Privacy notice

How ITEA Limited collects, uses, shares and protects personal data, under UK data protection law.

Who we are

ITEA Limited is the controller of personal data collected through this website. We are registered in England and Wales, company no. 16054703, with our registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We trade as BizUp360, and bizup360.co.uk has its own privacy notice for the services we provide there. Contact us at hello@itealimited.co.uk.

What we collect

When you contact us: your name, email address, business name, the topic and your message.
When you ask us for quotes or become a customer: your contact and business details, site addresses, meter numbers, bills, usage, current contract details and anything a supplier, waste company, EPOS or card machine provider needs to give you a quote.
If you sign a Letter of Authority: the authority itself, and the information your current supplier sends us under it.
If you accept analytics cookies: pseudonymous usage data through Google Analytics 4 (see our cookie policy).

Why we use it, and our lawful basis

To reply to you: our legitimate interest in answering enquiries, or steps you ask us to take before a contract.
To get quotes and arrange the contracts you ask for: to take steps at your request before a contract, and to perform our contract with you.
To speak to your current supplier: only under a Letter of Authority you have signed.
To meet our legal and regulatory duties, such as keeping records, handling complaints and working with the Energy Ombudsman: legal obligation.
To run and secure our business: our legitimate interests.
Website analytics: your consent, which you can withdraw in Cookie settings.

Marketing

We do not send marketing emails to sole traders or partnerships unless you have given consent. For limited companies and other corporate bodies, we may send relevant business emails under our legitimate interests. Every marketing email lets you opt out, and you can also email us to stop at any time.

Letters of Authority

A Letter of Authority lets us contact your current supplier for you, to ask for your usage, rates and contract details, and to ask suppliers for quotes. It does not commit you to any contract. It says how long it lasts, and you can withdraw it at any time by emailing hello@itealimited.co.uk.

Who we share it with

Energy, gas and waste suppliers on our panel, EPOS and card machine providers, to get quotes and arrange the contracts you ask for. When you sign up with them, they use your data under their own privacy notices.
Your current supplier, under your Letter of Authority.
ITEA Pakistan Pvt Limited, our sister company, which provides IT and website support to us as our processor under a written contract.
Service providers who help us run the business, under contract: Web3Forms (delivers website form messages to us), Zoho Mail (email) and our website host.
The Energy Ombudsman, regulators, or others where the law requires it or a complaint is referred.

We do not sell personal data.

Website forms and email

When you send a form on this website, your message is delivered to our team at callbacks@itealimited.com by Web3Forms, a form delivery service acting as our processor. Web3Forms runs on Amazon Web Services, may keep a copy of the message for a limited period under its own retention policy, and does not sell or share it. Our email is hosted by Zoho Mail, also acting as our processor. We keep form messages for the periods set out below.

International transfers

ITEA Pakistan Pvt Limited processes data for us in Pakistan. The UK has not made adequacy regulations for Pakistan, so we protect these transfers with the ICO’s International Data Transfer Agreement (IDTA) and a transfer risk assessment. Web3Forms and Zoho Mail may process data outside the UK, including in the United States and India. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge where a provider is certified) or the ICO’s International Data Transfer Agreement or Addendum in the provider’s data processing terms.

How long we keep it

Enquiries that do not lead to a contract: up to two years after our last contact. Customer records, Letters of Authority and contract documents: six years after the contract they relate to ends, to meet legal and accounting obligations and to deal with complaints. Complaint records: six years after the complaint is closed.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025) you can ask to access, correct or delete your data, to restrict or object to how we use it, and to move it. You can withdraw consent at any time. Email us and we will reply within one month. When you ask for a copy of your data, we will make reasonable and proportionate searches for it. We do not make decisions about you by automated means alone.

Complaints

If you are unhappy with how we have handled your data, please tell us first at hello@itealimited.co.uk. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Cookies and electronic marketing

We follow the Privacy and Electronic Communications Regulations (PECR). Analytics cookies are only set if you accept them. See our cookie policy.

Changes

We will post any changes here with a new date.