Privacy Policy

Senergy Innovations Ltd is the data controller responsible for the processing of personal data described in this privacy notice.

Email: info@senergyinnovations.co.uk

To provide services and goods, including delivery

• Names and contact details
• Addresses
• Account information
• IP address, for support and service monitoring
• Information relating to compliments or complaints
• Heating system telemetry, device data, and site location collected from system controllers in order to provide system monitoring and diagnostics.
• Activity logs recording access and actions within the system (user management, permission changes, site operations) for security, compliance, and operational purposes.

For the operation of customer accounts and guarantees

• Names and contact details
• Addresses
• Account information, including registration details
• IP address, for support and service monitoring
• Information used for security purposes

For research or archiving purposes

• Addresses
• Aggregated heating system performance and telemetry data used to improve system analysis and service performance.

For dealing with queries, complaints or claims

• Names and contact details
• Address
• Account information
• Purchase or service history
• Customer or client accounts and records
• Correspondence

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. You can find out more about lawful bases on the ICO website.

Your data protection rights may include access, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where consent is used as the lawful basis.

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Where we rely on legitimate interests, we ensure that our interests in operating, securing, and improving our services are balanced against the rights and freedoms of individuals.

• Consent — where you have given permission after receiving the relevant information.
• Contract — where processing is needed to enter into or carry out a contract with you.
• Legitimate interests — where processing is necessary for operating, securing, maintaining, and improving our services.

• Directly from you
• Suppliers and service providers

We keep personal data only as long as needed for the purposes above, and then delete or anonymise it.

We use trusted service providers to help us operate, secure and support our services. Depending on how you use our services, we may share personal information with:

• cloud hosting and database providers;
• transactional email and communications providers;
• heating-system platform and telemetry providers;
• application monitoring, error-reporting and security providers;
• mapping and geocoding providers;
• weather-data providers, where we use generalised location information to obtain relevant weather data;
• installers, maintenance providers and other organisations involved in providing or supporting your heating system;
• professional advisers, including accountants, lawyers, auditors and insurers;
• regulators, courts, law-enforcement bodies and other public authorities where disclosure is required or permitted by law; and
• a purchaser, investor or adviser in connection with a proposed sale, restructuring or transfer of all or part of our business.

Our service providers may process personal information only for the purposes of providing their services to us, except where they act as an independent controller under data protection law.

We require service providers that process personal information on our behalf to protect it appropriately and to comply with applicable data protection requirements.

We do not sell personal information.

Some of our service providers, or their group companies and subprocessors, may process personal information outside the UK.

Where personal information is transferred outside the UK, we take steps to ensure that the transfer complies with UK data protection law. Depending on the destination and recipient, we may rely on:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the European Commission's standard contractual clauses; or
• another transfer mechanism permitted by UK data protection law.

Where required, we also assess whether additional safeguards are needed to protect the information.

You can contact us using the details at the top of this notice for more information about the countries in which your personal information may be processed and the safeguards that apply.

Our website uses strictly necessary session cookies to keep your session working while you browse the site.

We do not use any third-party analytics, tracking, or advertising cookies.

Server logs are kept for security and diagnostics purposes for up to 12 months, then deleted or anonymised.

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we have used your data, you can also complain to the ICO.

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint