Last updated: 9 August 2024.
‍
This Privacy Policy describes how your personal information is collected,
used, and shared when you visit https://heata.co (the “Site”).


Personal information that we collect
When you visit the Site, we automatically collect certain information about your device, including
information about your web browser, IP address, location, time zone, and some of the cookies that are
installed on your device. Additionally, as you browse the Site, we collect information about the
individual web pages or products that you view, what websites or search terms referred you to the Site,
and information about how you interact with the Site. We refer to this automatically-collected
information as “Device Information”.


We collect Device Information using the following technologies:
“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit this page.

“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you
browse the Site.

We also collect Personal Information through our interaction with you:
This could be via the Forms on our Site but also through interaction with you, where you voluntarily provide us with personal information when you express an interest in obtaining information about us or our products and services, via email, in person, or over the phone. We may also obtain information from third parties or affiliates where there is lawful reason for this information to be shared. Personal information may include your name, contact details (telephone number, email address, physical address), household information (such as household composition or the physical properties of your home), transaction and payment information, information about your energy supplier, or other miscellaneous information collected through survey responses.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device
Information and the Personal Information you voluntarily disclose to us, through our Newsletter Form on
our Site and also through any interaction via email, in person, or over the phone. This also includes any Smart Meter data we gather with your consent as part of our trial.
‍

How do we use your personal information?
We only process your personal data on a lawful basis and for specified purposes. These include:

Lawful basis: Entering and performing the contract to be a heata host. This includes:

Identifying and selecting eligible hosts, installing our devices and managing ongoing activities with you, and reimbursing you for energy we use in your home.

Lawful basis: legitimate interest. This includes:
‍
Device Information that we collect to help optimise our Site, for example, by generating
analytics about how our visitors browse and interact with the Site, to gauge its effectiveness. And to
support targeted marketing and advertising campaigns, and retargeted advertising, and to assess the
success of those marketing and advertising campaigns.

Personal information you provide to us through our Newsletter Form to keep in touch; sending you updates on interesting developments at heata, and potentially some very occasional marketing too, eg. a special offer if we have one.

Personal information you provide to us through other Forms on our site to identify which services you are interested in, to put you in touch with the relevant team at heata, and to contact you with relevant information where appropriate.

Personal information we gather through our other interaction with you, we will use to keep you informed as per what was agreed in the interaction with you, or to send you communications that could reasonably be expected to be relevant to you, given the initial interaction.

Personal information you provide to us by creating an account on our Portal(s), to facilitate the set-up of features of our service, to help us manage the services we undertake for you, and to provide you with information relevant to the services, eg the environmental or social impact of the workloads you may process on the heata network.

The Smart Meter data we gather as part of our trial will be used to enable us to better understand how heata units affect a household's energy consumption, and to obtain SAP (Standard Assessment Procedure) accreditation from DESNZ (UK Government Department for Energy Security & Net Zero) such that heata units can affect housing Energy Performance Certificates.
‍

Sharing your personal information
We share your Personal Information with third parties to help us use your Personal Information, as
described above. We do not share, sell, rent or trade any of your information with third parties for their
promotional purposes.

Third-Party Service Providers
‍We use Google Analytics to help us understand how our customers use the Site.

You can read more about how Google uses your Personal Information here.

And you can opt-out of Google Analytics here.

We use Mailchimp for our Newsletters.
You can view Mailchimp’s Privacy Policy here.

We use Hubspot for Customer Relationship Management.
You can view Hubspot’s Privacy Policy here.

We use Memberstack to manage accounts on our user Portal(s).
You can view Memberstack’s Privacy Policy here.

We use n3rgy data to interface with the national Smart Meter Systems in order to collect, store and manage Smart Meter data (including energy usage and consumption data) in relation to our trial. This data may be shared with DESNZ (UK Government Department for Energy Security & Net Zero) and BRE (the Building Research Establishment) for the sole purpose of the accreditation process.

n3rgy’s data service uses the Smart Energy Code.
You can view n3rgy’s Privacy Policy here.
You can view BRE’s Privacy Policy here.

We may also need to process your data or share your personal information in the following situations:

Business Transfers
‍We may share or transfer your information in connection with, or during negotiations of, any merger,
sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Affiliates
‍We may share your information with our affiliates, in which case we will require those affiliates to
honour this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture
partners or other companies that we control or that are under common control with us. Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

‍
‍Behavioural advertising
As described above, we use your Personal Information to provide you with targeted advertisements or
marketing communications we believe may be of interest to you.

For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page.

You can opt-out of our targeted advertising (Google AdSense and Adwords) by clicking on this link.

Additionally, you can opt-out of some of these services by visiting the Digital Advertising Alliance’s opt-
out portal.
‍
‍
Do not track
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not
Track signal from your browser. If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.


Data retention
‍‍‍We will keep your personal data for as long as necessary in order to achieve the processing purposes. If you register your interest in being part of an in home trial and are unsuccessful, we will inform you and delete your information at the end of the trial. If you are successful, we will delete your information three months after the trial ends, unless we have reason to retain it for longer. When you sign-up to our Newsletter we will maintain your Personal Information for our records unless and until you ask us to delete this information. To make such a request, please use the contact details provided below.


Your rights
You have the following rights in relation to your personal data:

1. To be informed about the personal data we collect, how your personal data is being used, and from whom we collect your personal data when we obtain it from other sources.

2. To access the personal data we hold about you.

3. To request the correction of inaccurate personal data we hold about you.

4. To request the blocking or deletion of your personal data in some circumstances.

5. To request that we port elements of your data either to you or another service provider.

6. To object to us processing your personal data where a) we are relying on a legitimate interest and your rights override that interest; or b) because we are using automated means to make decisions that have a legal or similarly significant effect.

7. To withdraw your consent where we rely on it to process your data.

Some of the above rights only apply in specific circumstances, which depend on the legal basis on which we collected your personal data. To exercise any of the above rights, or if you have any questions relating to your rights, please contact us using the details below. We may require evidence of your identity before we are able to complete your request. In some regions, such as the European Economic Area, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

Changes
We may update this privacy policy from time to time in order to reflect, for example, changes to our
practices or for other operational, legal or regulatory reasons.


Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a
complaint, please contact our Data Privacy Officer at: dpo@heata.co

Or by mail:
‍Heata, Wood Farm, Portsmouth Road,
Godalming, United Kingdom, GU7 2JR.