Privacy and Cookie Policy

This Privacy Policy explains how Smart DCC deals with personal data that it collects and processes, what we use it for and how you can exercise your rights (if you are a data subject) or find out more information. It also sets out details of the cookies used on our website and how they may collect or use your data.

To help you find the content which is most relevant to you, this Privacy Policy is divided into the following sections:

About Smart DCC

Smart DCC Ltd is a wholly owned subsidiary of Capita plc.

As a licensee of the Department of Business, Energy and Industrial Strategy (BEIS) we are regulated by the Smart Meter Communications Licence which is overseen by Ofgem. Under this licence, we also abide by the Smart Energy Code, which is administered by the Smart Energy Code Administrator and Secretariat

Under our Licence and the Smart Energy Code, we are responsible for establishing and managing the data and communications network to connect smart meters to the business systems of energy suppliers, mobile telecommunication network operators and other authorised service users of the network.

Our address and contact details for data protection matters can be found here.


Personal Data relating to your Smart Meter

Smart DCC provides the communications infrastructure which allows energy suppliers and smart metering devices to communicate with one another and share data. Smart DCC does so under its Licence and also the Smart Energy Code, a key objective of which is to ensure that all data, including personal data, is protected through effective security measures.

Security and privacy is at the heart of the network we provide. Smart DCC works tirelessly, with energy suppliers, other industry bodies and our Service Providers to ensure that personal data is processed securely, using state of the art technology and systems.

You can find general information concerning the security of our network via our Security Factsheet or by contacting us.

If you are a consumer and would like to know more about how your specific data is processed, or exercise your other data protection rights in connection with your Smart Meter, you must do this via your energy supplier. By law we are not permitted to answer your requests directly but we will support your energy supplier in responding to your requests, where necessary.


People working in the energy industry

If you work in the energy industry in relation to smart metering, such as for an energy supplier, or another business providing equipment or services in the smart metering eco-system, then we may process your personal data from time-to-time. This might be to respond to communications which you send to us, to manage contract(s) and business relationship(s), to allow you to use Smart DCC's systems (only certain authorised individuals are authorised to do this), or to provide you with information regarding our work and what is happening with the smart metering implementation programme, or to invite you to industry events where smart metering issues will be discussed.

We will receive your data either because you, your employer or work-colleagues have provided it, or because another body involved in smart metering (such as the Smart Energy Code Administrator) has asked us to get in touch with you.

The data we collect will include your contact details and, if you are authorised to use Smart DCC's systems, the information you provide at the point where you seek that authorisation via our registration forms. Smart DCC is a data controller in relation to this data.

Engaging with stakeholders, building and maintaining relationships with businesses involved in smart metering and ensuring people in industry can use our systems are all a crucial part of the Smart Metering Implementation Programme. Without this, we would not be able to perform our role effectively, or fulfil the obligations in our Licence or the Smart Energy Code. We therefore rely upon legal obligations and legitimate interest as a basis for processing your data (you can learn more about legal obligations and legitimate interest here.

That said, if you are receiving communications from us in relation to the Smart Metering Implementation Programme or our events and would like us to stop, please e-mail us and we will respond to your request promptly.

Personal Data collected via our website

We receive your personal data when you fill in forms, click on links or receive Cookies from us. The purpose for which we process your personal data is the same as the reason you gave it to us. Meaning:-

  • If you give us your e-mail address to subscribe to our newsletter, we will only use your e-mail address for that purpose. We will always give you the option to opt-out of our newsletters when you receive them.
  • If you contact us with a query, we will use your personal data to respond to your query.
  • If you send us your CV or apply for a job, we will use your personal data in order to send you details of roles which may be of interest.
  • Please visit the Cookies section below for details of how they are used.

Smart DCC is the data controller for personal data received via our website. The data we process will be that which you provide to us via the relevant form or link. We will either receive your personal data directly, or via data processors who host and operate our website for us.

The lawful basis for processing your data is consent, where we ask for it. Otherwise, we rely upon our legitimate interest, namely responding to queries and communications from the public. Rest assured, we only use your data in ways that are necessary for the purposes for which you provided it.


A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you other than the data you choose to share with us. Cookies within our site are related to Google Analytics, a very popular tool used to analyse sites usage and traffic. You can find more about the specific cookies we use here.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies but you can usually modify your browser setting to decline cookies and delete old ones if you prefer. This may prevent you from taking full advantage of the website. Your browser provider will provide help pages and FAQs that will help you find out how to do this.

