Privacy Policy

1. Data Controller

Iron Wolfe Technologies Ltd is the data controller for personal data processed through EnerFlo.ai.

• Company name: Iron Wolfe Technologies Ltd
• Registered in: United Kingdom
• Contact: privacy@enerflo.ai

2. What Data We Collect

• Account data: name, email, role, workspace, authentication credentials.
• Customer / CRM data: contact details, sites, utility bills, tariffs, quotes, and contracts you upload or create.
• Usage data: log files, IP address, browser type, session activity, and feature interactions.
• Cookies & local storage: session tokens, theme preference, and workspace selection.

3. Lawful Basis for Processing

• Contract: to provide the Service you have signed up for.
• Legitimate interests: to secure, improve and support the Service.
• Legal obligation: to comply with UK tax, accounting and regulatory requirements.
• Consent: where required (e.g., marketing communications, non-essential cookies).

4. How We Use Your Data

We use personal data to:

• Provide, operate and maintain the EnerFlo.ai platform.
• Process quotes, contracts and supplier interactions on your behalf.
• Authenticate users and protect against fraud or abuse.
• Send service-related notifications and follow-ups.
• Comply with legal obligations and respond to lawful requests.

5. Data Sharing

We do not sell your personal data. We may share data with trusted sub-processors strictly to operate the Service, including:

• Hosting & database providers (e.g., Supabase, Vercel).
• Email & notification providers.
• Energy suppliers, where required to submit a quote or contract on your behalf.
• Authorities or regulators where required by law.

6. International Transfers

Where personal data is transferred outside the UK or EEA, we rely on UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or adequacy decisions to ensure equivalent protection.

7. Data Retention

We retain personal data only for as long as necessary to provide the Service, comply with legal obligations (e.g., contract and tax records typically 6 years in the UK), resolve disputes and enforce agreements.

8. Your Rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email privacy@enerflo.ai.

9. Security

We implement industry-standard technical and organisational measures including encryption in transit (TLS), encryption at rest, role-based access controls, row-level security on databases, and audit logging.

10. Cookies

We use a small number of essential cookies and local storage items to keep you signed in and remember your preferences. See our Cookies Policy for details.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email.

12. Contact

Iron Wolfe Technologies Ltd
United Kingdom
Email: privacy@enerflo.ai