Privacy notice

1. Who we are

Shockflo, registered office Unit B1 Belcon Industrial Estate, Geddings Road, Hoddesdon, Hertfordshire EN11. We are the data controller for the personal data described here.

For anything in this notice, contact dean@shockflo.com.

2. What this notice covers — and what it doesn't

This notice covers personal data: information about identifiable people, such as your name, job title, work email address and phone number.

It does not cover your site data — half-hourly consumption, meter readings, asset performance and similar. That is business information about a building, not about a person, so data protection law generally does not apply to it. We treat it as commercially confidential under our contract with you instead, and we say plainly in that contract what we may and may not do with it.

We make this distinction because it matters. Consumption data can reveal occupancy and production patterns. Its protection comes from contract and confidentiality, and we would rather explain that than let a privacy notice imply a protection it does not give.

3. What we collect, and why

When	What	Why, and our lawful basis
You complete a site assessment	Name, role, work email, phone, company and site address, plus any documents you upload	To assess the site and respond. Legitimate interests — responding to a business enquiry you initiated.
You apply to the Founding Site Programme	Name, work email, phone, company and site details	To assess eligibility and reply. Legitimate interests, then performance of a contract if you join.
You register a deal as a partner	Your name, company, work email, phone, and the site you have identified	To operate deal registration. Legitimate interests, then contract.
You email us	Whatever the message contains	To reply and keep a record. Legitimate interests.
You opt in to updates	Name and work email	Marketing. Consent — withdrawable at any time.
You become a client	Contact details of named site and override contacts	To deliver and support the service. Performance of a contract.

We do not use automated decision-making that produces legal or similarly significant effects. The opportunity score produced by our assessment is reviewed by a person before anything is sent to you.

4. Who we share it with

• Our form provider — Tally, which hosts the site assessment form and stores submissions.
• Our email and file storage provider — used to receive and hold enquiries and the documents you send us.
• Our flexibility partner — where you are a client participating in flexibility markets, and only to the extent required for market participation.
• Our platform partners — who develop and support the platform and may access data in the course of doing so.
• Professional advisers and authorities — where we are required by law.

We do not sell personal data, and we do not share it for third-party marketing.

5. Transfers outside the UK

Some of our platform and engineering partners operate outside the UK. Where personal data is transferred outside the UK, we put in place the safeguards required by UK data protection law and assess the transfer before it happens.

6. How long we keep it

• Enquiries that do not progress — kept only as long as needed to respond and to keep a record of the enquiry, then deleted.
• Assessment submissions that do not progress — kept while the opportunity is open, then deleted along with any documents you uploaded.
• Client records — for the term of the contract and for as long afterwards as we are required to keep them.
• Records we must keep for tax or accounting — six years.
• Marketing consent — until you withdraw it.

You can ask us to delete your data at any time and we will do so unless we are required to keep it.

7. Your rights

You have the right to ask us for a copy of your personal data; to have it corrected; to have it deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent where we rely on it. Email dean@shockflo.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so we can put it right.

8. Cookies and tracking

This website sets no cookies and uses no analytics or tracking of any kind. Nothing is stored on your device.

Two things do involve a third party: our typefaces load from Google Fonts, which receives your IP address in order to serve them; and the site assessment form is hosted by Tally, which has its own privacy notice. If we add analytics in future we will update this notice and ask for your consent first.

9. Changes

If we change how we handle personal data we will update this notice and change the date at the top. Where a change is significant we will tell clients directly.