Electryone
Legal

Privacy Policy

Last updated: 9 September 2025

1. Introduction

Electryone AI respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information, as well as your rights and our legal obligations.

Electryone AI Limited is a company registered in England (company number 14508320). This policy covers services provided via our website (https://www.electryone.ai/), platform, and any mobile applications available through the App Store or Google Play. Services may also be offered through partner companies under their own branding.

Address: 3rd Floor, 86-90 Paul St, Shoreditch, London, EC2A 4NE
Contact: [email protected]

2. Service and Reason for Processing Data

Electryone provides a platform enabling energy asset owners, installers, manufacturers, retailers, service providers, and end-users to manage energy consumption by shifting usage to greener and cheaper periods, or exporting stored energy during expensive periods, subject to grid constraints and personal preferences.

Personal information collected enables us to:

  • Deliver and improve our service
  • Provide user support
  • Collaborate with energy companies, OEMs, TSOs, DSOs, and relevant parties
  • Offer enhanced services and rewards through third-party partnerships

Consent is required before data processing begins. Only personal data necessary for service delivery is collected.

3. Personal Data We Collect

Identity and Contact Data

First name, last name, username or platform identifier, encrypted password, social media username, home address, email addresses, and telephone numbers.

Profile and Consent Data

Contact preferences (marketing, notifications), marketing and non-marketing communication subscriptions, consent records for third-party data sharing, survey and questionnaire responses, design research program feedback, and partly anonymised app and website analytics.

Hardware Data

Vehicle make, model, trim, registration, and VIN; battery size and charging capabilities; asset make, model, and configuration; state of charge; asset location; connection status; charging and power status; manufacturer service mode status; vehicle stationary status; and current and desired temperature.

Energy Data

Smart meter data (half-hourly consumption and export), tariff details, MPAN, meter serial number and type, energy retailer name and price plan, home energy consumption and production, billing information and account numbers.

Third-Party Account Data

Encrypted usernames, passwords, or access tokens stored in a secure enclave; account identifiers for third-party systems. This data is requested and stored only after your consent.

Technical Data

IP addresses, device geolocation, device type, operating system, browser type, plugins, time zone, and locale information collected when you access our platform.

Transaction and Financial Data

Details of purchased products and services, EV charging energy usage and timing, payment information, and payment provider account references.

Tracking Data

Information from cookies, web beacons, pixels, and mobile identifiers used to improve your experience, analyse usage patterns, and ensure platform security.

Aggregated and Anonymised Data

We may use aggregated data that does not reveal your identity indefinitely without notice — for example, battery storage data may be used for utility planning purposes. Where personal data collection is legally required or contractual, failure to provide it may result in service cancellation with notification.

4. How We Use Personal Data

We process your personal data under three legal bases:

  • Legitimate interests: processing necessary for our business interests (or those of a third party) where your rights do not override those interests.
  • Contractual obligations: processing required to fulfil contracts or take pre-contract steps at your request.
  • Legal compliance: processing necessary to comply with legal or regulatory obligations.

We do not use your personal data for automated decision-making or profiling.

4.1 Purposes for Using Personal Data

We use your personal data for the following purposes:

Purpose / Activity Type of Data Lawful Basis for Processing
Register you as a new customer Identity, Contact Performance of a contract with you
Deliver the Service to you Identity, Contact, Financial, Transaction, Marketing Performance of a contract with you
Process and deliver your orders including managing payments, fees, and charges and collecting and recovering money owed to us Identity, Contact, Financial, Transaction, Marketing Performance of a contract with you; Necessary for our legitimate interests (to recover debts due to us)
Manage our relationship with you, which will include notifying you about changes to our terms or privacy policy, asking you to leave a review or take a survey, or analysing your use of our Service Identity, Contact, Profile, Marketing Performance of a contract with you; Necessary to comply with a legal obligation; Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
Enable you to partake in a prize draw, competition, or complete a survey Identity, Contact, Profile, Usage, Marketing Performance of a contract with you; Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
Administer and protect our business, software, and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data) Identity, Contact, Technical Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise); Necessary to comply with a legal obligation
Deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you Identity, Contact, Profile, Usage, Marketing, Technical Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
Process electricity bills using automated tools (including LLMs) to extract tariff information for tariff-aware optimisation Identity, Energy, Profile Necessary for our legitimate interests (to provide tariff-aware optimisation as a core part of our service)
Verify your identity and address, link your meter to your account, and manage your consent Identity, Contact, Consent, Technical Necessary for our legitimate interests (fraud prevention and accurate billing); Necessary to comply with a legal obligation (consent evidence and regulatory compliance)
Use data analytics to improve our website, products/services, marketing, customer relationships, and experiences Technical, Usage Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
Make suggestions and recommendations to you about goods or services that may be of interest to you Identity, Contact, Technical, Usage, Profile, Marketing Necessary for our legitimate interests (to develop our products/services and grow our business)

4.2 Promotional Offers

We may use your identity, contact, technical, usage, and profile data to determine which products, services, and offers may be relevant to you. Marketing communications are sent only when you have requested information, subscribed, and have not opted out.

4.3 Third-Party Marketing

We will obtain your express opt-in consent before sharing your personal data with any third party for marketing purposes.

4.4 Opting Out

You can stop receiving marketing messages from us or third parties at any time by contacting us. Opting out does not apply to transaction-related or service experience data.

4.5 Cookies

Cookies are small pieces of data stored on your device when you visit our website. They are not used for personal identification but to understand usage and browsing behaviour. You can configure your browser to refuse cookies, though disabling them may affect website functionality. Detailed cookie information is available in our cookie policy.

