Privacy Policy.

Last updated: 1 October 2024 | Effective: 1 October 2024

1. Introduction

Energy Gawd Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website energygawd.com or make a purchase from us. Please read this policy carefully.

We are registered in England and Wales (Company No. XXXXXXXX) and act as Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following categories of personal data:

• Identity Data: name, username, date of birth.
• Contact Data: billing/delivery address, email address, telephone number.
• Financial Data: payment card details (processed securely by Stripe — we do not store card data).
• Transaction Data: details of products you have purchased from us.
• Technical Data: IP address, browser type and version, time zone, browser plug-in types, operating system.
• Usage Data: information about how you use our website, products, and services.
• Marketing Data: your preferences in receiving marketing from us.

3. How We Use Your Information

We use the data we collect to:

• Process and fulfil your orders and manage your account.
• Send order confirmations, shipping updates, and customer service communications.
• Send marketing communications where you have opted in (you may unsubscribe at any time).
• Improve our website, products, and services through analytics.
• Comply with legal and regulatory obligations.
• Detect and prevent fraud.

4. Legal Basis for Processing

We process your personal data under the following lawful bases: contract performance (fulfilling orders), legitimate interests (improving our services, fraud prevention), consent (marketing communications), and legal obligation (tax and regulatory compliance).

5. Third Party Sharing

We may share your personal data with selected third parties including: Stripe Inc. (payment processing), shipping couriers (order fulfilment), email marketing platforms (with your consent), and analytics providers. We do not sell your personal data to third parties.

6. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site usage, and assist in marketing efforts. You can control cookies through your browser settings. Strictly necessary cookies cannot be disabled as they are essential for the website to function.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes it was collected for, including legal, accounting, or reporting requirements. Order data is retained for 7 years in compliance with HMRC requirements.

8. Your Rights

Under UK GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any of these rights, contact us at privacy@energygawd.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment processing is handled by Stripe with PCI DSS Level 1 compliance.

10. International Transfers

Where we transfer data outside the UK, we ensure adequate protection through standard contractual clauses or adequacy decisions.

11. Children's Privacy

Our services are not directed to persons under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of our services after changes constitutes acceptance.

13. Contact

For privacy-related enquiries, contact our Data Protection team at privacy@energygawd.com or write to: Energy Gawd Ltd, Data Protection, [Address], London, UK.

You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.