Privacy notice

We, meaning National Energy System Operator (“NESO”) whose registered office is St Catherine's Lodge, Bearwood Road, Sindlesham, Wokingham, Berkshire, RG41 5BN, are committed to respecting your privacy and complying with applicable data protection laws.

As we are a Data Controller of your personal data, we have provided this Privacy Notice to help you understand what personal data we collect about you, what we use it for and on what basis, and your rights in relation to that personal data.

Please note that we are no longer part of the National Grid plc group – for more information on how National Grid plc and its group companies may process your personal data, we recommend you refer to the National Grid plc privacy notice.

When may we collect personal data about you?

We collect personal data about you directly when you visit our website neso.energy and any other NESO website or portal, or when you otherwise communicate with us, for example by phone, email, social media channels, mail, or when you join a webinar or video call or visit one of our offices.

We may also collect your personal data automatically in certain circumstances, for example CCTV footage if you visit one of our offices or sites, or via cookies when you visit our website. For more details about NESO’s use of cookies, please see our cookie policy.

We may also collect personal data from public sources, for example from the Land Registry, or receive it from National Grid plc group of companies, joint venture partners, or service providers contracted to carry out work on our behalf.

What personal data may we collect about you and how will we use it?

Data protection law requires us to have a legal basis for using your personal data. We rely on one or more of the following legal bases:

Contract - Where we need to perform a contract we are about to enter into or have entered into with you. If you fail to provide personal data to us in connection with a contract we are about to enter into, or have entered into with you, this may prevent us from entering into that contract with you or from performing our contractual obligations toward you.
Legitimate interests -Where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure user experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless permitted under an alternative legal basis).
Recognised Legitimate Interest - In some circumstances, we may process personal data where it is necessary for a recognised legitimate interest. This includes processing that is necessary for purposes such as preventing and detecting crime, safeguarding vulnerable individuals, ensuring the security and resilience of our systems, responding to emergencies and sharing information with relevant authorities where required. Where we rely on this legal basis, we only process personal data that is necessary for the specific purpose and in line with applicable legal requirements.
Legal obligation – Where it is necessary for compliance with a legal obligation that we are subject to.
Public interest Where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in NESO.
Vital interests - Where the processing is necessary in order to protect your vital interests or those of another person. This is generally only the case where we need to protect someone’s life and covers emergency situations and matters of life and death.
Consent - Where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter. Where we rely on your consent for processing, you are free to withdraw this consent at any time.

Where we need your consent to hold your personal data, we will ask you separately to confirm your consent, either by a written statement or other ‘opt-in’ mechanisms, such as ticking a box or clicking on a button. In each case we will inform you separately from this notice about why we are collecting the personal data, how we will use it, how long we will keep it, and how you can subsequently opt-out if you change your mind.

You may have previously provided consent with respect to the use of your personal data to National Grid Electricity System Operator (ESO). You may withdraw your consent at any time. If you have any queries about our change in name and legal status, please contact our Data Protection Officer.

Purposes & Legal Bases

The following sections explain the different ways we may use your personal data and our legal bases for doing so. We may also process Special Category Personal Data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data and biometric data where it is used for the purpose of uniquely identifying a natural person; data concerning health or data concerning a person’s sex life or sexual orientation) and data relating to criminal convictions or offences and have indicated below where this is the case.

