View all current alerts (5)
How are we doing?
View our frequently asked questions >
contact us >
New customer? Start here.
Save time and manage your account online
Register today, it's quick and easy.
Need extra help?
The Priority Services Register (PSR) is free to join. It helps us know who may require extra help, and look after any customers with communication, access or health needs.
Apply for Priority Services
Do you need a statement?
View a summary of your latest bills and payments with My Account. You can also download and print copies of your statement.
Apply for a water meter
Having a meter really puts you in control of your bill.
You can see how much water you use and if you use less water you are also likely to save on your energy bills!
We are here to make your move easy.
It takes just 5 minutes to tell us online.
Do you have no water?
Use our checklist to help identify the cause of a loss of supply.
Find out more
FREE water efficiency check
To help you save water, save energy and save money, with every meter fitted we're offering a Home Water Efficiency Check (worth around £80) for FREE!
Do you have low pressure?
Find out what could be causing low water pressure in your home.
Hello. Sign in.
You are here : At Home > Privacy & cookies > Privacy notice
Read our privacy notice below or click the button below for a downloadable copy
We always recommend that our customers and stakeholders read this privacy notice in full. It explains who we are, how and why we collect personal data from you, how and why it will be processed by us and our commitment to protecting your data.
But just in case you’re on the move or do not have time to read it in full we have summarised the key points for you in our 'speed read' section below.
We are Affinity Water Limited (Affinity Water, we, our or us). We are registered as a data controller with the Information Commissioner's Office and our registration number is Z8926206.
We have appointed a Data Protection Officer. They are responsible for our approach to data protection and protecting your privacy. You can contact them at firstname.lastname@example.org.
We process (i.e. handle) your personal data to provide our services to you. Under data protection laws, we are only permitted to process your personal data where we have a legal basis for doing so. We will only ever process your personal data in compliance with applicable law.
We may share your personal data with our third party suppliers, including sub-contractors and data analysts, to enable the efficient and secure provision of services to you. Except as explained in this privacy notice, we will not share your data with third parties without your consent unless required to do so by law.
We will keep your personal data for as long as we need it. How long we need your personal data depends on what we are using it for, whether that is to provide services to you, for our own legitimate interests (described below) or so that we can comply with the law. We will actively review the information we hold and when there is no longer a customer, legal or business need for us to hold it, we will either delete it securely or in some cases anonymise it.
We may transfer your personal data to a recipient located outside of the European Economic Area (EEA). If we do this, we will ensure that the transfer mechanism provides an adequate level of protection, which has been recognised by the European Commission.
You have important rights under laws aimed at protecting your personal data. This notice sets out your rights and how can you exercise them. For more information, click here.
This section sets out who we are. It provides some useful information about us including our company number, registered address and data controller registration number (provided by the Information Commissioner’s Office).
Affinity Water Limited (Affinity Water, we, our or us) is a company registered in England and Wales under company number 02546950 whose registered office is at Tamblin Way, Hatfield, Hertfordshire AL10 9EZ.
We are registered as a data controller with the Information Commissioner's Office and our registration number is Z8926206.
This section tells you when this privacy notice applies (e.g. when you use our website or communicate with us). It also lets you know how and when we will communicate updates of this privacy notice to you.
This privacy notice applies to the personal data we collect about you through our website www.affinitywater.co.uk and the My Account portal, by post, by telephone, in person (for example at your doorstep), through our social media platforms, through our app, from third parties and when you otherwise communicate with us.
This privacy notice may change from time to time and, if it does, the up-to-date version will always be available on our Website. We will also tell you about any important changes to our privacy notice.
This section informs you of exactly what personal data we collect about you and why. This includes information that is provided to us directly by you as well as information that we gather from your visits to our website and information that we receive from other sources.
This section informs you of what information we collect about you and why. Personal data means any information about an individual from which that individual can be identified.
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data is not considered personal data in law as this data does not directly or indirectly reveal your identity. An example of Aggregated Data would be where we use your Usage Data to calculate the percentage of users accessing a specific Website feature. If the Aggregated Data is combined with other personal data to directly or indirectly identify you, we will treat this combined data as personal data and in accordance with this privacy notice.
Special Category Data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. We do not seek to collect or otherwise process your Special Category Data, except where:
This section explains to you the different ways in which we will collect the personal data that you provide to us.
