Help and Contact
Last updated February 2021
We are Hafren Dyfrdwy Cyfyngedig. We provide our customers with water services. Hafren Dyfrdwy looks after and is responsible for your data (the Controller). Any reference to “we” or “us” in this notice means Hafren Dyfrdwy.
We are registered In England and Wales under the Companies Acts (Reg. No. 03527628). Our registered office is Packsaddle Wrexham Road, Rhostyllen, Wrexham, Clwyd, LL14 4EH.
We use a number of external third parties who process your personal data on our behalf, these companies are referred to as ‘Processors’. Any Processors we use also have their own legal responsibility for handling your data.
If you have any questions, or want more details about how we use your personal information, you can ask us:
- Email us at: email@example.com
- Call us on 01978 833200 (+44 1978 833200 from outside the UK)
- Write to us at: FAO Data Protection Officer, 2 St Johns Street, Coventry, CV1 2LZ
Please note, Hafren Dyfrdwy works with Severn Trent to comply with obligations for UK Data Protection Laws
We collect the following types of personal data from any contact we have with you by telephone, letter, e-mail, facsimile, when visiting your home, Web chat service, Mobile Application, our Contact Us forms and via social media like Twitter and Facebook.
We may also access information about you that is already publicly available.
- Your name, address, email address, telephone number and other contact information;
- Details of payments that you make to us, which may include bank account details as part of any direct debit you agree to set up. For customers paying by credit or debit card, please note we do not store the Credit Verification Value (CVV);
- Information about your billing and payment history, and information we learn from the way you manage your account;
- Information about your credit history with other credit providers which we obtain from Credit Reference Agencies;
- The preferences that you provide to us confirming whether you would like us (and selected third parties) to contact you with information and offers that may be of interest to you;
- Information about your use of our services, including information about your water usage which we collect from meters;
- We also store your responses to surveys should you choose to take part in them;
- If you are the contact at a business customer, we may also collect your employer details, role and work location; and
- Any other information you choose to volunteer to us from time to time.
Some of the information we collect about you may include your special categories of personal data as defined in the UK Data Protection laws (please see section 4 below for more details).
Find out all the ways that we may use your personal information, and which of the legal reasons we rely on to do so. This is also where we tell you what our legitimate interests are.
We may collect your personal data in a number of ways, for example:
- When you register with us and set up an account to receive our services;
- When you contact us through our websites, by telephone, post, email or through any other means;
- When you complete surveys that we use for research purposes (although you are not obliged to respond to them);
- When you enter a competition or promotion;
- When you make payments to us, through this website or otherwise;
- When you set your preferences for receiving marketing communications from us;
- When you use our services;
- When we receive your personal data from third parties, for example Credit Reference Agencies or fraud prevention organisations; and
- When we collect publically available information about you.
We will only request special categories of personal data (health data) from you where we believe it will help us manage your account in the best way for you and to ensure that we can respond to your needs during an incident should one occur. Scenarios in which we may request your special category data are, for example, if you are in default on your payments due to illness. We hold specific information in the event of an incident (e.g. if you are on dialysis, haemo-dialysis) to ensure we can offer additional support and provide services when you need it. We have a process to contact you and confirm your circumstances for any special category data we hold on you (every two years).
By registering on our Priority Services Register you are confirming that you have a need for support either during an incident or to help you manage your account. If your data or circumstances change, please contact us.
We will process this data in line with UK Data Protection laws under the lawful basis for performing public functions in the Public Interest for personal data, and necessary for reasons of Substantial Public Interest (SPI) for special categories of data (health data). This information will be provided to you at the time of our request and we only request this information when necessary to assist you with your account.
By registering with us you can be automatically added to the Priority Services Register of your energy network operator and supplier. The data we share will only be used to provide you with our Priority Services.
We use your information in various ways, such as to
- Provide you with the services you want and deal with any queries or complaints you may raise;
- Administer your account, including;
- Letting you know of any work we may be conducting in your area;
- Seeking your views on any service we’ve provided;
- Dealing with any problems, enquiries, or complaints you may have; and
- Resolving unpaid bills.
- Let you know about goods or services we feel would be beneficial to you;
- Prevent fraud;
- Trace and recover debts;
- Keep our records accurate and up to date;
- Create statistical information, market research, analysis and customer profiling to better manage and run our business; and
- Comply with any legal obligations we may have.