Purpose	How we use personal data	Legal basis
1. Customer, Supplier and Consumer Data	Customer, Supplier and Service Provider Data If you are a customer, supplier or service provider, we may need to process certain data such as the names and contact details of key staff in order to consider applications, proposals and tenders as well as to manage and fulfil any contractual obligations. In some instances, records relating to qualifications, certificates, training, professional licences and health and safety competency records may be collected in order to fulfil legal obligations.	Contract; Legal Obligation
1. Customer, Supplier and Consumer Data	Consumer / Meter Data We may receive usage data associated with consumers' meters to help us analyse energy demand. This data is linked to Meter Point Assessment Numbers (MPANs), which are related to the energy supply at a property and not the energy account with a supplier. Energy suppliers will notify consumers about any data sharing with NESO. NESO utilises this data for energy system planning and management purposes and does not utilise it to identify individual consumers. Also, where you register to participate in our balancing services, we will collect your Meter Point Administration Number (MPAN) and share with Distribution Network Operators to identify potential conflicts between NESO instructible assets and constraints on the Distribution Network Operator (DNO) network. This helps them understand where our instructible assets are located and enables them to provide us advice on network constraints.	Public Task/Public Interest
2. Projects, Consultations and Assessments	Consultations Consultations are normally carried out by consent with individuals choosing to participate. Further information will be provided in the consultation information.	Consent
2. Projects, Consultations and Assessments	Stakeholder and Community Engagement and Assessments NESO may seek the views of stakeholders and members of communities when considering options and projects to assess the impact on the environment and communities.	Public Task/Public Interest
2. Projects, Consultations and Assessments	Keeping You Informed About New Projects If an electricity project is being proposed in your local area, we may invite you to sign up to receive information and updates on the project. If you provide your name and email address, we will use this with your permission, to send you project updates. You may opt-out of receiving updates at any time. You will be informed of how to do so in each email we send you.	Consent
3. Information Requests	Processing Subject Access Requests (SARs) and other Data Subject Rights Requests If you submit a SAR, we will perform a reasonable search of relevant systems and relevant hard copy data stores. We will hold copies of your request, along with copies of the personal data retrieved and disclosed to you, or withheld or redacted where a valid exemption applies, as evidence of compliance. We may be required to share such information with the Information Commissioner's Office (ICO), for example to comply with an audit or investigation. Where we hold any Special Category Personal Data as such evidence, we do so on the basis of establishing, exercising or defending legal claims. Similarly, we will process your personal data to manage any other requests from you in relation to your data subject rights and will retain records of our actions and responses. We may need to request copies of ID in order to process your SAR or other data subject rights request.	Legal Obligation
3. Information Requests	Information Request Notices NESO has legal powers under the Energy Act 2023 to issue an Information Request Notice where we reasonably require information to undertake our functions. Further information about the requirements and how data will be managed will be provided as part of the Information Request Notice.	Public Task/Public Interest
3. Information Requests	Processing Requests under the Freedom of Information Act (FOIA) and Environmental Information Regulations (EIR) If you submit a request for information that falls under the FOIA or EIR, you must provide your name and contact details. You may also choose to provide other information about yourself. We will use this information for the purpose of responding to your request and dealing with any related queries or complaints. We may be required to share this information with the Information Commissioner's Office (ICO), for example to comply with an audit or investigation. For more information about FOIA and EIR, please visit our website: Freedom of Information and Environmental Information Regulations \| National Energy System Operator.	Legal Obligation
3. Information Requests	Responding to General Queries and Complaints If you contact us with a query or complaint about any of our activities, we will record the details of your request. If we are unable to immediately resolve the matter, we will ask you to provide contact details of your choice, such as a telephone number, email, or postal address, which we will use to contact you with updates when we have investigated the matter further. We may compile aggregated data for service improvement and reporting purposes but will not identify individuals.	Legitimate Interests
3. Information Requests	Voice Recording of Phone Calls Your voice may be recorded when making calls to some company numbers, for example help desks and trading desks. You will be informed at the start of the call if the call is to be recorded. We use these recordings to comply with our regulatory obligations, monitor compliance, conduct safety investigations, and for training purposes.	Legitimate Interests, Legal Obligation
4. Employee Recruitment	Recruitment In the event you have applied for a job at NESO, we use the personal data you submit to consider and process your application, including shortlisting and interviews. We collect and use the following items of personal data which are necessary in order to enter into and manage your contract of employment, or if you are a Contractor, in the context of your assignment, with us: job application form; home contact details; date of birth; CV and cover letter; education and past employment records; professional memberships and licences; diversity, equality and inclusion information; interview notes and scoring; references and employment verification; job offer letter; acceptance letter; contract of employment and emergency contact details. Information on diversity, equality and inclusion is Special Category Personal Data which we process for reasons of substantial public interest.	Contract, Public Interest
4. Employee Recruitment	Expats only: In the event that your work assignment requires you to work for NESO outside of the UK, we will process the minimum personal data necessary to assist you and your family to relocate, including your passport details, salary and expense details, names, age and gender of your children. The types of personal data processed will depend on the requirements of the relevant national, regional and municipal authorities.	Contract
