Home > Privacy policy

Updated: 17 September 2025

Privacy Policy

Purpose of this notice

This privacy policy is provided by EMR Settlement Limited (“EMRS”, “us”, “we” or “our”). It explains who we are, how we collect, use and protect your personal data, and your rights in relation to your personal data, in accordance with Applicable Laws.

EMR is a controller for the personal data we collect.

This policy should be read in conjunction with the Terms and Conditions of use for the Website.

Contact Details

We are EMR Settlement Limited, a wholly owned subsidiary of Elexon Limited. We have offices at:

350 Euston Road
4th Floor
London
NW1 3AW

You can contact us by:

Definitions

“Applicable Laws” means all applicable data protection and privacy legislation in force from time to time in the United Kingdom, including (without limitation) the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, or regulations that implement, supplement, replace, or amend them, together with any relevant guidance or codes of practice issued by the ICO.

“ESC” (Electricity Settlements Company) is a UK government owned company responsible for administering the financial settlement of the Capacity Market (CM).

“Information Commissioners Office” (ICO) means the regulator or public authority that operates independently and is tasked with making sure UK data protection laws are followed.

“LCCC” (The Low Carbon Contracts Company) is a UK government owned company that plays a central role in the Contracts for Difference (CfD) and Nuclear Regulated Asset Base (RAB) schemes, which are part of the UK’s electricity market.

“Ofgem” (Office of Gas and Electricity Markets) means the independent energy regulator for Great Britain, responsible for protecting consumers and ensuring a fair, greener energy system.

“Personal data” means any information relating to an identified or identifiable natural person, including special categories of data as defined under applicable laws.

“Special categories of data”, hereafter referred to as sensitive data, may include racial or ethnic origin, religious or philosophical beliefs, political opinions, genetic data, biometric data, health, sexual orientation, criminal convictions, and or other information that receives special protections under applicable laws.

This website is not intended for children and we do not knowingly collect data relating to children.

The data we collect about you

  • Your name, company name and address, physical addresses, job title, and contact information;
  • Username, and password when you register to any of our microsites, such as EMRS portal;
  • Financial information;
  • Audio, electronic, visual, or similar such as, CCTV footage, or photographs, if you physically visit any of our EMRS locations or participate in any live events that may be recorded;
  • Your dietary requirements if you are attending an event;
  • Usage data, such as internet or other electronic network activity information including, but not limited to, your interaction with our websites or online platforms, or email communications;
  • Aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity;
  • Geolocation data such as precise geographic location information from your use of our website;
  • Cookies, see below for more information and visit cookies preferences on the website;
  • Information you voluntarily provide us.

We do not actively collect sensitive data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, information about your health, however, in limited circumstances, such information may be captured incidentally, for example, if your image (including facial features, clothing, or items that may indicate religious beliefs) is recorded on our CCTV systems; or if we need to record information about your health following an incident or accident on our premises.  Such data would only be processed for security, safety, or legal compliance purposes.

How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Performance of contract to manage our business relationship with you, such as executing our business arrangements and/or contracts;

With your consent, such as:

  • to engage with you, either in person in email, or through your use of our website or online platform, or via the “contact us” page, or wish to partake in any events that we organise;
  • where we legally require your explicit consent, where no other lawful basis will apply;
  • to take images of you, if you agree to have your photo taken at our events;
  • sending you information about EMRS activities and the electricity market, including where you have subscribed via our website to receive circulars, or newscasts by email.

You may withdraw your consent at any time by using the contact details in “your rights in relation to your information” below.

Where it is necessary for our legitimate interests (or those of a third party), such as:

  • performing our functions and fulfilling our obligations under the schemes that we operate;
  • maintaining records of CfD Party, CM, and Nuclear RAB participant details;
  • notifying parties about scheme updates, market information, or other operational matters;
  • provide, maintain, or improve EMRS systems;
  • seeking your feedback and customer satisfaction surveys;
  • process personal data in accordance with our commitment to health, safety, environmental, commercial interests, or security purposes.

