Who is responsible
Energy Stack is the controller for the personal information described here. Questions and data protection requests can be sent to hello@energystack.uk.
What we collect
If you accept analytics, Google Analytics records information about the visit. This includes page views and may include approximate location, browser and device information, scrolling, outbound clicks, site searches and downloads. Google Analytics uses a random client identifier rather than your name or email address.
If you use a contact or corrections form, we receive the details you enter. Cloudflare Turnstile checks form submissions for automated abuse and processes technical browser and connection information for that check. If you email us, we receive your email address and the information in your message. The services that deliver and protect the site also receive technical connection data, including your IP address, so they can send pages and keep the service secure.
Why we use it
Analytics. We use optional analytics to understand how many people visit and which pages are useful. The lawful basis is consent. Analytics is off until you accept it.
Messages and corrections. We use form submissions and emails to respond to questions and check reported corrections. The lawful basis is our legitimate interest in answering people who contact us and maintaining accurate information.
Form protection. We use Cloudflare Turnstile to prevent automated abuse of the forms. The lawful basis is our legitimate interest in protecting the website and email service.
Site delivery and security. Technical connection data is used to deliver the site, prevent abuse and diagnose faults. The lawful basis is our legitimate interest in operating a secure and reliable website.
Cookies and your choice
You can change or withdraw your analytics choice at any time through . The cookie policy explains the cookies and consent categories.
Who handles the information
Google Ireland Limited provides Google Analytics. Cloudflare provides site hosting, content delivery, DNS and Turnstile. Our email provider handles form submissions and messages so they can be delivered. We do not sell personal information.
Some providers may process information outside the UK. Where required, they use recognised safeguards for international transfers, such as adequacy arrangements or approved contractual clauses.
How long we keep it
Google Analytics user-level and event-level data is kept for no more than 14 months. Aggregated reports may remain available for longer. Form submissions and emails are kept only while they are needed to deal with the message, maintain a correction record or meet a legal obligation. Technical security logs are retained according to the relevant provider’s operational and security policies.
Your rights
Depending on the circumstances, you can ask for access to your personal information, correction, deletion, restriction or transfer, or object to its use. Where processing relies on consent, you can withdraw that consent at any time without affecting earlier processing.
Send a request to hello@energystack.uk. You can also complain to the Information Commissioner’s Office.
Changes to this notice
We will update this page before making a material change to what is collected or how it is used.
Last updated 31 July 2026.