4. Employee Recruitment	Right to Work Checks We have an obligation under the Immigration, Asylum and Nationality Act 2006 to check that you have a right to work for us. Data items we use for this purpose include your date and place of birth; nationality; photograph; signature; and National Insurance Number. If you were born outside the UK then, depending on your nationality and immigration status, we may also need to retain copies of additional documents such as International Passport; National Identity Card; Registration Certificate or Document Certifying Permanent Residence or Permanent Residence Card issued to you by the Home Office; Biometric Residence Permit or Immigration Status Document; Birth or Adoption Certificate or Certificate of Naturalisation as a British Citizen; Certificate of Application or Application Registration Card issued along with a Positive Verification Notice issued by the Home Office; online Right to Work check response document. Special Category Personal Data such as biometric ID will be processed where it is necessary for employment purposes.	Legal Obligation
4. Employee Recruitment	Pre-employment Checks Any employment offer will be contingent on the completion of pre-employment check which will require the use of your personal data and the collection of further personal data. Prior to onboarding, we will commence background checks on all employees and require the employer of our Contractors and Managed Service Providers (MSPs) to do the same. The level of checks carried out will depend on your role and your level of access to our sites, systems and data. This may involve ID verification, address verification, employment and/or education history verification. They may also include basic criminal record check (unspent convictions only); and international fraud and sanctions check. These checks are carried out in the interest of protecting our assets, employees, contractors, MSPs, and the public. Special Category Personal Data such as biometric ID will be processed where it is necessary for employment purposes. Personal Data Relating to Criminal Convictions and Offences is processed where it is necessary to meet employment obligations or statutory purposes or where it is necessary as a protective function.	Legal Obligation, Contract
4. Employee Recruitment	Sponsored Migrants In addition to the Right to Work checks, if you are a sponsored migrant we also have an obligation under the Immigration Rules to process the following: a history of your contact details; a record of your absences from work; copies of your payslips and frequency of salary payments; details of your contract of employment; details of the work that you have been contracted to do; your hours and rate of pay; and copies of any qualifications you hold to confirm skill level, such as a degree certificate.	Legal Obligation
4. Employee Recruitment	Contacting you Prior to the Commencement of your Employment Where you have agreed for us to do so, we use the personal contact details you provide to provide you with information and links to assessments that you need to complete. For example, completing a Driver Risk Assessment prior to your start date for roles that include a company car.	Contract
4. Employee Recruitment	Accessibility Requirements and Reasonable Adjustments You may provide us with information about reasonable adjustments you require under the Equality Act 2010. We will process the personal data to comply with our legal obligations. Where the data includes Special Category Personal Data, we will process this to fulfil our legal obligations as an employer and in the substantial public interest.	Legal Obligation
4. Employee Recruitment	Occupational Health Assessment Our processing of information related to physical, mental and wellbeing health is undertaken for the assessment of an individual’s working capacity under our Health and Safety legal obligations and in line with our employment law obligations.	Legal Obligation
4. Employee Recruitment	Occupational Health records We are obliged by law to keep a record of your date of birth, home address, National Insurance Number, employment commencement date and opinions of Occupational Health professionals as to your fitness to work or carry out particular tasks, and any recommended restrictions or workplace adjustments required to ensure you can work in a manner that reduces the risks to your health. In conducting the assessment of your health, our Occupational Health Service provider will collect special category personal data regarding your health, which they are responsible for keeping confidential. Any Special Category Personal Data shared with us in relation to Occupational Health will be processed on the basis that it is necessary for employment purposes, preventative or occupational medicine.	Legal Obligation, Consent
4. Employee Recruitment	Onboarding If your application is successful and you accept a job offer, we will use your personal data from your application to prepare for you joining NESO. We will collect further personal data from you at this stage, e.g. bank account details for our payroll. We will also add personal data from your application to your staff records. There is a separate Privacy Notice for employees which you can review after joining.	Contract
5. Information about Employee Dependents and Emergency Contacts	Employee Emergency Contacts We collect names and contact details of emergency contacts for our employees which are securely stored in our employee files and will only be used in emergency situations.	Legitimate Interest, Vital Interest
5. Information about Employee Dependents and Emergency Contacts	Conflicts of Interests / Shareholdings We ask employees to declare any conflicts of interests, including shareholdings in the energy sector that may give rise to a conflict of interest. This may include information about their close family members. This is to meet the conditions of our licence which require the independence of NESO. Processing of personal data related to shareholdings is necessary for us to perform our public task as an independent system operator in the public interest and is required to fulfil our licence conditions. This extends to a requirement to ensure the impartiality and integrity of the actions of individual employees. Personal data will be collected and processed to ensure compliance with these requirements and as the basis for assurance and compliance reports. Personal data may also be used to support investigations where NESO believes a breach of this policy may have occurred. This personal data will not be shared outside the organisation unless there is a legal, audit, or law enforcement requirement to do so.	Public Task, Public Interest
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Workgroup, Committee Meetings and Stakeholder Groups Where you are a member of a committee, workgroup, stakeholder group that supports our licensed activities, we will process your name and contact details for correspondence, and information about your attendance at meetings. Agendas, minutes, and action records may also identify you. These may also be published on our websites for transparency.	Public Task, Public Interest
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Events and Forums If you register for an in-person or online event or to attend one of our forums, we will process your data to take your booking, administer ticketing and to manage attendance at the event or forum.	Legitimate Interest, Contract
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Site Safety and Security When you visit one of our sites you will be asked to provide your name and contact details in order to be issued a visitor access card. These cards record the dates and times you enter and leave a particular site or part of a site. If you have requested a parking space on one of our sites, we will also record your vehicle registration number. We use CCTV cameras to monitor the interior of, entrances to, and perimeter of our sites to enable us to respond to security incidents. CCTV is also used on some sites to monitor gates or barriers to ensure you are not trapped or injured. At our Warwick office, the data controller for site information is National Grid plc. Where CCTV footage incidentally captures Special Category Personal Data or Criminal Offence Data, processing is carried out only where necessary for substantial public interest and the prevention or detection of unlawful acts.	Legitimate Interests
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Accessibility Requirements and Reasonable Adjustments When you attend an in-person or online meeting or event you may provide us with information about the reasonable adjustments you require under the Equality Act 2010. We will process the personal data to comply with our health and safety legal obligations. Where the data includes Special Category Personal Data, we will process this for reasons of substantial public interest.	Legal Obligation, Public Interest
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Dietary Requirements When you attend an in-person meeting or event which involves catering, you may choose to inform us of your dietary requirements. This may include Special Category Personal Data relating to your health or religious belief. We will only use this personal data with your explicit consent for the purpose of managing the event.	Consent
6. Participation in Events, Forums, Meetings, and Visits to our Sites	Photos, Videos and Audio Recordings Videos, audios and photographs of you taken at one of our sites or public events, may be used in our marketing and publicity materials such as our website, hard copy publications and social media channels. We will provide opt-out opportunities and in some circumstances will ask for your specific and explicit consent.	Legitimate Interests, Consent
7. Website use and Communications	Website, Platforms, Portals and Subscriptions Accounts When you register as a user for specific platforms and portals, we will set out the purposes for which we collect and process your personal data for that site. By registering for an account on our website, you have access to a personal dashboard where you can manage subscriptions to data portal updates and other personalised information. Some additional personal data will be requested for accounts and access to platforms so that we can verify account details and manage your account. In some cases, additional security such as Multi-Factor Authentication may be required. Accounts that are not verified successfully will be deleted within seven days of creation. Accounts that are inactive for one year will be deleted.	Contract
7. Website use and Communications	Email Notifications Some areas of our NESO website invite you to sign up to receive emails containing information that you may find useful. If you sign up, we will send them to the nominated email address you provide. You may unsubscribe at any time via our unsubscribe links or via your NESO Account for Data Portal updates.	Consent
7. Website use and Communications	SMS Notifications If you subscribe to receive SMS notifications via the NESO website, and you provide us with your telephone number, you will receive service SMS notifications when a live dataset on the Data Portal is updated. You may unsubscribe at any time via your NESO Account. You will not receive SMS notifications for marketing purposes.	Consent
7. Website use and Communications	Cookies and Website Analytics When you interact with our website, we use cookies to improve your experience. Necessary cookies are stored because they are essential for basic website functionality. Third party cookies help us analyse website use, store user preferences and provide content, communications and functionality that are more relevant to you. These cookies will only be stored with your consent. We analyse your digital experience with NESO to improve features, functionality, content and personalisation.	Consent
7. Website use and Communications	Equality, Diversity, and Inclusivity Monitoring Information Where you provide us with details relating to your ethnicity, racial origin and religious beliefs to ensure equal opportunities in our recruitment processes, we process these in order to ensure that we are involving and considering the needs and views of people of different backgrounds and with different requirements in our engagement and activities, and to monitor compliance with equal opportunities legislation. This information is Special Category Personal Data which we process for reasons of substantial public interest. We may publish anonymised summaries of results but will not publish information about an individual or that could be used to identify an individual.	Public Task, Public Interest
8. Reviews and investigations	Collecting Information for Reviews and Investigations Reasons During reviews and investigations, we will collect information, evidence, and opinions. This involves gathering relevant data, conducting interviews, and analysing findings to ensure comprehensive and accurate reporting. The collected information will be used to support conclusions and recommendations, facilitating informed decision-making and effective resolution of issues.	Public Task, Public Interest
9. Artificial Intelligence and Automation	Using Automation and AI to Support our Services We may use limited automation and AI-based tools to improve the efficiency of our operations and support the services we provide to you. We also use these tools internally to identify general trends and assist with our business processes. These tools are used to support human decision-making and do not make decisions about you. We are committed to ensuring that any use of automation and AI is ethical, responsible, and trustworthy.	Legitimate Interest