Who receives your data from us

Smart DCC shares personal data with third parties when necessary and subject to strict security and other safeguards to ensure that the privacy of your personal data and your rights as a data subject are protected.

The categories of recipients who may receive your personal data are as follows:-

  • If you are an Energy Consumer, and Smart DCC processes your personal data, we may be required to share it with our Service Providers, your energy supplier and their sub-contractors in order to ensure that information passes to and from your smart metering devices in the proper way. You should contact your energy supplier in the first instance if you wish to learn more or exercise your data subject rights.
  • If you work in the energy industry, we may appoint processors and sub-processors who provide us with IT storage, hosting, application, communication and/or administration services, through which your personal data is stored and processed.
  • If you provide data via this website we may receive your personal data via companies who provide services relating to our website and other companies who provide us with IT storage, hosting, application, communication and/or administration services, through which your personal data is stored processed.
  • If you accept Cookies from us, the data we receive will be used by us and our website provider to monitor traffic and usage of our site (as set out above)

Rest assured, Smart DCC and anyone receiving your data from us are required to only use it for the purposes for which that data was originally provided. The security and integrity of your data will be protected.

Where your data is processed

Smart DCC processes data either in the UK or European Economic Area and places its suppliers under contractual obligations to do the same.

How long your data is stored

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements, including requirements under our Licence and the Smart Energy Code.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.


Your Rights and how to exercise them

Under certain circumstances, you have rights under data protection laws in relation to your personal data. Please click on the links below to find out more about these rights:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

If you wish to exercise any of your rights please contact the data protection team using the details below.

As set out above, we may only respond to your requests where you are not an energy consumer. If you are an energy consumer and want to exercise your data subject rights, you must contact your energy supplier to do this.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances or if we have another basis in law to refuse your request.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Contact the Data Protection Team

If you wish to contact Smart DCC regarding personal data which you have submitted via this website, or through industry events, or another reason unrelated to your Smart Meter devices, our contact details are as follows

Smart DCC Limited


2nd Floor, Ibex House, 42-47 Minories, London, EC3N 1DY

0203 725 8656

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues ( We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

If you wish to learn more about how personal data is processed in connection with your Smart Meter devices, please contact your energy supplier. Smart DCC acts as a data processor for the energy industry and is not able to comply with requests

Changes to the privacy notice

This version was last updated on [15 May 2018] and historic versions can be obtained by contacting us.  Please check back to our website from time to time to check for changes.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over the other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.


Below we set out some further guidance on terms which we use in this privacy notice: -


Legitimate Interestmeans the interest of our business in conducting and managing our business to enable us to work with the energy industry, suppliers and other people we interact with (e.g. via our website) to best support the Smart Metering Implementation Programme. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us

Comply with a legal or regulatory obligationmeans processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Consent means that you have provided your consent to us to process your personal data and that consent has been obtained in accordance applicable laws. Where we rely upon your consent to process your data, you may withdraw it at any time (this will not affect the lawfulness of processing prior to the date upon which you withdraw your consent).


You have the right to:

Request accessto your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correctionof the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasureof your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processingof your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processingof your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transferof your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any timewhere we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Google Analytics Cookies

Cookies within our site are related to Google Analytics, a very popular tool used to analyse sites usage and traffic. You can find more about the specific cookies we use here It helps us refine the site and tailor the site's content. The Cookies we use are listed below: -


This cookie is used to establish and continue a user session within this site. When you view a page on this site, the Google Analytics code attempts to update this cookie. If it does not find the cookie, a new one is written and a new session is established. Each time you visit a different page on this site, this cookie is updated to expire in 30 minutes, thus continuing a single session for as long as your activity continues within 30-minute intervals. This cookie expires when you pause on a page on this site for longer than 30 minutes.


This cookie is typically written to the browser on your first visit to this site. If the cookie has been deleted by the browser operator, and the browser subsequently visits this site, a new cookie is written with a different unique ID. This cookie is used to determine unique visitors and it is updated with each page view. Additionally, this cookie is provided with a unique ID that Google Analytics uses to ensure both the validity and accessibility of the cookie as an extra security measure.


This cookie stores the type of referral used to reach this site, whether via a direct method, a referring link, a website search or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within this site. The cookie is updated with each page view to this site.