GDPR & Data Protection

This policy describes how Energy Badger (“we”, “us”) processes personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For cookies specifically, see our Cookie Policy.

1. Data controller

Energy Badger is the controller for personal data processed in connection with this website and our services, unless we tell you otherwise (for example where a partner acts as controller for a specific product). Contact: [email protected].

2. What personal data we collect

Depending on how you interact with us, we may process:

• Identity and contact details (name, address, email, phone)
• Enquiry, survey, and project information relevant to renewable energy (for example property or energy use details you provide)
• Technical data (IP address, browser type, device identifiers) when you use our website
• Communications (emails, call notes, or messages you send us)

3. Lawful bases

We process personal data where we have a lawful basis under UK GDPR — for example: performance of a contract or steps at your request before a contract; legitimate interests (such as improving our website and services, provided your rights are not overridden); legal obligation; or consent where required (for example certain marketing or non-essential cookies).

4. How we use your data

We use personal data to respond to enquiries, provide quotes and services, manage installations and support, comply with law, improve our website, and — where permitted — send relevant information about our services. We do not sell your personal data.

5. Sharing and processors

We may share data with trusted service providers who process it on our instructions (for example hosting, email, or contractors involved in a survey or installation). We require them to protect your data appropriately. We may disclose information where the law requires it.

6. International transfers

If personal data is transferred outside the UK, we ensure appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) as required by UK GDPR.

7. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, or warranty requirements, then delete or anonymise it securely.

8. Your rights

Under UK GDPR you may have the right to:

• Access your data and obtain certain information about processing
• Rectify inaccurate data or complete incomplete data
• Erase data in certain circumstances
• Restrict or object to processing in certain circumstances
• Data portability (where applicable)
• Withdraw consent where processing is based on consent
• Lodge a complaint with the ICO (see below)

To exercise your rights, contact us at [email protected]. We may need to verify your identity.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration.

10. Complaints

If you have concerns about how we use personal data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority: ico.org.uk.

11. Changes

We may update this policy from time to time. Check this page for the latest version. Significant changes may be communicated where appropriate.