Sources of information

Most of the personal data that we hold is collected directly from you as the data subject, but other sources of personal data include:

National Grid plc in relation to safety and security on site at the Warwick office.
Other organisations within the energy sector, including energy suppliers.
Publicly available sources of information.
NESO employees in the case of emergency contacts and information about family members.
Regulators, elected officials contacting us on your behalf and legal representatives.

In the case of employee recruitment activities:

Education and training providers to verify your qualifications and competencies.
Previous employers to obtain references to assess your suitability for the role as part of the recruitment process.
Occupational health service providers to assess your fitness to work or perform particular tasks, or any adjustments we need to make to the workplace to enable you to do so.
External background checking providers and the Disclosure and Barring Service to carry out pre-employment checks for any convictions, cautions, reprimands or other warnings you may have received.

Who may we share your personal data with?

Your personal data may be shared with the following parties:

Contractors and Consultants working on our behalf or in partnership with NESO.
External suppliers and service providers who perform functions on our behalf under contract, or support our systems, operations and/or processes. These include External Affairs Agencies collecting consultation feedback in relation to planning applications; Land Agents negotiating wayleave and easement agreements and processing damage claims and compensation payments.
National Grid plc in relation to the management of the site at the Warwick office.
Consultation feedback obtained during the planning application process will be shared with the Secretary of State, Examining Authority, and members of the public who request access.
We may also be required to share your personal data with law enforcement or other regulatory bodies who request access to information about you for the prevention and detection of crime and the apprehension or prosecution of offenders or where we need to report an incident or concern.
We may have to share personal data with government bodies and agencies to meet our legal and regulatory obligations. This includes the Department for Energy Security and Net Zero (DESNZ) which owns NESO and Ofgem, the independent regulator for the energy sector.
Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Privacy Notice.

Where we use another organisation to process your personal data on our behalf, we have contracts and strict controls in place to make sure it is properly protected. We only share personal data where there is a lawful basis to do so.

International transfers

Your personal data may be transferred and stored in countries outside the UK. We will always take steps to ensure that any international transfer of personal data is carefully managed to protect your rights and interests in accordance with applicable data protection law, in particular we will either:

only transfer your personal data to countries which are recognised as providing an adequate level of legal protection under UK data protection law; or
ensure that transfers outside the UK are subject to additional safeguards required by UK data protection law, for example, the standard contractual terms approved for us in the UK (such as the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's standard contractual clauses for international data transfers).

You have the right to ask us for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) as mentioned above. Contact us as if you would like further information or to request a copy where the safeguard is documented (which may be redacted to ensure confidentiality).

How long will you keep my personal data?

Retention periods will vary depending on the purpose for which we hold your personal data, but it will only be kept for as long as necessary in relation to the purpose for which it was collected.