We collect personal data about you if you fill in forms on the Website or correspond with us by telephone, email or otherwise. This includes information you provide when you:
We may also ask you to share your personal data with us if it is necessary for us to provide our services to you – for example, we may ask if you require priority services.
We may process personal data that you manifestly choose to make public, including via social media (e.g. we may collect information from your social media profile(s), to the extent that you choose to make your profile visible). If you send us a private or direct message via social media, the message will be stored outside of the application but in accordance with this privacy notice.
Automated technologies or interactions:
If you use our Website, we automatically collect the following information:
Where we collect information about you in the ways described above, we do so on the basis that it is in our legitimate interests to collect and process this data. In most situations this will be anonymised but we collect and process this data to ensure that our site is functioning properly and that our customer experience is to the standard that you and we expect.
The Website may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
We may use your information to ensure that you receive information that is relevant to you or to your circumstances. For example, to ensure you are on the correct tariffs, whether you would be entitled to benefit from a government payment scheme or whether you would benefit from having a water meter. The information we may use to create such a profile may include your water consumption, payment history, demographics or information provided by third parties such as credit reference agencies.
Information we receive from other sources:
We may receive information about you from third parties who provide it to us (e.g. the previous occupants or, if you are renting a home, your landlord may provide details to us).
In addition, we are also working closely with third parties, (including, for example, our regulators; companies that provide sewerage services in our area of supply; the Benefits Agency for our WaterSure Scheme; sub-contractors in technical, and payment services; analytics providers; and credit reference agencies and fraud prevention agencies or the Electoral Roll (for example where it has not been possible to identify the person responsible for payment of water services charges)) and may receive information about you from them.
When we receive information from other sources, we rely on them having the appropriate provisions in place telling you how they collect data and who they may share it with. We carefully check our sources to ensure that we only receive your information when it is lawful for us to do so.
This section explains the purposes for which we will use your personal data we hold. We also set out what we consider to be the legal basis for processing your personal data for each purpose, this is to ensure that you have all the information that we are required to provide you by law.
This section explains how we will use personal data you provide to us in order to carry out the activities relevant to the provision of our services to you.
We must have a legal basis for processing your personal data. We consider that we have a legal basis where:
Where we process your personal data on the basis of our legitimate interests, these are our (or our third party’s) interests in providing our services to you in an efficient and secure manner.
We have set out below a list of all the ways we may use your personal data and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are, where appropriate.
In some cases we may use more than one legal basis for processing your personal data; this will depend on the specific purpose for which we are using your personal data. Please contact us if you have any queries about the specific legal basis that we rely on processing your personal data.
This section explains how we will ensure that you only receive communications that you wish to receive. We will ensure that you have total control over the information that you receive.
This section is to explain how we will ensure that you only receive marketing communications that you wish to receive.
You can change your marketing preferences and unsubscribe at any time by contacting us at email@example.com or call 0345 357 2402 . If you choose not to receive this information we will be unable to keep you informed of new services and promotions that may interest you.
Whatever you choose, you'll still receive other important information, for example service updates, as described below.
As detailed in the table at section 6, we may send you communications such as those which relate to any service updates (e.g. service disruption) or provide customer satisfaction surveys. We consider that we can lawfully send these communications to you as it is necessary for the performance of a task carried out in the public interest. Additionally, we also consider that we have a legitimate interest to do so, namely to effectively provide you with the best service we can and to grow our business.
This section explains which of our employees will have access to your personal data. It also explains the reason for our employees accessing your personal data.
This section is to explain who, within Affinity Water, will have access to your data. Your personal data will only be seen or used by our employees who have a legitimate business need to access your personal data for the purposes set out in this privacy notice.
We take your privacy seriously and have implemented appropriate physical, technical and organisational security measures designed to secure your personal data against accidental loss, destruction or damage and unauthorised access, use, alteration or disclosure.
This section informs you of who we share your personal data with. It also explains the reason for sharing; this is largely so that we can provide our services to you.
This section will inform you of who we share your personal data with and why. Except as explained in this privacy notice, we will not share your personal data without your consent unless required to do so by law.
We may share your personal data with you, and where we have obtained your consent to do so, your associates and your representatives.
We may disclose your personal data to the Police, Department for Work and Pensions, HMRC, UK Visas and Immigration and any other law enforcement agency to the extent necessary for purposes including preventing, investigating, detecting, and prosecuting criminal offences; or validating a claim.
