Effective date: Jan 1, 2025

1. Introduction
   EnergyWin Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, disclose, retain and safeguard your personal data when you visit our website https://energywin.co.uk(the “Website”) and when you contact us, make enquiries, or engage our services.
2. Who we are
   EnergyWin UK Ltd
   Registered in England and Wales – 08958879
   Registered office: 2 Hall Farm Crescent, Broughton Astley, Leicester, England, LE9 6UF
   Contact email: hello@energywin.co.uk
   If you have any questions about this policy or our data practices, please contact us at the above.
3. What personal data we collect
   Depending on how you interact with us, we may collect the following categories of personal data:

• Identity information: name, title.
• Contact information: email address, telephone number, postal address (if provided).
• Technical information: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, device identifiers.
• Usage information: information about how you use our Website, for example pages visited, links clicked, time spent, form submissions.
• Marketing & communications data: your preferences for receiving marketing from us and your communication preferences.

4. How we collect your personal data
   We collect data:

• Directly from you when you fill in forms on our Website (e.g., contact/enquiry forms) or communicate with us by email or telephone.
• Automatically as you navigate through the Website (via cookies and similar technologies).
• From third parties or publicly available sources, if applicable (e.g., business directory listings, referrals).

5. Why we process your personal data and lawful basis
   We process your personal data for the following purposes:

• To respond to your enquiry and manage our relationship with you (lawful basis: performance of contract or taking steps at your request prior to entering into a contract).
• To operate, maintain and improve our Website and services (lawful basis: our legitimate interests in operating our business and improving user experience).
• To send you marketing communications (lawful basis: your consent, where required).
• To comply with legal obligations to which we are subject (lawful basis: compliance with a legal obligation).

We will only retain and use your personal data where we have a valid lawful basis for doing so under UK data protection law. ICO+3Sprintlaw UK+3Harper James+3

6. Who we share your personal data with
   We may share your personal data with:

• Service providers and subcontractors who help us deliver our services or run our Website (e.g., hosting providers, email services, analytics providers).
• Professional advisors or regulators where required by law.
  We ensure that any third-party processors we engage agree to appropriate contractual safeguards to protect your data.

7. International transfers
   Your personal data will be stored and processed in the UK and/or the European Economic Area (EEA). If we transfer your personal data to destinations outside the UK/EEA, we will ensure appropriate safeguards are in place (such as standard contractual clauses) in accordance with UK data protection law. ICO+1
8. Data retention
   We will retain your personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. If we do not have a specific retention period, we will notify you of the criteria used to determine how long we keep data. ICO+1
9. Your rights
   Under the UK UK General Data Protection Regulation and the Data Protection Act 2018, you have a number of rights in relation to your personal data:

• Right of access to your data.
• Right to have your data rectified if incorrect.
• Right to erasure (“right to be forgotten”) in certain circumstances.
• Right to restrict or object to processing.
• Right to data portability (in certain circumstances).
• Right to withdraw consent (where processing is based on consent) and to object to processing based on legitimate interests.
• Right to lodge a complaint with a supervisory authority (in the UK: the Information Commissioner’s Office) if you believe your data is not being processed in accordance with law. ICO+1
  If you would like to exercise any of these rights please contact us using the details in Section 2.

10. Cookies and tracking technologies
    We use cookies and similar tracking technologies to enhance your experience on our Website, to analyse usage, and for marketing purposes. You can control cookies through your browser settings and via any cookie-banner or preferences mechanism on the Website. Note that disabling certain cookies may affect how the Website functions for you.
    For more information about how we use cookies, please refer to our separate Cookie Policy [link if applicable].
11. Security
    We use appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. We regularly review our security measures and update them as required.
12. Changes to this Policy
    We may update this Privacy Policy from time to time by publishing a new version on our Website. We will indicate the “Effective date” at the top of the Policy. We recommend that you check this page occasionally to ensure you are aware of any updates.
13. Contact us
    If you have any questions about this Policy or our data practices, or wish to exercise your rights, please contact:
    Email: hello@energywin.co.uk
    Address: 2 Hall Farm Crescent, Broughton Astley, Leicester, England, LE9 6UF
    Phone: 0800 001 6944
14. Complaints
    If you believe we have not complied with this policy or the applicable data protection laws, you may lodge a complaint with the Information Commissioner’s Office (ICO).
    Website: https://ico.org.uk
    Helpline: 0303 123 1113