Where we need to comply with a legal obligation, such as:

  • Providing information about CfD parties, CM or Nuclear RAB participants to regulatory bodies (such as Ofgem) for monitoring, compliance, or market oversight;

These functions are recognised by Ofgem as part of the wider public interest in maintaining an efficient, competitive, and reliable electricity market, which is essential for consumers and the energy system as a whole.

Where we collect your personal data from

  • From you, either directly (such as through information you submit to us) or indirectly (such as observing your actions on our websites or microsites (such as the My EMRS portal), or when you engage in email communications);
  • From cookies and other similar technologies when you our website or microsites;
  • From data analytics’ providers;
  • From other industry bodies or regulators such as Ofgem;
  • From service providers, or third parties, (such as companies who are assisting us in fulfilling our contracts and carrying out our business);
  • From other sources, such as public databases, social media platforms (including people with whom you are otherwise connected) and from other third parties.

How long we store your personal information

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including to meet any legal, accounting, or reporting requirements, including requirements under our CfD, CM or Nuclear RAB contracts, in line with our retention policy.

When we determine how long we will keep your personal data, we consider any minimum retention requirements set out in law, as well as the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means.

For more information on how long we store your personal information or the criteria we use to determine this please email [email protected].

Who we share your information with

We may share your personal data with the following:

  • Internally within EMR Settlement Limited, and other Elexon subsidiaries, including Elexon Limited and Elexon Clear Limited, where this is strictly necessary and proportionate to support the effective delivery of each organisation’s statutory functions;
  • Professional advisers, such as consulting firms, financial advisors, legal advisors, external auditors, insurers, third parties, or cloud service providers who support our business, in connection with the business purpose set out above for which we collect, use, process, and disclose your personal data;
  • The LCCC and the ESC as engaged;
  • Industry bodies or regulators such as Ofgem and other government bodies or law enforcement bodies;
  • To third parties involved with events organising to facilitate your participation in those events, and or support feedback.

Your rights in relation to your information

As a data subject you have rights in certain circumstances in relation to your personal data under relevant data protection legislation such as; accessing, rectifying, deleting, objecting or restricting your personal data. If you would like to exercise any of these rights, email [email protected]. Please be aware that there are exceptions and exemptions that apply to some of these rights, which we will apply in accordance with data protection legislation.

International transfers

We process your data either in the UK or in the European Economic Area (EEA). Where our major suppliers (or their subsidiaries) undertake some operations outside the UK, we place them under contractual obligations to process your data in the EEA. Where our suppliers seek to transfer any personal data outside the EEA, we require that they first obtain our consent, and that they have in place an adequate level of protection for any personal data that is transferred in accordance with the requirements of relevant data protection legislation.

How we keep your data safe

We have appropriate policies, rules and technical measures to protect the personal data that we have under our control (having regard to the type and amount of that data) from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss.

Cookies

Please note that when you visit our website or microsites, we will use cookies. Cookies allow us to store your preferences to correctly present content, options or functions throughout our website and distinguish you from other users of the website. For more information, visit cookies policy.

EMRS role as processor

EMRS has been appointed by the Low Carbon Contracts Company (LCCC), and the Electricity Settlements Company (ESC), to provide settlement and related services. For the avoidance of doubt, in this capacity, EMRS acts as a data processor, processing personal data strictly on behalf of LCCC in relation to CfD and Nuclear RAB, and on behalf of ESC in relation to the CM. LCCC and ESC remain the data controllers for the data we process on their behalf.

Contact information and complaints

If you have any questions or concerns regarding our use of your personal data, or if you wish to exercise any of your rights described in this policy, please email us at [email protected]. You also have the right to lodge any complaints you may have regarding our processing of your personal data to us or the Information Commissioners Office (ICO).

Website use and general enquiries

You can visit https://www.emrsettlement.co.uk/ (our “Website”) and without disclosing any personal information about yourself.

Changes to this policy

We keep our policy under regular review reserve the right to amend or modify this policy at any time. This version was last updated in September 2025.