Privacy Policy
Last updated: 31 July 2026
1. Who We Are
SaveFirst ("we", "us", "our") is a UK-based lead generation and energy savings consultancy that helps households reduce their gas, electricity, broadband and mobile bills. We operate the website savefirst.co.uk.
We are the data controller for the personal data we collect through our website and WhatsApp communications. If you have any questions about how we handle your data, you can contact us at:
- Email: shivamkanda_@outlook.com
- WhatsApp: +44 7877 600831
2. What Data We Collect
We collect the following personal data when you interact with our website or contact us:
2.1 Data you provide directly
- Full name - provided via our website forms or WhatsApp
- Email address - provided via our website forms
- Phone number / WhatsApp number - provided via our website forms or WhatsApp
- Household bill information - photos or details of your gas, electricity, broadband and mobile bills sent via WhatsApp or discussed during our consultation
2.2 Data collected automatically
- Device and browser information - browser type, operating system, screen resolution
- Usage data - pages visited, time spent on site, referring URL, click behaviour
- IP address - collected automatically by our analytics and hosting services
- Cookie and pixel data - see Section 6 (Cookies) for full details
3. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| To contact you about your bill audit request and provide your savings report | Performance of a contract / Legitimate interest |
| To pass your details to our partner utility provider so they can prepare your savings quote | Legitimate interest / Consent |
| To send you follow-up communications about your enquiry | Legitimate interest |
| To send you marketing communications (only with your consent) | Consent |
| To analyse website traffic and improve our service | Legitimate interest |
| To run targeted advertising campaigns on platforms such as Meta (Facebook/Instagram) | Consent (via cookie banner) |
| To prevent fraud and ensure website security | Legitimate interest |
4. Who We Share Your Data With
We may share your personal data with the following categories of recipients:
- Our partner utility provider - to prepare your personalised savings quote and handle the switching process on your behalf. They process your data as an independent data controller under their own privacy policy.
- Supabase (database hosting) - we store lead information securely using Supabase, a cloud-hosted database platform. Data is stored on servers within the EU/EEA.
- Google (Analytics) - we use Google Analytics 4 to understand how visitors use our website. Google processes data as a data processor on our behalf.
- Meta Platforms (Facebook/Instagram) - we use the Meta Pixel for advertising measurement and audience targeting. Meta processes data as a joint controller for certain activities.
- WhatsApp (Meta) - when you contact us via WhatsApp, Meta processes your messages in accordance with WhatsApp's privacy policy.
- FormSubmit - form submissions may be routed via FormSubmit for email delivery.
We do not sell your personal data to any third party. We only share data as described above and where necessary to provide our service to you.
5. International Data Transfers
Some of our third-party service providers (including Google, Meta, and Supabase) may process your data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO)
- UK adequacy decisions for the receiving country
- The provider's compliance with recognised data protection frameworks
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. Below is a summary of the cookies we use:
6.1 Essential cookies
These are necessary for the website to function and cannot be switched off. They include cookies that remember your cookie consent preferences.
6.2 Analytics cookies
We use Google Analytics 4 (measurement ID: G-RDFXYFJS5Q) to understand how visitors interact with our site. GA4 collects data including pages visited, session duration, traffic sources, and general geographic location. This data is aggregated and does not directly identify you. Google Analytics uses cookies such as _ga and _ga_* which typically expire after 2 years.
6.3 Advertising cookies
We use the Meta Pixel (Facebook Pixel) to measure the effectiveness of our advertising campaigns on Facebook and Instagram, and to build custom audiences for ad targeting. The Meta Pixel places cookies on your device and sends data to Meta about your visit to our site, including pages viewed and actions taken. You can manage your ad preferences through your Facebook account settings or opt out via the Digital Advertising Alliance.
6.4 Managing cookies
You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Most browsers allow you to:
- View what cookies are set and delete them individually
- Block third-party cookies
- Block cookies from specific sites
- Block all cookies
- Delete all cookies when you close your browser
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Lead enquiry data (name, email, phone) - retained for up to 24 months from the date of your last interaction with us, unless you request deletion sooner
- Bill information - retained for up to 12 months to provide our service, then securely deleted
- Analytics data - retained in Google Analytics for up to 14 months (GA4 default retention period)
- WhatsApp messages - retained for as long as the conversation remains active or up to 12 months
When data is no longer needed, it is securely deleted or anonymised.
8. Your Rights
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:
- Right of access - you can request a copy of the personal data we hold about you
- Right to rectification - you can ask us to correct any inaccurate or incomplete data
- Right to erasure - you can ask us to delete your personal data ("right to be forgotten")
- Right to restrict processing - you can ask us to limit how we use your data
- Right to data portability - you can request your data in a structured, commonly used, machine-readable format
- Right to object - you can object to processing based on legitimate interests or direct marketing
- Right to withdraw consent - where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at shivamkanda_@outlook.com or message us on WhatsApp at +44 7877 600831. We will respond to your request within one calendar month as required by law.
9. Marketing Communications
We may contact you by email, phone, or WhatsApp to follow up on your bill audit enquiry. This is based on our legitimate interest in completing the service you requested.
We will only send you marketing communications (offers, tips, promotions unrelated to your specific enquiry) with your explicit consent. You can opt out of marketing at any time by:
- Clicking the unsubscribe link in any marketing email
- Replying "STOP" to any WhatsApp marketing message
- Emailing us at shivamkanda_@outlook.com
10. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including:
- Encrypted data storage via Supabase (data encrypted at rest and in transit)
- HTTPS encryption across our entire website
- Access controls limiting who within our organisation can view your data
- Regular review of data processing activities and security practices
While we strive to protect your personal data, no method of transmission or storage is 100% secure. If you become aware of any security breach, please contact us immediately.
11. Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a person under 18, please contact us and we will delete it promptly.
12. Third-Party Links
Our website may contain links to other websites that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.
14. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
- Website: ico.org.uk
- Phone: 0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.
15. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
- Email: shivamkanda_@outlook.com
- WhatsApp: +44 7877 600831
- Website: savefirst.co.uk