Privacy Policy.

EnergyCard is committed to protecting your privacy. This policy explains what personal information we collect on www.energycard.co.uk, why we collect it, and how we look after it — written in plain English.

It applies to our website, our pre-launch waitlist, and our ambassador programme, and sits alongside our Cookie Policy, which covers the cookies and similar technologies we use. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

01 Who we are.

EnergyCard is operated by ENERGYCARD LIMITED (Company No. 15507940), a UK company registered in England & Wales, supporting the EnergyCard Private Ministerial Association. For the purposes of UK GDPR, ENERGYCARD LIMITED is the controller of your personal data. We're a small team building a private members' card for the energy sector — so the same people who reply to your emails are the people deciding how your data is handled.

For anything covered in this policy, write to [email protected].

02 What we collect.

During the pre-launch phase, we keep data collection deliberately minimal. Depending on how you interact with the site, we may collect any of the following.

We do not request, store, or process special-category data — such as health, biometric, or political information — at this stage of the business.

03 How we use it.

We use the information you provide to:

• Confirm your place on the waitlist and update you on the EnergyCard launch.
• Send occasional pre-launch updates, founding-member offers, or ambassador communications — only with your consent, and only where genuinely useful.
• Respond to your enquiries and provide support.
• Calculate referral activity and EC Points for approved ambassadors.
• Understand how the site is performing, in aggregate, so we can keep improving it.

Our lawful bases for processing are your consent (for marketing and waitlist communications) and our legitimate interests (for replying to enquiries, running the ambassador programme, and keeping the site secure).

04 Sharing your data.

We do not sell, rent, or trade your personal information. Full stop.

We do rely on a small number of carefully chosen third-party providers to run the site and communicate with you — for example, our email platform, hosting provider, CRM, and analytics tools. These providers act on our instructions, are contractually bound to protect your data, and may only process it for the purposes we set.

We may also disclose information if we are legally required to do so, or where it is necessary to protect our rights, our members, or the public.

05 Retention & storage.

We hold your information only for as long as it remains useful for the purposes above, or as required by law. Waitlist and ambassador records are kept active until you ask us to remove them, or until the account becomes inactive for an extended period.

If you ask us to delete your details, we'll action that request promptly and confirm once it's complete — usually within 30 days.

06 How we protect your data.

We use reasonable and industry-standard technical and organisational measures to safeguard your information against loss, misuse, unauthorised access, alteration, or disclosure. The site runs over encrypted HTTPS, and access to personal data inside our systems is restricted to the small number of team members who genuinely need it.

No method of transmission over the internet is ever completely secure, but we work hard to keep your data safe — and to notify the relevant authorities and affected individuals if a breach ever did occur.

07 Your rights.

Under UK data protection law, you have the right to:

• Access the personal information we hold about you.
• Correct any details that are inaccurate or out of date.
• Erase your information where there is no overriding reason to keep it.
• Restrict or object to certain types of processing, including direct marketing.
• Withdraw consent at any time — every marketing email includes a one-click unsubscribe.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, though we hope you'll come to us first.

To exercise any of these rights, write to [email protected].

08 Cookies & analytics.

We use a small number of cookies to make the site work properly and to understand, in aggregate, how visitors are using it. You can manage your cookie preferences at any time via your browser settings. For a full breakdown, see our Cookie Policy.

09 Changes to this policy.

We may revise this Privacy Policy from time to time — for example, as our services evolve or as regulations change. The current version is always available on this page, with the effective date shown at the top. For material changes, we will let you know directly where we hold a contact email for you.

10 Get in touch.

If you have questions about your data, this policy, or how we handle your information, we're happy to help.