Effective date: [Insert date]
Last updated: [Insert date]
1. Who we are
EnergyBoxx (“we”, “us”, “our”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you:
- visit our website at www.energyboxx.ie
- contact us by email, phone, or contact form
- request a brochure, quote, or consultation
- interact with us in relation to our products, services, or projects
For the purposes of applicable data protection law, the data controller is:
EnergyBoxx
Millie & Holly Ltd
Unit 2, site 117, Baldoyle ind estate, Dublin 13
info@energyboxx.ie
+353857810957
If you have any questions about this Privacy Policy or how we use your personal data, you can contact us at info@energyboxx.ie.
2. What personal data we collect
We may collect and process the following categories of personal data:
Information you provide to us
- Name
- Company name
- Job title
- Email address
- Phone number
- Address
- Project details
- Inquiry details
- Any other information you choose to include in forms, emails, or messages
Information collected automatically
When you use our website, we may automatically collect certain technical information, such as:
- IP address
- Browser type and version
- Device type
- Operating system
- Referral source
- Pages visited
- Time spent on pages
- Date and time of access
- General location data based on IP
Marketing and communications data
- Your preferences for receiving marketing communications
- Records of your form submissions, downloads, and communication history
Cookies and similar technologies
We may use cookies and similar technologies to operate the website, analyse usage, and improve performance. Where required by law, we will ask for your consent before placing non-essential cookies on your device.
3. How we collect your data
We collect personal data:
- directly from you when you fill in a form, request a brochure, contact us, or otherwise communicate with us
- automatically through cookies and analytics tools when you browse our website
- from third-party service providers where relevant, such as website analytics, CRM, marketing, hosting, or form platforms
4. How we use your personal data
We use your personal data for the following purposes:
- to respond to your inquiries
- to provide brochures, proposals, quotes, or information you request
- to communicate with you about our products and services
- to manage potential client and supplier relationships
- to operate, maintain, and improve our website
- to analyse website traffic and user behaviour
- to maintain security and prevent misuse of our website
- to comply with legal and regulatory obligations
- to send marketing communications where lawful
Data protection rules require organisations to tell people the purposes for which their data is used, the legal basis relied on, how long the data is kept, who it is shared with, and what rights people have.
5. Lawful bases for processing
We process personal data only where we have a lawful basis to do so. Depending on the situation, we may rely on one or more of the following:
Legitimate interests
We may process your personal data where necessary for our legitimate interests, including:
- responding to business inquiries
- managing leads and customer relationships
- improving our website and services
- ensuring website and network security
- administering our business effectively
Consent
We may rely on your consent:
- for non-essential cookies and similar tracking technologies
- for certain marketing communications where consent is required
You can withdraw your consent at any time.
Contract
We may process personal data where necessary:
- to take steps at your request before entering into a contract
- to perform a contract with you or your organisation
Legal obligation
We may process personal data where necessary to comply with legal or regulatory obligations. Regulators also expect organisations to explain the lawful basis they rely on for each kind of processing.
6. Who we share your personal data with
We may share your personal data with trusted third parties where necessary for the purposes described above, including:
- website hosting providers
- website developers and maintenance providers
- CRM or lead management systems
- email and communication providers
- analytics providers
- cookie consent platform providers
- cloud storage providers
- professional advisers, including legal, accounting, and insurance advisers
- regulators, authorities, or law enforcement where required by law
We require service providers acting on our behalf to handle personal data appropriately and securely.
Potential third-party services used on this site
Replace or edit this section to match what EnergyBoxx actually uses:
- Google Analytics
- Google Ads
- Meta Pixel
- Elementor forms
- CRM platform such as HubSpot, Zoho, or similar
- Email marketing platform such as Mailchimp or Brevo
- File download / brochure delivery tools
- Web hosting provider
Do not publish this policy with guessed tools. This part should match the real stack.
7. International data transfers
Some of our third-party service providers may store or process personal data outside the European Economic Area or the UK. Where this happens, we will ensure appropriate safeguards are in place, such as:
- an adequacy decision
- Standard Contractual Clauses
- other lawful transfer mechanisms required by applicable data protection law. EU guidance explains that transfers outside the EU require an appropriate legal safeguard.
8. How long we keep your data
We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, reporting, and record-keeping requirements. Regulators state that if a specific retention period is not given, the organisation should explain the criteria used to decide retention.
Typical retention periods may include:
- Contact form inquiries: up to [12/24] months after last contact
- Brochure download and lead data: up to [12/24] months unless a longer business relationship develops
- Client or supplier communications: for the duration of the relationship and for a reasonable period afterward
- Contractual and financial records: as required by law
- Analytics and cookie data: according to the relevant platform’s settings and retention controls
You should replace these with the actual retention periods used by EnergyBoxx.
9. Your data protection rights
Depending on your location and the applicable law, you may have the right to:
- access your personal data
- request correction of inaccurate or incomplete data
- request erasure of your personal data
- request restriction of processing
- object to processing based on legitimate interests
- request data portability
- withdraw consent at any time where processing is based on consent
- lodge a complaint with a supervisory authority
These rights are part of the information people should be told in a privacy notice.
To exercise any of these rights, contact us at [privacy email].
10. Complaints
If you are not satisfied with how we handle your personal data, you have the right to complain to the relevant data protection authority.
If EnergyBoxx is based in Ireland, the relevant supervisory authority is the Data Protection Commission. If the business is established in the UK, the relevant authority is the Information Commissioner’s Office.
11. Cookies
Our website may use essential and non-essential cookies.
Essential cookies
These are necessary for the website to function properly and do not usually require consent.
Analytics cookies
These help us understand how visitors use our website so we can improve performance and user experience.
Marketing cookies
These may be used to track visitors across websites to help deliver relevant advertising or measure campaign performance.
Where required by law, we will ask for your consent before using non-essential cookies. You can manage your preferences through our cookie banner or browser settings. ICO guidance makes clear that privacy notices and cookie information should explain what is used, why, and how users can control it.
You may also wish to maintain a separate Cookie Policy with a more detailed cookie table.
12. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction. Data protection authorities emphasise that organisations should put appropriate security measures in place when handling personal data.
However, no system is completely secure, and we cannot guarantee the absolute security of information transmitted عبر the internet.
13. Third-party websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy notices before providing any personal data.
14. Children
Our website and services are not intended for children, and we do not knowingly collect personal data from children.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, legal requirements, or website technologies. Any updates will be posted on this page with a revised “Last updated” date.
16. Contact us
If you have any questions about this Privacy Policy or our use of your personal data, please contact:
EnergyBoxx
Millie & Holly Ltd
Unit 2, site 117, Baldoyle ind estate, Dublin 13
info@energyboxx.ie
+353857810957