details to discuss HomeServe’s insurance backed services. You may request that we do not share your Personal Data with HomeServe or that you do not receive direct marketing communications from HomeServe by contacting us on email@example.com. You can find out more about how HomeServe use your Personal Data here: - www.homeserve.com/uk/about/privacy-policy
We may also rely on legitimate interests to process your personal information to send you information either by or on behalf of third parties about their products or services which relate to our regulated services. You may request that you do not receive direct marketing communications from or about these third parties by
Emailing us at: firstname.lastname@example.org
We will need to share some of your Personal Data with others in order to do this. If you have agreed to receive marketing, products or services from another company and later decide you no longer want these, please contact that company directly to let them know (as it will be that third party who you have a relationship with, not us, who manage the mailing lists).
Sharing your data
Who sees or has access to your Personal Data within SWW will depend on why we need to process the data. The following functions, for example, will have access to your Personal Data:
- Our Customer Services Teams for billing enquiries, operational repairs and complaints
- Our Developer Services Team and their contractors in relation to connections to our network
- Our Legal Team for dealing with any complaints or disputes and requests for information
- Our Water Regulations Team to carry out inspections of plumbing systems to confirm compliance with the Water Supply (Water Fittings) Regulations 1999
- Our Water Quality team to enable them to take water samples to maintain our excellent water quality
- Our Leakage, Metering and Distribution teams to enable them to monitor and maintain the water network, monitor and measure consumption and reduce customer leakage
- Our Property Searches Team to assist in providing connection, supply, drainage and flooding history information (such as under Con29 Conveyancing searches)
Some of the above activities, particularly in relation to leakage and metering, may also be carried out by our partner contractors.
We will also share your Personal Data with third parties, in order to meet our legal obligations or to fulfil our or your legitimate interests, such as:
- Our regulators
- Law enforcement agencies
- Public authorities and agencies with whom we work in connection with the provision of water and sewerage services
- Other water and sewerage companies where required for the supply of water or sewerage services to your supply address
- Our advisors
- Software providers for our IT systems
- Credit reference agencies and debt collection services
- Other third parties providing assistance to our customers, such as bottled water suppliers for vulnerable customers
- Contractors who carry out activities to educate the public on matters relating to our regulated services (such as water efficiency and leakage)
- Partner Contractors and third-party contractors (and their sub-contractors) who carry out work on our behalf, such as a works contractors undertaking repairs
Third Party processing and marketing, including HomeServe and WaterAid
For some of our back-office functions, we use third party processors. We carry out Data Privacy Impact Assessments (DPIA) before engaging with the third party and ensure that we have suitable contracts in place with them to protect individuals’ Personal Data. The relationships with third parties include:
|Paragon Customer Communications Limited||Processing bill printing and mailing
Receipt of invoice remissions
|Customer account management|
|The Post Office||Taking payment for customer bills||Customer account management|
Equifax (credit reference agencies)
|To carry out credit searches regarding financial status such as debt or credit worthiness||Customer account management|
|Sprout Social Media limited
Live Person - WhatsApp
|To manage SWW’s social media accounts including direct customer enquires||Customer Communications|
|HomeServe||Membership of insurance backed domestic plumbing services
|Customer asset protection|
|Link||Provides processing and management of Shareholder information||IT and Infrastructure
|Kier and R&M (third party infrastructure repair maintenance contractors)||To communicate with customers in event of a leak, repair etc
Drinking water services
Waste water services
|SWW asset protection|
|WaterAid||To communicate with customers providing promotional material international water charitable||Customer Communications|
Our Regulators and other agencies
We work closely with our Regulators and other agencies to enable them to fulfil their (and our) legal obligations and as such, in sone circumstances we are required to provide them with Personal information. This information could be, for example
- information in relation to a water quality incident, which is provided to the Drinking Water Inspectorate (DWI)
- information relating to a data protection matter, provided to the Information Commissioners Office (ICO)
- customer complaint information and company performance information provided to Ofwat, Consumer Council for Water or WATRS
- postcode data relating to flooding in relevant areas provided to the Environment Agency
- customer satisfaction and survey data provided to Ofwat.
Sharing with Ofwat
We share your Personal Data, by statutory requirement, with Ofwat to help them regulate customer service and so they can measure and score our (and other water companies) performance in specific areas, namely, Customer Measure of Experience (C-MEX) and Developer Services Measure of Experience (D-Mex). Using the information we provide, Ofwat conduct their own surveys with customers who have contacted us for any reason. These calls are not marketing calls, but if you would prefer that we do not share your details with Ofwat please let us know by contacting us using the contact details provided below.
Ofwat are a Data Controller for the information we provide to them as they require this information using their statutory powers and they choose how to use this data; they are not acting on our instruction. Please contact Ofwat directly if you have any queries relating to these surveys.
Transfer of data outside of the UK and EEA
In processing Personal Data to carry out our activities, SWW will in some circumstances transfer Personal Data to third party processors located outside United Kingdom or the European Economic Area ("EEA") or allow Personal Data to be accessed by processors outside the UK or EEA.
As an example, SWW use the services of TATA consultancy services in India and Manilla to assist with SWW administration work, using a secure link to our protected system. Certain software providers located in India and other third countries may need to access Personal Data records to fix faults in that software used. We ensure that we act in compliance with UK data protection law and that our third-party processors operate to very high standards and are bound by contractual agreements to maintain data security and confidentiality.
Security and storage of Personal Data
All information you provide to us - whether on paper, verbally or electronically - is stored securely. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your internet connection when you send us your data; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to help prevent unauthorised access.
