Privacy Policy

1. Who We Are

This website is operated by:

Scala Energy Limited
Registered in England and Wales
Company Number: 17019700
Registered Office: 20 Wenlock Road, London, England, N1 7GU
Telephone: 020 3642 8090

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the Data Controller of your personal data.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

Information You May Provide Directly

Name
Email address
Phone number
Billing and delivery address
Payment information (processed securely via third-party payment providers)
Any information submitted via contact forms or account registration

Information Collected Automatically

IP address
Browser type and version
Device information
Pages visited and time spent on our site
Cookies and tracking data

Information from Third Parties

Analytics providers (e.g. Google Analytics)

3. How We Use Your Data

We use your personal data to:

Provide goods and services
Process payments and orders
Respond to enquiries
Manage your account
Improve our website and services
Send marketing communications (where consent has been given)
Comply with legal obligations

4. Lawful Basis for Processing (UK GDPR)

Under UK GDPR, we rely on the following lawful bases:

Contractual necessity – To fulfil orders and provide services
Legal obligation – To comply with tax and regulatory requirements
Legitimate interests – To improve services and prevent fraud
Consent – For marketing emails and certain cookies

You may withdraw consent at any time.

5. Cookies

We use cookies to:

Enable website functionality
Analyse traffic and performance
Personalise user experience
Deliver targeted advertising (if applicable)

You can manage cookie preferences via your browser settings or our cookie banner.

6. Data Sharing

We may share your data with:

Payment processors
IT and hosting providers
Professional advisers (accountants, legal advisers)
Government authorities where required by law

We ensure third parties respect the security of your data and comply with UK data protection law.

7. International Transfers

If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

UK adequacy regulations
International Data Transfer Agreements (IDTAs)
Standard Contractual Clauses

8. Data Retention

We retain personal data only for as long as necessary to:

Fulfil the purposes collected
Meet legal, accounting, or reporting requirements

Typically:

Customer records: 6 years (for tax purposes)
Marketing data: Until consent withdrawn
Enquiries: 12–24 months

9. Your Rights Under UK GDPR

You have the right to:

Access your personal data
Correct inaccurate data
Request erasure ("right to be forgotten")
Restrict processing
Data portability
Object to processing
Withdraw consent
Lodge a complaint with the UK supervisory authority
Supervisory Authority
You can complain to:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113
We encourage you to contact us first so we can resolve your concern.

10. Data Security

We implement appropriate technical and organisational measures, including:

SSL encryption
Secure servers
Access controls
Staff training
Regular security reviews

11. Marketing Communications

You will only receive marketing emails if:

You have opted in; or
You are an existing customer, and we are marketing similar services (soft opt-in).

You may unsubscribe at any time via the link in our emails.

12. Children’s Data

Our website is not intended for children under 13. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.