We will keep your personal information
We will keep your customer information for as long as you are a customer of Hafren Dyfrdwy. After you stop being a customer, we may keep your data for up to 15 years for one of these reasons:
- To respond to any questions or complaints.
- To show that we treated you fairly.
- To maintain records according to rules that apply to us.
- We may keep your data for longer than 15 years if we cannot delete it for legal, regulatory or technical reasons.
We may also keep it for research or statistical purposes. If we do, we will make sure that your privacy is protected and only use it for those purposes.
As part of normal operations, we engage third party contractors to provide us with services, for example, if you call us to inform us about a leak or a blocked sewer, we may use contractors to investigate the issue. Where we use third party contactors, we may need to give
your personal data to them, for example, to investigate the issue and inform you of the outcome.
In respect of business customers, the market opened on 1 April 2017 for water supplies to business users, enabling businesses to switch providers and is run by Market Operator Services Limited (“MOSL”). In order to facilitate this, we may share details of contacts at our business customers with MOSL and third party service providers where required. Find out more information on MOSL.
We share some contact information with HomeServe Membership Limited, who have been carefully selected to provide access to affinity insurance products for our customers, which can help in the event of water related problems.
We may also share your personal data with other third parties because we are under a legal, statutory or other obligation to do so or because we believe that sharing your personal data will help us to manage your account in the best way possible for you.
We may share and receive data from third party payment companies to help you manage your account.We share data with the water industry regulator, Ofwat as part of our statutory requirements as a water andsewerage undertaker. This helps us measure and improve our service to you, and your customer experience. From time to time, Ofwat, or a third party acting on their behalf, may contact you directly to take part in a customer experience survey. You may be contacted about the service you received from Severn Trent Water and asked to score our performance. Please note, this is not a marketing call.
We may share your personal data:
- our employees, agents and/or professional advisors;
- other companies within the Severn Trent Plc Group, and with successors-in-title to our business;
- other third party contractors who provide services to us which require the processing of personal data;
- third party payment providers who process payments made over our website;
- relevant authorities and third parties including Department for Food, the Environment and Rural Affairs (Defra), and the water industry regulator, Ofwat;
- relevant authorities in order to prevent fraud and other criminal offences;
- social services, charities and other third parties in order help manage your account in the best way for you and help you get any support you might need;
- credit reference agencies (to find out more see section 8 below);
- external agencies like the police, fire service, or local councils in the event of an emergency situation, such as under the Civil Contingencies Act 2004; and
- carefully selected partners, to introduce you to water related news, goods and services (by post, phone, email, SMS) that we think you'll find interesting,
- our affinity insurance partner, HomeServe Membership Limited. You may be asked if you wish to speak to HomeServe after we have assisted you with a telephone enquiry. If you don't wish to be contacted for this purpose, please let us know by contacting us. If you decide to engage with or purchase a product or service from one of our partners, including HomeServe, the way in which they use your personal data is their responsibility only, and details will be set out in their own privacy notice. Please ensure that you read and are happy with such notices.
Like many other utilities companies, we share your personal data with, and receive your personal data from, Credit Reference Agencies (CRAs).
This helps us maintain up-to-date customer records, prevent fraud and identify customers at risk of falling into debt. This makes it easier for us to find and help customers who need financial assitance.
This helps us manage debt levels and, in turn, keep prices lower for all customers.
If you pay your bill on time, sharing your data will also positively impact your credit rating.
We will share your personal information with CRAs for as long as you are a customer. This will include details about your settled accounts and any debts not fully repaid on time.
The Credit Rating Agencies may give this information to other organisations that want to check credit status. If you tell us that you have a spouse or financial associate living at the same property we will link your records together.
Credit Rating Agencies will also link your records together and these links will remain on your file and theirs until either you or your partner successfully applies for a disassociation with the CRAs to break that link.
You can find out more about the CRAs on their websites, in their Credit Reference Agency Information Notice. This includes details about:
- Who they are
- Their role as fraud prevention agencies
- The data they hold and how they use it
- How they share personal information
- How long they can keep data
- Your data protection rights
Information notices (CRAIN) for the two Credit Reference Agencies we use:
We may record calls to our contact centres, and may monitor calls in order to keep a record of the discussion, to provide you with the highest quality of service, for training, to ensure compliance with our policies and procedures, for security purposes and for any lawful purpose.
