Privacy Policy

1. Who We Are

INIS Energy is an Irish energy brokerage company based in Cork, Ireland. We help Irish businesses compare their electricity and gas costs against all major suppliers to identify the best rates available.

Data Controller: INIS Energy
Address: Cork, Ireland
Email: privacy@inisenergy.com
Phone: +353 (0)21 XXX XXXX

2. Legal Basis

This privacy policy complies with:

• General Data Protection Regulation (GDPR)
• Data Protection Act 2018 (Ireland)
• ePrivacy Regulation (Cookie Law)
• Commission for Regulation of Utilities (CRU) requirements

3. Information We Collect

3.1 Personal Information

• Contact Details: Name, email address, phone number, postal address, Eircode
• Account Information: Username, encrypted password, profile preferences
• Energy Usage Data: Electricity bills, usage patterns, supplier information, contract details
• Financial Information: Payment details for our brokerage services (processed securely via Stripe)

3.2 Technical Information

• Device Data: IP address, browser type, device type, operating system
• Usage Analytics: Pages visited, time spent, click patterns (only with consent)
• Cookies: As described in our Cookie Policy below

4. How We Use Your Information

4.1 Primary Services (Legitimate Interest & Contract)

• Analyse your electricity bills to identify savings opportunities
• Compare tariffs across Irish energy suppliers (Electric Ireland, Bord Gáis Energy, SSE Airtricity, Energia, Pinergy)
• Facilitate switching to more cost-effective energy plans
• Process payments for our brokerage services
• Provide customer support and account management

4.2 Communications (Consent & Legitimate Interest)

• Send service updates about your switching process
• Notify you of better tariffs that become available
• Send marketing communications (only with explicit consent)
• Respond to your inquiries and provide support

4.3 Legal & Regulatory (Legal Obligation)

• Comply with CRU (Commission for Regulation of Utilities) requirements
• Maintain records for tax and accounting purposes
• Respond to legal requests and regulatory inquiries

5. Information Sharing

5.1 Energy Suppliers

We share necessary information with Irish energy suppliers to facilitate switching processes. This includes your contact details and current usage information required for the switching process.

5.2 Service Providers

• Payment Processing: Stripe (for secure payment processing)
• Email Services: Resend (for transactional emails)
• Cloud Storage: Supabase (for secure data storage)
• Analytics: Only with your consent

5.3 Legal Requirements

We may disclose information when required by Irish law, CRU regulations, or to protect our legal rights and those of our customers.

6. Data Retention

• Active Accounts: Until account deletion is requested
• Billing Records: 7 years (Irish tax law requirement)
• Marketing Data: Until consent is withdrawn
• Technical Logs: 12 months maximum

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to marketing or other processing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@inisenergy.com or through your account settings.

8. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Secure authentication systems
• Regular security audits and updates
• Access controls and staff training
• Secure payment processing via PCI-compliant providers

9. Cookies Policy

9.1 Types of Cookies We Use

• Necessary Cookies: Essential for website functionality (authentication, security)
• Analytics Cookies: Help us understand website usage (only with consent)
• Marketing Cookies: Used for personalised advertising (only with consent)

9.2 Managing Cookies

You can manage your cookie preferences through our cookie banner or by adjusting your browser settings. Note that disabling necessary cookies may affect website functionality.

10. International Transfers

Your data is primarily processed within the EU/EEA. Where we use service providers outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not intended for persons under 18 years of age. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this privacy policy periodically. Material changes will be notified via email or prominent website notice at least 30 days before taking effect.

13. Contact & Complaints

Data Protection Enquiries:
Email: privacy@inisenergy.com
Phone: +353 (0)21 XXX XXXX
Address: INIS Energy, Cork, Ireland

Complaints:
If you're unsatisfied with our response, you can lodge a complaint with the Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
Phone: +353 (0)761 104 800
Website: dataprotection.ie