Processing of information about children
We take the privacy of children very seriously. We do not expect to routinely process information about children, nor would we expect to have interactions with children in the course of our usual business, save for assessment of applicable social or other tariffs Should we need to process data about children (those under 13), we will seek appropriate consent from an adult with parental responsibility or appointed guardian. Any child's personal details you provide us will only be used for that purpose, for example for the use in an application for an assisted tariff.
Keeping information accurate and up to date
We will check the accuracy of any Personal Data at the point of collection and keep the Personal Data accurate and up to date on advice from yourselves. If your personal details change (for example your name or household status), please let us know either by updating your MyAccount details or by letting us know at email@example.com
We will take reasonable steps to destroy or amend inaccurate or out-of-date data. The law and our regulatory requirements determine the length of time information must be kept. We will not keep your Personal Data longer than is necessary.
How you can access and update your information: Exercising your Rights
If you have an account with “MyAccount”, you can check that the information that we hold about you as an account holder is up to date. If you do not have a “MyAccount” account, you may contact us using contact details below to enquire.
As a Data Subject, you have a number of rights in relation to your data under UK data protection law. For full information on your Rights, you can read the guidance from the Information Commissioner's Office at www.ico.org.uk/. A summary of these rights is provided below:
|Individual Rights||What this means|
|Access||You can ask us to confirm whether we are processing your data and request a copy of that data in a commonly used, machine-readable format - see below on Subject Access Requests.|
|Rectification||You can ask that your Personal Data be corrected if you believe it is inaccurate or incomplete.|
You can ask us to erase your Personal Data, if –
Please note: there is not an absolute right to erasure as there are some circumstances where we will be unable to erase Personal Data – such as where we are obliged by law to retain data so that we can fulfil our legal obligations, or if we need to retain data to protect our own legal rights or to defend claims made against us.
|Restriction||You can ask us to restrict your Personal Data (keep but not use). However, in some circumstances this right may not apply, for example, where we have a legal obligation to use the data.|
|Objection||You can object to any processing of your Personal Data for some specific purposes, such as marketing.
Please note, this right does not apply in all circumstances and you can only object to processing when we are using your data for a task carried out in the public interest, for the exercise of official authority, for legitimate interests, for scientific or historical research, or statistical purposes, or for direct marketing purposes.
If you would prefer not to receive marketing information from us please contact us using the details below.
If you would like to exercise any of these rights, please contact our Customer Service team using the contact details below.
Subject Access Requests: Exercising your rights
As an individual (Data Subject), you can make a formal request for information we hold about you. Please note, this Right of Access does not extend to or entitle you to have any access to someone else’s Personal Data. For example, you cannot use this right to request information about your neighbours’ or previous occupants of your property; you are only entitled to copies of your Personal Data.
However, you can make requests on behalf of someone else either where you have legal authority to do so, or where the individual have given their permission for you to access their data on their behalf. In these situations, we will always ask for proof of legal authority, or permission from the individual for which you are seeking Personal Data, before we will provide any Personal Data.
There are a number of companies (third parties) offering on-line services to help you to exercise your rights under the UK GDPR. Where we receive Rights requests via these third-party providers, we will contact you directly, using the information you have provided via the third-party, to confirm your identity and the nature of your request; we will deal directly with you from this point on to action your request.
Please note, where we receive Rights requests from third-party providers and there is insufficient information for us to verify the requester’s identity or authority, or that of the data subject, it will not be possible for us to respond to the request.
If you would like to submit a Subject Access Request, please contact the Customer Service team using the contact details set out below.
When receiving telephone enquiries, we will only disclose Personal Data we hold on our systems if the following conditions are met:
- We will check the caller's identity to make sure that information is only given to a person who is entitled to it.
- We will suggest that the caller put their request in writing if we are not sure about the caller's identity and where their identity cannot be checked.
Where a request is made electronically, data will be provided electronically where possible
Links to other websites
Our website may contain links to other websites run by other organisations.
This privacy notice applies only to SWW and Pennon’s group companies‚ so we encourage you to read the privacy statements on the other companies’ websites you visit.
We cannot be responsible for the privacy policies and practices of other sites even if you access those using links from our website. In addition, if you linked to our website from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the notice of that third-party site.
Who can I contact about my Personal Data?
SWW's details are:
South West Water Limited, Company Number 2366665, of Peninsula House, Rydon Lane, Exeter, EX2 7HR, Data Protection Public Registration number Z4569683. Our nominated representative for the purpose of the Regulation is the Data Protection Officer of Pennon Group PLC.
Should you need to contact us to discuss the handling of your Personal Data or to submit a request to exercise one of your Data Protection Rights, please contact our customer service team:
|South West Water||Bournemouth Water|
|Telephone||0344 346 1010||01202 590059|
|Write to||South West Water, PO Box 4762, Worthing, BN11 9NT|
Or you may chat with us on WhatsApp, send us a Private Message using Facebook and Direct message us on Twitter.
If you wish to raise a complaint on how we have handled your Personal Data, in the first instance please telephone us on 0344 346 1010 and we will try to resolve you query over the phone. We may refer the matter to our Data Protection Officer who will investigate further.
Our Data Protection Officer can be contacted via email:
Email - firstname.lastname@example.org
Or write to - Pennon Data Protection Officer, Peninsula House, Rydon Lane, Exeter, EX2 7HR.
If you are not satisfied with our response or believe we are processing your Personal Data not in accordance with the law you can refer your complaint to the Information Commissioner's Office (ICO).
How can I contact the Information Commissioner's Office?
Whilst we hope that we can address any questions or concerns you might have, should you need to contact the Information Commissioner's Office you can do so using one of the following methods:
Write to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113 or 01625 545 745