Data Privacy Policy

Introduction

smartgridhubae Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website smartgridhubae.pro and use our services.

We are the data controller for the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts. Our company registration number is CRO859674, and we are registered in Ireland.

Data Collection

We collect various types of information in connection with the services we provide. The data we collect includes:

Personal Information

When you contact us or use our services, we may collect personal information such as your name, email address, phone number, business details, and any other information you voluntarily provide to us through our contact forms, email correspondence, or phone calls.

Technical Information

We automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits.

Communication Records

We may keep records of our communications with you, including emails, phone calls, and meeting notes, to provide better service and maintain accurate records of our business relationship.

How We Use Your Information

We use the information we collect for various legitimate business purposes. How we use your data depends on the services you use and your relationship with us:

• To provide and deliver our comparison services and respond to your enquiries
• To communicate with you about our services, including sending you information about financial management tools that may be relevant to your business
• To improve our website and services based on your feedback and usage patterns
• To comply with legal obligations and protect our legal rights
• To prevent fraud and ensure the security of our services
• To analyse website usage and improve user experience

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legitimate Interest: Where processing is necessary for our legitimate interests, such as improving our services, provided this does not override your rights and interests
• Legal Obligation: Where processing is necessary to comply with legal obligations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential
• When required by law or to respond to legal process
• To protect our rights, property, or safety, or that of our users or the public
• In connection with a merger, acquisition, or sale of assets, where your information may be transferred to the acquiring entity

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• Contact form submissions and enquiries: 3 years from last contact
• Client consultation records: 7 years for business and tax purposes
• Website analytics data: 26 months (Google Analytics default)
• Marketing communications: Until you unsubscribe or 3 years of inactivity
• Legal compliance records: As required by applicable laws

When we no longer need your personal information, we will securely delete or anonymise it.

Your Rights

Under GDPR and Irish data protection law, you have the following rights regarding your personal data:

• Right of Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request limitation of how we use your data
• Right to Data Portability: You can request transfer of your data to another organisation
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security
• Secure backup and recovery procedures

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may not have equivalent data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Certification schemes or codes of conduct

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the "Last updated" date at the top of this policy and notify you of any material changes through our website or other appropriate means.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with applicable law. You can contact them at www.dataprotection.ie.