We ask for your details so a boffin can look at your bills and find you a better deal. This page explains exactly what we collect, what we do with it, who else sees it and how to get it deleted.
BILL BOFFIN LIMITED ("Bill Boffin", "we", "us") is the data controller for the personal information described on this page. We are a company registered in England and Wales, company number 17316944, based in Bradford, United Kingdom.
We are registered with the Information Commissioner's Office under reference ZC198608.
You can reach us about anything on this page at hello@billboffin.co.uk or on 01274 911249. We do not have a statutory Data Protection Officer, because we are not required to appoint one. Your enquiry goes straight to a director.
Nearly all of it is information you type into the form on our website or tell us on the phone. We do not buy lists and we do not cold call.
| Information | Where it comes from |
|---|---|
| Your name, email address, phone number and postcode | The enquiry form, or you tell us on a call |
| Which bills you want reviewed, and the best time to call you | The enquiry form |
| Copies of your bills, if you choose to upload them. These usually contain your address, account number, tariff, usage and amounts paid | Optional upload on the enquiry form, or sent to us by email |
| Details of your current providers, contract end dates and what you currently pay | Your bills, or the phone call |
| Notes of our conversations with you, and what we recommended | Created by us |
| Whether you went ahead with a switch, and the commission we were paid for it | Created by us, and reported back to us by the provider or affiliate network |
| Basic technical information such as your IP address and browser, logged by our hosting provider | Automatically, when you visit the site |
We do not ask for, and do not want, your bank details, card numbers or account passwords. A boffin will never ask you for these. If anyone claiming to be from Bill Boffin does, hang up and email us.
We do not knowingly collect special category data (things like health or political opinions). If you mention something like that on a call because it is relevant, for example that you are on a priority services register or a vulnerable customer scheme, we will only record it with your agreement and only so we can help you properly.
| What we do | Lawful basis under UK GDPR |
|---|---|
| Call you back and review your bills | Consent, which you give by ticking the box on the form. You can withdraw it at any time. |
| Read the bills you upload and compare the market on your behalf | Consent, and legitimate interests in providing the service you asked for. |
| Pass your details to a new provider so a switch can be arranged | Consent. We will always confirm with you before we do this, and we will tell you who we are passing them to. |
| Keep records of a completed switch so we can claim and evidence our commission | Legitimate interests in running our business, and legal obligation for accounting records. |
| Keep our books, file our accounts and answer HMRC | Legal obligation. |
| Handle complaints, and defend or bring legal claims | Legitimate interests, and legal obligation where one applies. |
| Keep the website up and stop spam and abuse | Legitimate interests in a working, secure website. |
Where we rely on legitimate interests, we have considered whether our interest is outweighed by your rights, and we think it is not, because the processing is limited to what you asked us to do and to keeping lawful records of it. You can object at any time, see Your rights.
Marketing. If you enquire, we may email or text you about your own review and any follow up. We will not add you to a general marketing list unless you ask us to, and every message we send will have a one click unsubscribe.
We sell your data to nobody. Ever. It is shared only in these situations.
If you tell us to go ahead, we pass the details needed to set up your new account to that provider, for example an energy supplier, broadband company or mobile network. Once they have it, they are a separate data controller and their own privacy policy applies. We will name them before we send anything.
We are a publisher on the Awin and CJ Affiliate networks. When a switch we recommended completes, the network confirms the sale to us and pays our commission. This normally involves a reference number rather than your full details, but the network and the provider may hold a record connecting the transaction to you.
These companies act on our instructions only, under a written contract, and cannot use your data for their own purposes.
We will disclose information where the law requires it, for example to a regulator, the police or a court, and where it is necessary to protect someone from harm. If Bill Boffin is ever sold or merged, your data may transfer to the buyer, who would be bound by this policy until they told you otherwise.
| What | How long |
|---|---|
| Bills you uploaded, and any copies sent by email | Deleted within 6 months of finishing your review, or sooner if you ask |
| Your enquiry and contact details, where no switch went ahead | 24 months from our last contact with you, then deleted |
| Enquiries we never managed to reach | 12 months, then deleted |
| Record of a completed switch, limited to your name, postcode, the provider, the date and the commission | 6 years from the end of the relevant financial year, because we have to keep business and tax records |
| Complaints correspondence | 6 years from resolution |
| A record that you asked us to stop contacting you | Kept indefinitely, because it is the only way to make sure we honour it |
Deletion means removing the record from our Sheets and permanently deleting the files from Drive, including the bin.
We are a UK business and we work from the UK. Some of our suppliers, notably Google and Cloudflare, are US companies that may process data outside the UK. Where they do, transfers are covered by the UK's international data transfer agreement or addendum to the EU standard contractual clauses, or by an adequacy decision. If you want the details of the safeguards for a particular supplier, email us and we will send them.
No system is perfectly secure. If there is ever a breach that puts your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.
Under UK GDPR you can ask us to:
We do not make any decision about you by automated means alone, and we do not profile you.
Email hello@billboffin.co.uk and we will respond within one month. It is free. We may ask you to confirm who you are first, so we do not hand your bills to someone else.
This site does not use analytics, advertising or tracking cookies. There is no cookie banner because there is nothing to consent to.
We do not run Google Analytics, Meta pixels, or any advertising or remarketing tags. We do not set any cookie of our own.
Two things do happen automatically when you load the page:
__cf_bm) to tell human visitors from bots. It lasts around 30 minutes and is exempt from the consent requirement because it is necessary to deliver the site you asked for.You can block or delete cookies in your browser settings. Nothing on this site will break if you do.
If we ever add analytics, we will put a proper consent banner up first and update this page.
Our service is for bill payers, so it is not aimed at anyone under 18 and we do not knowingly collect their data. If you think we hold a child's information, tell us and we will delete it.
If we change how we handle your data we will update this page and change the date at the top. If the change is significant and we hold your contact details, we will email you.
Talk to us first. Email hello@billboffin.co.uk or call 01274 911249 and we will try to put it right.
If you are not happy with how we have handled your data, you have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint, call their helpline on 0303 123 1113, or write to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would rather you gave us a chance first, but it is your right either way.