QGEMS Privacy Policy
QGEMS Privacy Policy
Effective Date: 22 November 2024
At QGEMS, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share data related to energy usage and generation for buildings connected to microgrids, smart meters, and inverters. It also describes the rights you have concerning your data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller Information
QGEMS Energy Ltd is the data controller responsible for your data.
QGEMS Energy Ltd, Building 5, Newcastle Airport Freight Village, Newcastle Upon Tyne, NE13 8BH
Tel: 0191 580 4405
https://helpdesk.qgems.energy
QGEMS Energy Ltd is registered in England and Wales with company number 13684666 and with the Information Commissioners Office reference ZB808138.
2. Types of Data We Collect
a. Personal Data
When you register or use our service, we may collect personal information such as:
-
Name, address, email address, and phone number.
b. Usage and Generation Data
QGEMS collects detailed energy usage and generation data through connections to:
-
Smart Meters: For tracking and reporting energy consumption, export and meter technical data.
-
Microgrids: For analysing and reporting on energy flow and grid management.
-
Inverters: For monitoring, controlling, and configuring energy purchase and sales activities.
c. Technical Data
To ensure optimal performance, we may collect technical information, including:
-
Device information (e.g., type of device, firmware version).
-
Configuration settings for inverters, batteries and connected devices.
3. Purpose of Data Collection and Processing
We collect and process data to:
-
Provide Reports: Generate detailed reports on energy consumption and generation patterns for buildings connected to microgrids and smart meters.
-
Energy Management: Control inverters by reading and sending configuration data to manage energy purchases and sales.
-
Improvement of Services: Use data to enhance our services and provide energy optimization recommendations.
-
Compliance and Legal Obligations: Meet regulatory requirements and adhere to legal obligations.
4. Legal Basis for Data Processing
The UK GDPR requires that we specify the legal grounds for processing each type of data. We rely on:
-
Contractual Necessity: For data collected to provide core services (e.g., energy usage reports).
-
Legitimate Interests: To optimize energy management and improve service efficiency.
-
Consent: For marketing and any additional services that are not essential to our contract with you.
5. Data Storage and Security
All data is stored securely within the UK, with strict security measures to protect it, including:
-
Encryption: Data is encrypted both in transit and at rest.
-
Access Controls: Access is restricted to authorized personnel only.
6. Data Sharing and Disclosure
QGEMS may share data with third parties under the following circumstances:
-
Installer: The property Installer, where the end user was introduced to QGEMS from their installer. Installer will have access to the energy usage and generation data unless customer withdraws consent or the installer terminates the relationship with either QGEMS or the end user.
-
Service Providers: For secure storage, analytics, and technical support.
-
Legal Requests: We may disclose data in response to legally enforceable requests from authorities, in compliance with UK law.
We ensure that all third parties handling data comply with data protection regulations and our privacy standards.
7. International Data Transfers
Data is stored in the UK, and no international transfers occur as part of normal operations. If international data transfers become necessary, we will implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent legal measures.
8. Retention of Data
We retain data based on regulatory and operational needs:
-
Energy Usage and Generation Data: Retained for up to 5 years to provide historical usage reports and compliance with energy regulations.
-
Configuration Data: Retained as long as necessary for ongoing management of inverter settings. Data will be securely deleted or anonymized when no longer needed.
9. Your Rights Under UK GDPR
You have the following rights regarding your data:
-
Right to Access: Request a copy of your data.
-
Right to Rectification: Correct inaccurate data.
-
Right to Erasure: Request deletion of your data where applicable.
-
Right to Restrict Processing: Limit processing under certain conditions.
-
Right to Data Portability: Obtain your data in a machine-readable format.
-
Right to Object: Object to data processing in specific circumstances.
-
Right to Not Be Subject to Automated Decision-Making: We will inform you if we use automated decision-making that has significant effects on you.
To exercise these rights, contact us at the contact details provided in this document.
10. Consent and Withdrawal of Consent
Where consent is required for processing (e.g., marketing), you can provide or withdraw consent at any time. To update your consent preferences, contact us at [Insert Contact Information].
Consent is given for a period of 2 years, after which consent will automatically be withdrawn and need to be given again before data collection resumes.
When consent is given, smart meter data will be collected at 30-minute intervals.
Parental Consent
Our services are not intended for children under 13. If a child’s data is collected inadvertently, we will delete it promptly upon discovery.
11. Cookies and Tracking Technologies
We use cookies and tracking technologies to optimize user experience and analyze usage trends.
-
Types of Cookies: Functional and analytics cookies to improve our services.
-
Managing Cookies: You can manage cookie preferences through your browser settings. More details can be found in our Cookie Policy.
12. Complaints and ICO Contact Information
If you have concerns about how we handle your data, please contact us directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
ICO Contact Information
-
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK
-
Website: https://ico.org.uk/
13. Changes to the Privacy Policy
We may update this Privacy Policy periodically. Changes will be communicated through email or in-app notifications. Please review updates carefully as they will take effect upon notification.
14. Contact Information
For questions about this policy or to exercise your data rights, please reach out to us:
-
Email: [email protected]
-
Phone: 0191 580 4405
-
Address: Data Protection Officer, QGEMS, Building 5, Newcastle Airport Freight Village, Newcastle Upon Tyne, NE13 8BH