Notice

Metering and monitoring service package (MMSP) - share your heat pump data: privacy notice

Published 9 September 2025

This notice sets out how we will use your personal data, and your rights. It is made under Articles 13 and/or 14 of the UK General Data Protection Regulation (UK GDPR).  

1. Your data  

We will process the following personal data:  

• your email address 
• any supplementary information you provide via web service 

2. Purpose 

Your data will help shape the government’s future policy to meet the UK’s renewable energy targets. 

Analysts at the Department for Energy Security and Net Zero (DESNZ) will use your heat pump performance data to better understand:  

• how heat pumps are performing in homes 

• how efficient they are 

This will help shape the government’s future policy for clean heat.  

3. Legal basis of processing  

The legal basis for processing your personal data under Article 6 of the UK GDPR is:  

1(a) Consent: You consent to the processing of your personal data for one or more specific purposes.  

Passiv customers 

You consent for Passiv to share performance data from your heat pump with the Department for Energy Security and Net Zero. This will be data from the last 12 months and until the end of the MMSP scheme. Analysts at the Department for Energy Security and Net Zero (DESNZ) will use your heat pump performance data to better understand: 

• how heat pumps are performing in homes, 

• how efficient they are  

This will help shape the government’s future policy for clean heat. 

Mitsubishi customers  

You consent for Ofgem to contact you every 9 months until the end of the MMSP scheme to ask you for an updated energy report from MELCloud.  

Ofgem will share this report with DESNZ. Analysts at the Department for Energy Security and Net Zero (DESNZ) will use your heat pump performance data to better understand: 

• how heat pumps are performing in homes  

• how efficient they are 

This will help shape the government’s future policy for clean heat. 

If you change your mind, you can withdraw consent at any time by logging into the DESNZ MMSP consent portal and following the onscreen prompts.   

4. Recipients 

As part of our IT infrastructure, your personal data will be stored on systems provided by our data processors - Microsoft and Amazon Web Services. This does not mean we actively share your personal data with these entities; rather, they are technical service providers who host infrastructure supporting our IT systems. 

Your personal data will also be shared internally with DESNZ ICS Digital data management team for processing.   

5. Retention  

Your personal data will be kept by DESNZ until midnight on 31 March 2050. The data will be used to inform the department’s evidence base throughout the period to meet its target for net zero emissions by 2050. 

6.  International transfers 

Your personal data will be processed in the UK. 

7. Your rights 

You have the right to request information about how your personal data are processed, and to request a copy of that personal data.  

You have the right to request that any inaccuracies in your personal data are rectified without delay.  

You have the right to request that any incomplete personal data are completed, including by means of a supplementary statement.  

You have the right to request that your personal data are erased if there is no longer a justification for them to be processed.  

You have the right in certain circumstances (for example, where accuracy is contested) to request that the processing of your personal data is restricted.  

You have the right to object to the processing of your personal data where it is processed for direct marketing purposes.  

You have the right to withdraw consent to the processing of your personal data at any time by logging into the DESNZ MMSP consent portal and following the onscreen prompt. 

To exercise your rights please contact the Data Protection Officer using the contact details below. 

8. Contact details 

The data controller for your personal data is the Department for Energy Security and Net Zero (DESNZ).  

You can contact the DESNZ Data Protection Officer at:  

DESNZ Data Protection Officer
Department for Energy Security and Net Zero
3-8 Whitehall Place, London
SW1A 2EG

Email: dataprotection@energysecurity.gov.uk

If you are unhappy with the way we have handled your personal data, please write to the department’s Data Protection Officer in the first instance using the contact details above.  

9. Complaints 

If you consider that your personal data has been misused or mishandled, you may make a complaint to the Information Commissioner, who is an independent regulator.  The Information Commissioner can be contacted at:  

Information Commissioner’s Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Tel: 0303 123 1113 

ico.org.uk/make-a-complaint 

Any complaint to the Information Commissioner is without prejudice to your right to seek redress through the courts.  

10. Updates to this notice 

If this privacy notice changes in any way, we will place an updated version on this page.

Regularly reviewing this page ensures you are always aware of what information we collect, how we use it, and under what circumstances we will share it with other parties. The ‘last updated’ date at the bottom of this page will also change. 

If these changes affect how your personal data is processed, we will take reasonable steps to let you know. 

Last updated: 09/09/25