Privacy & Data Sharing Policy

Last Updated: November 2025
Review Date: November 2026

1. Our Commitment to Your Privacy

Emerald Power is committed to protecting your personal data and respecting your privacy. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection laws.

We process personal data lawfully, fairly, and transparently, ensuring it is:

• Collected for clear, legitimate purposes
• Limited to what is necessary
• Accurate and kept up to date
• Retained only as long as needed
• Protected against unauthorised access or misuse

2. Who We Are

Emerald Power operates this website and acts as the Data Controller for any personal data collected through it.

For any privacy concerns, contact our Data Protection Officer (DPO):

Tel: (+44) 1606 837975
Email: info@emeraldpower.co.uk

3. What Data We Collect

• Contact details (name, email, phone) when you use our contact form or email us
• Business information for enquiries or service provision
• Technical data (IP address, browser type) for site security and performance

We do not track individual browsing habits or sell personal data to third parties.

4. How We Use Your Data

• Respond to enquiries and provide services
• Maintain business relationships
• Comply with legal obligations
• Send marketing communications only if you have opted in

5. Lawful Basis for Processing

We process data under one or more lawful bases:

• Consent (which you can withdraw at any time)
• Contractual necessity
• Legal obligation
• Legitimate interests (where appropriate and documented)

6. Data Sharing

We do not share your personal data with third parties unless:

• You have given explicit consent
• It is required by law
• It is necessary for service delivery under a contract

Any data sharing is carried out in line with the ICO’s Data Sharing Code of Practice.

7. Data Retention

• Enquiry data: up to 2 years, unless a business relationship continues
• Financial records: 6 years (HMRC requirement)

When data is no longer needed, we securely delete or anonymise it.

8. Your Rights

You have rights under UK GDPR, including:

• Access to your data
• Correction of inaccuracies
• Erasure (“right to be forgotten”)
• Restriction or objection to processing
• Data portability

To exercise these rights, contact our DPO using the details above.

9. Marketing

We only send marketing emails if you have opted in. You can unsubscribe at any time via the link in our emails or by contacting us directly.

10. Security

We use appropriate technical and organisational measures to protect your data, including encryption and access controls.

11. Data Breaches

If a data breach occurs that may risk your rights and freedoms, we will:

• Notify the ICO within 72 hours
• Inform affected individuals promptly if the risk is high

12. International Data Transfers

We do not routinely transfer personal data outside the UK. If such transfers occur, we ensure appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs) in compliance with UK GDPR.

13. Cookies and Tracking

Our website uses only essential cookies for functionality. We do not use analytics or advertising cookies. If this changes, we will update this policy and seek your consent where required.

14. Children’s Data

Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

15. Automated Decision-Making

We do not use automated decision-making or profiling that has legal or significant effects on individuals.

16. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk.

17. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on our website. Significant changes will be communicated directly where possible.