TrustWatt
    Back to Legal Hub

    Last updated: 21 January 2025 · Version 1.1

    Privacy Notice

    This notice explains how TrustWatt collects, uses, and protects your personal data. We've tried to keep it clear and jargon-free.

    Please note: This is a draft privacy notice provided as a template. It does not constitute legal advice. You should seek professional legal advice before relying on it.

    Privacy at a glance

    The key points about how we handle your data:

    • •We collect your name, email, and profile info when you sign up
    • •Your reviews are public (attributed to your display name)
    • •We use cookies for essential functions and, with consent, for analytics
    • •We share details with partners only when you request a quote or opt in
    • •Partners become independent controllers once they receive your data
    • •We don't sell your personal data
    • •You can access, correct, or delete your data at any time
    • •We keep your data while your account is active, then delete most within 30 days
    • •You can withdraw marketing consent anytime
    • •Questions? Email [DPO OR PRIVACY CONTACT EMAIL]

    1. Who We Are

    TrustWatt is operated by [COMPANY LEGAL NAME], the data controller for your personal data.

    Registered address: [REGISTERED ADDRESS]
    Company number: [COMPANY NUMBER]
    Privacy contact: [DPO OR PRIVACY CONTACT EMAIL]

    2. What Personal Data We Collect

    Information you give us:

    • Account details — Name, email address, password
    • Profile information — Location (region/postcode area), driving habits, household setup
    • Reviews and content — Text, ratings, photos you upload
    • Vehicle and charger details — Make, model, ownership type, installation details
    • Marketing preferences — Whether you want to receive our emails

    Information collected automatically:

    • Usage data — Pages visited, features used, time on site
    • Device information — Browser type, operating system, screen size
    • IP address — Used for security and approximate location
    • Cookies and similar technologies — See our Cookie Policy

    Information from other sources:

    • Social login — If you sign in with Google, we receive basic profile info
    • Partner referrals — If you come from a partner link, we may know which partner referred you

    3. How We Use Your Data — At a Glance

    This table shows what data we use, why, the legal basis, and how long we typically keep it:

    PurposeData UsedLawful BasisTypical Retention
    Create and manage your accountName, email, passwordContractWhile account is active + 30 days
    Display your reviews publiclyReview text, ratings, photos, display nameContractUntil you delete or request removal
    Connect you with partners for quotesName, contact, postcode area, vehicle/charger interestsContract (your request)30 days after referral; partner retains independently
    Send service emails (password reset, etc.)Email addressContractWhile account is active
    Improve TrustWatt (analytics)Usage data, device info, IPLegitimate interest / Consent (cookies)26 months (anonymised after)
    Prevent fraud and moderate contentAccount activity, content patterns, IPLegitimate interestUp to 3 years for serious breaches
    Send marketing emailsEmail, preferencesConsentUntil you unsubscribe
    Comply with legal obligationsAs requiredLegal obligationAs required by law (e.g. 7 years for tax)

    4. Partner Referrals — What Gets Shared

    When you request a quote or share your details

    Here's exactly what happens:

    What we share:

    • • Your name and contact details (email, phone if provided)
    • • Postcode area (e.g. "SW1" not full address)
    • • Vehicle and charger interests or requirements
    • • Installation context (property type, parking situation)
    • • Review summary if relevant to your enquiry

    When we share it:

    • • Only when you click "Get quote", "Request callback", or "Share details"
    • • Only with the specific partner(s) you choose or match with
    • • Never for general marketing without your consent

    Important: Partners become independent controllers

    Once we share your details, the partner becomes a separate data controller. Their privacy policy applies to how they use your data. To stop their marketing, contact them directly or use their unsubscribe links.

    5. If We Receive Your Data From a Partner (Article 14)

    In some cases, we may receive your personal data from a partner rather than directly from you. For example, a leasing company might share your details so you can access TrustWatt features.

    If this happens, we'll tell you:
    • • Who we are and how to contact us
    • • What data we received and where it came from
    • • Why we're using it and the legal basis
    • • Your rights (including to object)

    We'll provide this information within one month of receiving your data, or at first contact if we use it to communicate with you.

    6. Who We Share Your Data With

    Service providers

    We use trusted providers to help run TrustWatt:

    • Cloud hosting and database services
    • Email delivery services
    • Analytics tools
    • Payment processors (if applicable)

    These providers only access data needed to provide their services and are contractually bound to protect it.

    Legal and regulatory

    We may disclose data if required by law, court order, or to protect our rights.

    7. International Transfers

    Your data is primarily stored in the UK/EEA. If we transfer data outside this area (for example, to use certain service providers), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

    8. How Long We Keep Your Data

    • Active accounts: We keep your data while your account is active
    • After account deletion: We delete most data within 30 days. Some data may be retained longer for legal or operational reasons (e.g., fraud prevention, tax records)
    • Reviews: If you delete your account, your reviews may remain visible (anonymised) unless you specifically ask us to remove them
    • Marketing preferences: We keep a record of your opt-out to respect your wishes

    9. Security

    We use appropriate technical and organisational measures to protect your data, including:

    • Encryption in transit and at rest
    • Access controls and authentication
    • Regular security reviews
    • Staff training on data protection

    No system is completely secure. If you suspect a security issue, please contact us immediately.

    10. Your Rights

    Under UK GDPR, you have the right to:

    • Access your data — Request a copy of what we hold about you
    • Correct inaccurate data — Update or fix errors
    • Delete your data — Request we erase your personal data
    • Object to processing — Opt out of certain uses (like direct marketing)
    • Restrict processing — Limit how we use your data in certain circumstances
    • Data portability — Receive your data in a portable format
    • Withdraw consent — Where processing is based on consent, you can withdraw it anytime

    11. How to Make a Data Request

    Submitting a request

    What to include:

    • • Your name and email address associated with your account
    • • The type of request (access, deletion, correction, portability, etc.)
    • • Any details that help us find your data (e.g. approximate signup date)

    How to submit:

    • • Email: [DPO OR PRIVACY CONTACT EMAIL]
    • • Or use our Contact page with subject "Data Request"

    How we verify your identity:

    For most requests, we'll verify you own the email address on file (e.g. by sending a confirmation link). For sensitive requests, we may ask for additional verification to protect your data.

    Response times:

    • • We aim to respond within one month
    • • Complex requests may take up to two additional months (we'll let you know)
    • • Requests are free unless manifestly unfounded or excessive

    12. Complaints

    If you're unhappy with how we've handled your data, please contact us first so we can try to resolve the issue.

    You also have the right to complain to the Information Commissioner's Office (ICO):
    ico.org.uk

    13. Children

    TrustWatt is not intended for users under 16 years old. We don't knowingly collect data from children. If you believe a child has created an account, please contact us.

    14. Changes to This Notice

    We may update this notice from time to time. When we do:

    • We'll update the "Last updated" date and version number at the top
    • For significant changes, we'll notify you by email or in-app notification
    • Previous versions are available on request

    15. Contact Us

    Questions about this notice or your data? Contact us at:
    Email: [DPO OR PRIVACY CONTACT EMAIL]
    Address: [REGISTERED ADDRESS]

    Version note:

    Current version: 1.1. If we make big changes, we'll post an update here and notify you in-app.