Consultation feedback obtained as part of the planning application process will be kept for the life of the particular asset (if constructed); otherwise for seven years from the date the Decision Notice is issued.
Deeds of Grant of Easement are retained for as long as we maintain interest in the land in question.
Wayleave agreements will be retained for the term specified in the agreement, or until you cease to own / occupy the land in question.
Details of damage claims and compensation payments for seven years from the date of settlement.
Customer enquiries and complaints correspondence is kept for six years.
Health, Safety and Competency Records are kept for six years.
Customer, Supplier and Service Provider Data is kept for six years.
Visitor logs are kept for three years.
CCTV footage is generally kept for 90 days before being overwritten, but if required for an incident investigation may be extracted from the system and kept for as long as necessary in relation to that investigation.
Subject Access Request data is kept for three years.
Email addresses used to provide project updates/ system notifications are kept either for the duration of the particular project, or until you unsubscribe – whichever is earliest.
Distribution System Operators Constraints Mapping data is kept for seven years.

What rights do I have with regards to my personal data?

Your rights are outlined below:

The right to request access to the personal data we hold about you, as well as a description of why we have that information, any recipients of your personal data and where we obtained the information from (known as a Subject Access Request (SAR), as referred to above).
The right to request correction of your personal data. If the personal data we hold about you is out of date, incomplete or incorrect, you can inform us and ask us to correct or update it.
The right to request erasure of your personal data. If you feel we should no longer be using your personal data, you can request that we erase the data that we hold. Upon receiving a request for erasure, we will confirm whether it has been deleted or a reason why it cannot be deleted (for example because we have a legal obligation to keep the personal data).
The right to object to processing of your data where we are relying on a legitimate interest to process that data. You may request that we stop processing your personal data. Upon receiving your request, we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your personal data. Even after you exercise your right to object, we may continue to hold your personal data to comply with your other rights or bring or defend legal claims.
The absolute right to object to the processing of your personal data for direct marketing purposes.
The right to request the transfer of your personal data to a third party. You have the right to request that we transfer your personal data to another controller. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
The right to request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
The right to withdraw consent at any time where we are relying on consent to process your personal data.

To exercise your rights please contact the Data Protection Officer (contact details below).

We may be required to verify your identity for security purposes. We will comply with your request where it is feasible to do so, within one month of receiving your request. There are no fees or charges for the first request. However additional requests for the same data may be subject to an administrative fee to cover our costs.

Data Protection Officer contact details

By email:

[email protected]

Or by writing to:

Information Rights and Data Protection Officer

Legal and Regulation
Faraday House
Warwick Technology Park
Gallows Hill
Warwick
CV34 6DA

What can I do if I am not satisfied with how my personal data is processed?

At NESO we aim to ensure all personal data collection and use is carried out fairly and lawfully, whilst implementing robust measures to keep your personal data secure. If you are not satisfied with the information provided in this, please contact the Data Protection Officer in the first instance so we can resolve your queries, or provide you with any additional information required.

Data Protection Officer contact details

By email:

[email protected]

Or by writing to:

Information Rights and Data Protection Officer

Legal and Regulation
Faraday House
Warwick Technology Park
Gallows Hill
Warwick
CV34 6DA

If you are still unsatisfied with the response from our DPO, it is your right to contact Information Commissioner's Office and lodge a complaint. The Information Commissioner is the regulator for UK GDPR.

The Information Commissioner's Office (ICO) has a website with information and guidance for members of the public: https://ico.org.uk/for-the-public/

The Information Commissioner's Office operates a telephone helpline, live chat facility and email enquiry service. You can also report concerns online. For more information, please see the contact page of their website: https://ico.org.uk/global/contact-us/

Data Protection Complaints Form

We aim to comply fully with data protection legislation and to manage your personal data securely, fairly, and respectfully. If you are unhappy with the way that we have managed your personal data, you can use this form to tell us.

Please answer the questions and follow the instructions to submit your complaint.

Download Form

Please note that this form is only for data protection related complaints. For any other complaints please contact Customer Services or visit the Contact Us page on our website.

Last updated: July 2026.

You are now signed in

Privacy notice

Data Protection Complaints Form