Privacy Policy

Effective Date: 1 November 2024

Upvolt Ltd (”Upvolt”, “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, and protect your data in accordance with the UK General Data Protection Regulation (”UK GDPR”), the Data Protection Act 2018 and all other applicable UK data protection laws. Please read this policy carefully.

By using our website (“Site”) and services, you agree to the collection, use, and transfer of your information as described in this Privacy Policy.

1. Who We Are

Company Name: Upvolt Ltd
Company Number: 15217718
Registered Address: Bedford House, 21a John Street, London, WC1N 2BF
Contact Email: contact@upvolt-energy.com

Upvolt Ltd is the “data controller” for the purposes of UK data protection law, responsible for determining the purposes and means of processing your personal data.

2. Data We Collect

We collect the following types of personal data from and about you:

2.1 Information You Provide to Us

Contact Information: Name, email address, phone number, and postal address.
Account Information: Username, password, and other information related to your account.
Payment Information: Billing address, payment details, and transaction history when you make a purchase on our Site.
Communications: Records of your communication with us, including customer support requests and feedback.
Property and Energy Information: This may include unique property reference number (UPRN), property coordinates, postcode, pictures of the property, property ownership status, mortgage information, household energy consumption, energy bills, and details of energy suppliers.

2.2 Information We Collect Automatically

Technical Information: IP address, browser type, operating system, and device information.
Usage Data: Information on how you use our Site, such as pages viewed, links clicked, and time spent on the Site.

2.3 Information from Third Parties

In some cases, we may receive information about you from third-party sources, such as payment processors, advertising networks, and publicly available sources, to verify your identity or provide you with more tailored services.

2.4 Information Aggregation

We also collect, use, and share Aggregated Data, such as the average energy consumption of our customers. While Aggregated Data may be derived from your Personal Data, it is not considered Personal Data under the law, as it does not directly or indirectly identify you. However, if we combine or link Aggregated Data with Personal Data in a way that could identify you, we will treat the resulting data as Personal Data and handle it in accordance with this Privacy Policy.

Additionally, we may aggregate data for research, analysis, or operational purposes, enabling us to improve our services and better understand customer needs. For example, we may analyse patterns in demographics, energy usage, or other factors. Although such aggregated data may be informed by Personal Data, it remains anonymised and cannot be used to identify specific individuals. We may share this anonymised data with trusted third parties, including service providers, affiliates, business partners, and research organisations.

Please note, we do not collect or process sensitive personal information such as your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, or details of your sex life.

3. How We Use Your Data

We use your personal data for the following purposes:

To Provide Our Services: Process orders, manage your account, and deliver products or services you request.
To Communicate with You: Respond to inquiries, send updates, and provide customer support.
To Improve Our Services: Analyse Site usage and gather feedback to improve our offerings.
For Marketing Purposes: Send you information on products, promotions, or events that may be of interest to you, where you have consented to receive such communications.
For Legal Compliance: Meet our obligations under applicable laws and regulations, respond to legal requests, and prevent fraud or misuse.

We process personal data on the legal basis of fulfilling our contract with you, legitimate business interests, consent (where required), and compliance with legal obligations.

4. Sharing Your Data

We may share your data with the following parties:

Service Providers: Third-party companies that provide services on our behalf, such as payment processing, website hosting, IT support, and marketing services. These companies are contractually bound to protect your data.
Affiliated Companies: Subsidiaries or affiliates for internal business purposes.
Legal Authorities: We may disclose your data to law enforcement or government agencies when required by law, court order, or to protect our rights and interests.
Business Transfers: In the event of a merger, acquisition, or sale of assets, we may transfer your data to the acquiring entity.

We will not sell, trade, or lease your personal data to third parties for marketing purposes without your consent.

5. International Data Transfers

If we transfer your data outside the United Kingdom, we ensure adequate protection is in place. Where necessary, we use standard contractual clauses approved by the UK government to ensure the security of personal data transferred to countries that do not have equivalent data protection laws.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

When we no longer require your data, we will securely delete or anonymise it in line with our data retention policy.

7. Your Rights

Under UK data protection law, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data in certain circumstances.
Right to Restriction: Request restriction of processing your data in certain circumstances.
Right to Data Portability: Request the transfer of your data to another organisation or to you.
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

To exercise these rights, please contact us at contact@upvolt-energy.com. We may need to verify your identity before fulfilling your request.

8. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies to collect information about your browsing activities. Cookies help us enhance your experience by remembering your preferences, analysing Site usage, and personalising content.

For more information on how we use cookies and how you can manage your preferences, please refer to our Cookies Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. However, no internet-based system can guarantee complete security. We encourage you to use strong passwords and maintain the security of your devices.

If you suspect any unauthorised access to your personal data, please contact us immediately.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and we will notify you of any material changes. Please review this policy periodically to stay informed.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: contact@upvolt-energy.com
Address: Bedford House, 21a John Street, London, WC1N 2BF

For complaints, you may also contact the Information Commissioner’s Office (ICO), the UK’s data protection authority, at www.ico.org.uk or by calling 0303 123 1113