Privacy notice
Last updated: 7 October 2026
Who we are
Borunen Partners Ltd, registered in England and Wales (company no. 17360189), registered office 82A James Carter Road, Mildenhall IP28 7DE, is the data controller for the personal data described in this notice. You can contact us at [email protected] or call 0330 223 8310.
What we collect
When you contact us or ask for a review, we collect your name, organisation, email address and telephone number if you give it, and whatever you tell us about your situation.
When we carry out a review, we collect the records needed to do the work: utility bills and statements, meter readings, account and supply numbers, correspondence with suppliers, and information about your premises and charitable status. These records sometimes contain the names and contact details of your staff, trustees or volunteers.
When you visit our website
When you visit this website, our hosting provider, Cloudflare, processes technical information such as your IP address and browser details in order to deliver the site and protect it against misuse and attacks. Our website also loads fonts from Google Fonts, which means your browser sends your IP address to Google. Our lawful basis is legitimate interests: operating a secure and functioning website.
Why we use it, and our lawful basis
We use enquiry details to respond to you and to assess whether we can help. Our lawful basis is legitimate interests: responding to someone who has approached us about our services.
We use account records to review your charges, prepare and pursue claims, and correspond with suppliers, water companies, billing authorities and HMRC on your behalf. Our lawful basis is performance of a contract with you, or steps taken at your request before entering one.
We keep records of the work we have done in order to meet our legal and regulatory obligations, including tax and anti-money-laundering requirements where these apply. Our lawful basis is compliance with a legal obligation.
Who we share it with
To pursue a claim we share what is necessary with your energy suppliers, water companies, the relevant billing authority, HMRC, and where a dispute is escalated, the Energy Ombudsman or an equivalent body. We share information with these parties only on your authority and only so far as the claim requires.
We also use service providers who process data on our behalf: Cloudflare, which hosts this website and forwards email sent to our address; Web3Forms, which receives the details you submit through our contact form and delivers them to us; and providers of email and document storage. They act on our instructions and may not use your information for their own purposes.
We do not sell personal data, and we do not share it for marketing.
How long we keep it
We keep enquiry correspondence for up to two years if it does not lead to an engagement. Where we act for you, we keep case records for six years from the end of the engagement, which reflects the periods over which utility and tax claims can be reopened and the retention expected of business records.
Where it is held
Some of the service providers we use are based outside the United Kingdom or may process data outside it. Where personal data is transferred outside the UK, we make sure it is protected by safeguards recognised under UK data protection law, such as UK adequacy regulations or the UK's approved international data transfer agreement or addendum.
How it is protected
Access is limited to those who need it to do the work. Documents are held in access-controlled storage, accounts are protected by two-factor authentication, and material is deleted securely at the end of the retention period.
Your rights
You can ask for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict how we use it, object to our use of it where we rely on legitimate interests, and ask for it in a portable format. Write to [email protected] and we will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This website does not set analytics or advertising cookies. Our hosting provider, Cloudflare, may set a strictly necessary security cookie, for example to check that a visitor is not an automated program. This cookie is needed for the site to work securely and does not track you across other websites.
Other information
We do not make decisions about you based solely on automated processing, and we do not use your information for profiling. Our services are provided to organisations and are not directed at children.
Changes
If we change this notice we will update the date at the top of this page.