Privacy Policy

Introduction

This Privacy Policy explains how Crimson Heron Energy Consultancy collects, uses, and protects personal information provided through this website and during our business operations.

We are committed to protecting your privacy and handling your data in accordance with UK data protection legislation, including the Data Protection Act 2018 and UK GDPR.

Information We Collect

Information You Provide

When you contact us or request a consultation, we collect:

• Your name and contact details (email address)
• Company name and business information
• Details about your energy consultancy needs
• Any other information you choose to provide in communications

Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system
• IP address
• Pages visited and time spent on pages
• Referral source

How We Use Your Information

We use collected information for the following purposes:

• Responding to your enquiries and consultation requests
• Providing energy consultancy services
• Communicating about projects and service delivery
• Improving our website and services
• Meeting legal and regulatory obligations

Legal Basis for Processing

We process personal data based on:

• Legitimate interests: Operating our consultancy business and responding to enquiries
• Contractual necessity: Providing services you have requested
• Legal obligation: Complying with tax, accounting, and regulatory requirements
• Consent: Where you have explicitly agreed to specific data uses

Data Sharing and Disclosure

We do not sell or rent personal information to third parties. We may share data with:

• Service providers who assist with business operations (email hosting, accounting software)
• Professional advisers (solicitors, accountants, insurers)
• Regulatory authorities when legally required
• Third parties with your explicit consent

Any third parties who handle your data on our behalf are contractually required to keep it secure and use it only as instructed.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

• Client project data: 7 years after project completion (for legal and accounting purposes)
• Enquiry data: 2 years from last contact if no project proceeds
• Website analytics: 26 months

Your Rights

Under UK data protection law, you have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request that we limit how we use your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us using the details at the end of this policy.

Cookies

Our website uses cookies to enhance functionality and improve user experience. For detailed information about the cookies we use and how to manage them, please see our Cookies Policy.

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Secure data storage with encryption
• Access controls limiting who can view data
• Regular security assessments
• Staff training on data protection

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policies of any sites you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The "Last updated" date at the top indicates when changes were last made. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

Crimson Heron Energy Consultancy
38 Frederick Street
Jewellery Quarter
Birmingham B1 3HE
United Kingdom

Email: [email protected]

Supervisory Authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk