Privacy policy

This policy explains what personal data Eight Energy UK Limited collects through this website, why we collect it, how long we keep it, and the rights you have over it. We've tried to keep it plain. If anything here isn't clear, please email us at hello@eightenergy.uk and we'll explain.

Who we are

Eight Energy UK Limited is the "data controller" for the personal data described in this policy. That means we decide what data is collected and how it's used.

• Company: Eight Energy UK Limited, registered in England & Wales.
• Company number: [TODO — registered company number]
• Registered office: [TODO — registered office address], Hertfordshire.
• Email: hello@eightenergy.uk
• ICO registration number: [TODO — ICO registration number]

What data we collect

When you make an enquiry

When you contact us — through the enquiry form, by email, or through our chatbot Albert — we collect the details you give us. Typically that's your name, email address, your postcode, and the message or details you send about your home and what you're looking for.

When you ask for the free energy analysis

The free analysis is built from your own half-hourly electricity consumption data — a record of how much power your home used in half-hour blocks over time. We only collect this with your permission, and we'll show you exactly how it's obtained (for example, from your energy supplier or smart meter) and what you're agreeing to before anything happens. This data stays yours. We use it to work out your real usage, size a system properly, and give you a genuine payback figure.

Information collected automatically

This is a simple static website. We do not use analytics or marketing/tracking cookies. Your browser does make a request to Google to load the fonts the site uses, which is explained in our cookie policy. Our web host may keep standard server logs (for example, IP addresses) for security and to keep the site running; these are held by the host and not used by us to build a profile of you.

Why we use your data, and our lawful basis

Under UK GDPR we must have a lawful basis for using your personal data. Ours are:

• To answer your enquiry and provide the free analysis — lawful basis: consent and, where you've asked us to prepare a quote or carry out work, steps taken at your request before entering a contract. Providing your half-hourly data for the analysis is always based on your consent, which you can withdraw at any time.
• To design, quote for and carry out installation work if you decide to go ahead — lawful basis: performance of a contract with you.
• To keep records we're legally required to keep (for example, for tax or certification) — lawful basis: legal obligation.
• To run and secure the website and respond to messages — lawful basis: our legitimate interests in operating the business, balanced against your rights.

We do not use your data for automated decision-making that has a legal or similarly significant effect on you, and we do not sell your data to anyone.

How long we keep it

We keep personal data only for as long as we need it:

• Enquiries that don't go anywhere: we keep them for a reasonable period in case you come back to us, then delete them. [TODO — confirm retention period]
• Your half-hourly data: we keep it while we prepare and discuss your analysis. If you don't go ahead, we'll delete it on request or after a set period. [TODO — confirm retention period]
• Customer and contract records: if you become a customer, we keep the records for as long as needed to honour the work and any guarantee, and to meet legal and tax requirements (commonly six years). [TODO — confirm retention period]

Who we share it with

We don't sell your data, and we keep sharing to a minimum. We may share it with:

• Service providers who work on our behalf — for example, our email provider, our web host, and the chatbot service that powers Albert. They only process your data on our instructions.
• Installation and technical partners — if you go ahead with work, the people carrying it out under Eight Energy will need the details relevant to your job.
• Professional advisers and authorities — where we're required to by law, or to establish or defend legal claims.

Where a provider is based outside the UK, we'll make sure appropriate safeguards are in place as required by UK data protection law. [TODO — confirm international transfers and safeguards, if any]

How we protect your data

We use appropriate technical and organisational measures to keep your data secure and limit access to those who need it. No system is ever completely secure, but we take reasonable care to protect the information you share with us.

Your rights

Under UK GDPR you have the right to:

• be told how your data is used (this policy);
• ask for a copy of the data we hold about you;
• ask us to correct data that's wrong or incomplete;
• ask us to delete your data, where there's no reason for us to keep it;
• ask us to restrict or object to how we use it;
• ask for your data in a portable format;
• withdraw consent at any time, where we relied on your consent — including consent to use your half-hourly data.

To exercise any of these, email hello@eightenergy.uk. We'll respond within the time allowed by law (usually one month). Exercising your rights is free.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top of the page.