4.6 Change of Purpose

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that a new use is compatible with the original purpose. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis. Data may be processed without your knowledge or consent where required or permitted by law.

5. Disclosure of Personal Data

Your data is stored and used internally, and shared with third parties only when necessary for service provision. All third parties undergo due diligence assessment and are bound by written agreements with data security and privacy terms.

5.1 Providing Our Service

We may share personal information with selected third parties including service providers, professional advisors, and authorities. Anonymised data (without specific location details) may be shared with energy companies and distribution system operators to prevent third-party identification.

5.2 Legal Reasons

Personal data may be shared to comply with court orders, warrants, or requests from law enforcement and tax agencies. Sharing may occur without permission when life is at risk or to initiate or defend legal claims involving solicitors, advisors, or courts.

5.3 Supporting Our Users

Personal data (identity, contact, technical, and hardware data) may be shared with suppliers and subcontractors to provide efficient support, limited to the details specific to your inquiry.

5.4 Providing Enhanced Services and Rewards

Enhanced services and rewards may be delivered through partnerships. Energy data and contact data may be shared with:

  • Electricity network companies (local area delivery)
  • Electricity market operators (grid balancing)
  • Energy service providers (aggregation and market access)

Email and contact details may be shared for enhanced service and reward delivery. You can opt out at any time.

5.5 Business Transfer

In sale, transfer, or merger situations, information may be disclosed to third parties. New owners may use personal data as outlined in this policy. Third parties must respect data security, comply with law, and only process data for specified purposes per our instructions. Third-party use for their own purposes is prohibited.

5.6 Other Reasons

Limited personal information may be shared if necessary to meet legitimate interests or promote your interests without breaching data protection laws. Contact details may be shared for marketing with your consent or for contract fulfilment. Account holders must inform third-party integrators of any integration before service interaction.

6. International Transfers

Third-party services throughout Europe may involve cross-country data transfers. While governed by UK and EU GDPR, protection is ensured through transfer to countries with adequate personal data protection, or through specific approved contracts providing equivalent UK and EU protection. Contact us for details on the mechanisms used.

7. Security of Personal Data

We have implemented security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or misuse. Data access is restricted to employees, agents, contractors, and third parties with a legitimate need, all bound by confidentiality.

We have data breach response procedures in place and will report any breaches as required by law. Technical and organisational measures protect against loss, misuse, or alteration. You are responsible for password confidentiality and security. We will never request your password except during login, nor request sensitive information such as bank details for identity verification. Contact us immediately if anyone claiming to represent Electryone requests such information.

8. Retaining and Deleting Personal Data

We retain personal data only as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, or reporting requirements. Retention may extend during complaints or litigation. Periodic reviews are conducted to delete unnecessary data.

Retention period determination considers the amount, nature, and sensitivity of the data, risks of unauthorised use or disclosure, processing purposes, and legal requirements. You can request account deletion by contacting us, though legal requirements may mandate data retention (such as for Grid Support project participation). Anonymised data for research or statistics may be used indefinitely without notice.

9. Your Legal Rights

Under applicable data protection law, you have the right to:

  • Access: Request a copy of the personal data we hold about you to verify that we are handling it lawfully.
  • Rectification: Request correction of any inaccurate or incomplete data. Verification of new information may be required.
  • Erasure: Request deletion of your personal data where no processing rationale exists, objection has succeeded, processing was unlawful, or legal erasure requirements apply. Legal reasons may prevent fulfilment.
  • Object: Object to processing based on legitimate interests (or third-party interests) affecting your fundamental rights and freedoms, or object to direct marketing. Compelling legitimate grounds may override objections.
  • Restrict processing: Request suspension of processing if accuracy verification is needed, use is unlawful but erasure is not desired, data retention for legal claims is necessary, or objection verification is pending.
  • Data portability: Request your personal data in a structured, commonly used, machine-readable format for transfer to yourself or a third party. Applies only to automated information with initial consent or contract-required information.
  • Withdraw consent: Withdraw any consent you have given at any time. Withdrawal does not affect the legality of previous processing. Withdrawal may prevent us from providing certain products or services.

We may charge a reasonable fee for unfounded, repetitive, or excessive requests, or refuse compliance. We will respond within one month, though complex or multiple requests may take longer with notification.

10. Job Applicant's Privacy

Personal data is collected for application processing based on consent. Unsuccessful applicants' information is retained for 6 months from the role closing date. Collected categories include personally identifiable information (name, address, email, telephone, reference contact details) and internet/electronic network activity. Applicants should not disclose sensitive personal data during the application process.

11. User Research

We conduct regular user research to guide service development. Data collected is used for research only and is never sold. User interviews are recorded for post-review and deleted when no longer relevant or after three years (whichever is sooner). Transcripts are retained after expiry with anonymised personally identifiable information. Research materials are kept secure.

12. Children's Privacy

Our services do not address anyone under 16. We do not target or knowingly collect personally identifiable information from children under 16. Upon discovery of such information, immediate deletion occurs. Parents or guardians aware of a child having provided us information should contact us.

13. Third-Party Users

Third parties without agreed terms or a privacy policy may interact with our service via integrated vehicles or chargers. Account holders must inform third parties of any integration before service interaction.

14. Contact Us

For privacy policy questions or inquiries about our data practices, contact us:

Email: [email protected]
Post: 3rd Floor, 86-90 Paul St, Shoreditch, London, EC2A 4NE

We aim to acknowledge complaints within 5 working days and provide a resolution promptly. Unresolved complaints may be escalated to the UK Information Commissioner's Office (ICO) at www.ico.org.uk.