We may share your personal data with the following third-parties who assist us with administering the provision of our services to you:
We may also pass Aggregated Data on the usage of our site (e.g. we might disclose the numbers of visitors to our site that come from different geographic areas) to third parties but this will not include information that can be used to identify you personally.
If a business transfer or change of business ownership takes place or is envisaged, we may transfer your personal data to the new owner (or a prospective new owner). If this happens, you will be informed of this transfer.
This section explains how we keep your personal data safe and where it will be held. It also explains how we may process your personal data outside of the European Economic Area, but that we will only do so using recognised mechanisms which offer an adequate level of protection.
This section explains how we keep your personal data safe and where it will be held.
We take your privacy seriously and are committed to maintaining the privacy and security of the personal data you provide to us, and the choices you have regarding our collection and use of your personal data.
Once we have received your personal data, we follow strict security procedures as to how your personal data is stored and used, and who sees it, to help stop any unauthorised access.
Any payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. You should not share this information with anyone.
The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (EEA). When we transfer and store your personal data outside of the EEA we will ensure that it is adequately protected by using appropriate safeguards as further detailed below.
Staff operating outside the EEA who work for us, or one of our suppliers, may process the information. Such staff may be engaged in, among other things, the processing of your payment details and the provision of support services.
Where your personal data is transferred from the EEA to a recipient outside the EEA in a country not recognised by the European Commission as providing an adequate level of protection for personal data, such transfer shall be covered by a framework recognised by the relevant authorities or courts as providing an adequate level of protection for personal data including but not limited to:
Unfortunately, the transmission of your personal data via the internet is not completely secure and although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us over the internet and you acknowledge that any transmission is at your own risk.
This section explains the length of time that we will retain your personal data. It also explains why we would hold your personal data for such time periods.
This section explains the length of time that we will retain your personal data.
We will keep your personal data for no longer than is necessary for the purposes for which it was obtained. The criteria for determining the duration for which we will retain your personal data are as follows:
During the periods in paragraphs (2)a and (2)b above, we will restrict our processing of your personal data to the storage of, and maintaining the security of, those data, except to the extent that those data need to be reviewed in connection with any legal claim or obligation under applicable law.
After this period your personal data will be anonymised so that you are no longer identified or identifiable from such information, or securely deleted/destroyed.
Any third parties that we engage will keep your data stored on their systems for as long as is necessary to provide the relevant services to you or us. If we end our relationship with any third party providers, we will make sure that they securely delete or return your personal data to us.
We may retain personal data about you for statistical purposes. Where data is retained for statistical purposes it will always be anonymised, meaning that you will not be identifiable from that data.
This section explains that you have rights in relation to your personal data. It also explains what these rights are and how you can go about exercising them.
This section explains that you have a number of rights in relation to your personal data. There are circumstances in which your rights may not apply. You have the right to request that we:
You have the right to object to automated decision-making. This is where a decision, which produces legal effects or similarly significantly affects you, has been based solely on automated processing (including profiling). We are allowed to use automated decision-making in the following circumstances where we are authorised by law and where appropriate measures are in place to safeguard your rights.
If we make an automated decision on the basis of any particularly sensitive personal information, we must have either your explicit written consent or it must be justified in the public interest, and we must also put in place appropriate measures to safeguard your rights.
For more information on your rights and how to use them, or if you would like to make any of the requests set out above, please contact us using the details provided in the section Who can you ask for more information? below.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
As explained in the section on Communications above, even if you consented to the processing of your personal data for marketing purposes (by ticking the relevant box or by requesting information about services), you have the right to ask us to stop processing your personal data for such purposes. You can exercise this right at any time by completing our online form > or contacting us at firstname.lastname@example.org or call 0345 357 2402.
This section provides you with contact information should you have any questions or concerns about the way we handle your personal data. It also explains how you can contact the data protection regulator should you be unsatisfied with our response to your data protection issues.
If you have any questions or concerns about how we handle your personal data, you can contact us using any one (or more) of the following:
Post: FAO Data Protection Officer, Legal Services, Affinity Way Ltd, Tamblin Way, Hatfield, Hertfordshire AL10 9EZ
Or you can use the contact form on our Website.
If you are unsatisfied with our response to any data protection issues you raise with us or our DPO, you have the right to make a complaint to the Information Commissioner’s Office (ICO). The ICO is the authority in the UK which is tasked with the protection of personal data and privacy.
This page was last updated on: 05 March 2020
Registered office: Tamblin Way, Hatfield, Hertfordshire, AL10 9EZ.
Website design & build by Switch