Please note we hold call recordings for a period of 12 months.
Sending data outside of the EEA
We will only send your data outside of the European Economic Area (‘EEA’) to:
- Follow your instructions.
- Comply with a legal duty.
- Work with our agents and advisers who we use to help run your accounts and services.
If we do transfer information to our agents or advisers outside of the EEA, we will make sure that it is protected in the same way as if it was being used in the EEA. We’ll use one of these safeguards:
- Transfer it to a non-EEA country with privacy laws that give the same protection as the EEA. Learn more on the European Commission Justice website.
- Put in place a contract with the recipient that means they must protect it to the same standards as the EEA. Read more about this
on the European Commission Justice website.
Sometimes we will need to share your personal data with third party data processors in countries that are outside of the European Economic Area, for example: we have a Third Party supplier is based in India. We put adequate safeguards in place to ensure that your data receives the same level of protection as if it were being processed inside the EEA.
By providing us with personal data, and reading this policy you are aware of how we are using your personal data for the purposes mentioned. If you would like to change the way we are able to contact you, you can simply email us with your account details and your request.
You have the following rights under the UK data protection law. These rights include:
(i) Right to Access your Personal Data
You can request a copy of the information we hold about you. There is no charge for this. You can do this via our online form or by completing this Subject Access Request PDF form. You can also write to: SAR Officer, Severn Trent Water, 2 St John’s Street, Coventry, CV1 2LZ
Email us: customerSAR@severntrent.co.uk
Our process of compiling a subject access request does not include a review of any ongoing issues, and does not form part of Severn Trent Water complaints process. Telephone calls to and from Haferen Dyfrdwy are recorded for training and quality monitoring purposes only, and only transcripts of calls wil be provided.
Hafren Dyfrdwy is not covered by the Freedom of Information Act 2000. (This legislation provides access to public information held by public authorities such as government departments, local authorities, and the NHS.)
(ii) Right to Rectification
You have the right to question any information we have about you that you think is wrong or incomplete.
Please contact us if you want to do this.If you do, we will take reasonable steps to check its accuracy and correct it.
(iii) Right to Object
You can request that your personal data is not processed for specific purposes such as direct marketing.
We’re keen to promote efficient water use and we may send you offers or make you aware of products that help with this. Also, from time to time we may tell you about other offers we think may interest you.
We may do this, or we may share your information with carefully selected partners who offer services or products that we think you may be interested in. Every time we contact you about such offers we will give you the opportunity not to hear about anymore.If you don’t want to receive such offers at all, please let us know – you can email or call us on 0330 678 0679.
(iv) Right to be Informed
You can ask for details of how we process your personal data, as covered by this Privacy Notice
(v) Right of Erasure
You can request the deletion or removal of personal data where there is no reason for its continued processing. This right is also known as the “Right to be Forgotten”
(vi) Right to Restrict Processing
You can request that no further processing of the personal data we have previously collected occurs.
Please be aware that there may be circumstances when we are unable to complete your request , most likely because we could not provide you with water, waste water or billing services. If this is ever the case, we will inform you of the reason and provide details of how you can register a complaint with the Information Commissioners Office if you believe we have got this wrong.
Automated decision making and profiling – please note we do not currently conduct any automated decision making, including profiling, as defined by UK Data Protection laws.
We will take appropriate technical and organisational measures to prevent unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to personal data.
All customer personal data is held in secure systems with controlled access and subject to cyber security measures. We also apply strict physical security at all our sites.
All employees receive cyber security and data protection training.
We ensure that the personal information that you provide us via this website is held on secure servers.
Where we transfer information to third parties to enable them to process it on our behalf, we ensure that the providers meet or exceed the relevant legal or regulatory requirements for transferring data and keeping it secure.
If you have any further questions about the way we manage your data you can email or call us on 0330 678 0679.
Please let us know if you are unhappy with how we have used your personal information. You can contact our Data Protection Officer at firstname.lastname@example.org
You also have the right to complain to the Information Commissioner’s Office.