Privacy Policy

Last updated: 19th June 2025

1. Introduction

EnergySmart EnerGlow Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website energysmart-energlow.com, make a purchase from us, or otherwise interact with us.

This policy applies to all information collected or submitted on the EnergySmart EnerGlow website and related services. We may update this Privacy Policy from time to time, and we will notify you of any material changes by posting the new policy on this page.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Make a purchase
• Subscribe to our newsletter
• Contact us through our contact forms
• Participate in surveys or competitions
• Leave reviews or comments

This personal information may include:

• Name and contact information (email address, postal address, telephone number)
• Billing and delivery addresses
• Payment information (processed securely through third-party payment processors)
• Account credentials (username and encrypted password)
• Purchase history and preferences
• Communication preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behaviour, including:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website addresses
• Search terms used to find our website
• Date and time of visits

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Service Provision

• Processing and fulfilling your orders
• Managing your account and providing customer service
• Sending order confirmations and shipping notifications
• Processing returns and exchanges
• Providing technical support

3.2 Communication

• Sending you our newsletter (with your consent)
• Responding to your enquiries and providing customer support
• Sending important notices about our services
• Providing product updates and recommendations

3.3 Marketing and Personalisation

• Personalising your website experience
• Sending promotional materials (with your consent)
• Conducting market research and surveys
• Analysing customer behaviour and preferences

3.4 Legal and Security

• Complying with legal obligations
• Protecting against fraud and unauthorised access
• Enforcing our terms and conditions
• Resolving disputes

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

4.1 Contractual Necessity

Processing necessary for the performance of a contract with you, including:

• Order processing and fulfilment
• Account management
• Customer service provision

4.2 Legitimate Interests

Processing necessary for our legitimate interests, such as:

• Website analytics and improvement
• Fraud prevention and security
• Direct marketing to existing customers
• Business development and research

4.3 Consent

Where you have given specific consent, including:

• Newsletter subscriptions
• Marketing communications to prospects
• Non-essential cookies

4.4 Legal Compliance

Processing required to comply with legal obligations, such as tax and accounting requirements.

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our website, conducting our business, or serving our customers, including:

• Payment processors (Stripe, PayPal)
• Shipping and logistics partners (Royal Mail, DPD, UPS)
• Email service providers (for newsletters and notifications)
• Website hosting and cloud storage providers
• Analytics services (Google Analytics)
• Customer support platforms

5.2 Legal Requirements

We may disclose your personal information when required by law or when we believe that disclosure is necessary to:

• Comply with legal process or government requests
• Enforce our website policies
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure servers and encrypted data storage
• Regular security assessments and updates
• Access controls and authentication systems
• Employee training on data protection
• Regular backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

7.1 Retention Periods

• Account Information: Retained while your account is active and for 3 years after closure
• Order Information: Retained for 7 years for tax and accounting purposes
• Marketing Data: Retained until consent is withdrawn or the data becomes inactive
• Website Analytics: Retained for 26 months (Google Analytics default)
• Customer Support Records: Retained for 3 years after last contact

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You have the right to request copies of your personal data we hold about you.

8.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You have the right to request restriction of processing your personal data in certain circumstances.

8.5 Right to Data Portability

You have the right to request transfer of your personal data in a structured, commonly used format.

8.6 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

8.8 Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We will respond to your request within one month.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the UK authorities
• Binding corporate rules
• Certification schemes

10. Children's Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date at the top of the policy
• Sending an email notification for significant changes (if you have provided your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you believe that we have not complied with this Privacy Policy or acted otherwise than in accordance with data protection law, you have the right to file a complaint with the supervisory authority: