Privacy Policy

1. Introduction

At Meaford Energy (“we”, “us”, or “our”), accessible at meaford-energy.com, we are firmly committed to protecting your privacy and ensuring the integrity, confidentiality, and security of your personal data. We uphold the highest standards of compliance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), and any amendments or successor legislation.

This Privacy Policy outlines how we collect, use, disclose, and safeguard personal information when you visit our website, utilize our online services, or otherwise interact with us.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data processed by Meaford Energy as a data controller in connection with our digital services offered via meaford-energy.com. As the data controller, we determine the purposes and methods of processing personal information you provide, consistent with governing privacy regulations.

3. Categories of Data Processed

We may collect and process the following categories of personal data:

3.1 Usage Data
Includes information about your device, IP address, browser type and version, time zone setting, location, operating system and platform, session duration, previously visited URLs, and how you interact with meaford-energy.com.

3.2 Account Data
Includes data provided when registering or submitting forms on our website, including name, email address, mailing address, telephone number, username, and password.

3.3 Profile Data
Includes preferences, purchase history, behavior patterns, product interests, saved items, and aggregated engagement data.

3.4 Communication Data
Includes records of correspondence and communication with our customer support or administrative teams, including support tickets, emails, chat transcripts, and contact history.

3.5 Technical Data
Includes device identifiers, system configuration information, browser plug-in types, diagnostics, performance logs, crash reports, web beacons, and cookies.

3.6 Transaction Data
Includes order details, payment card information (processed securely via third-party providers), billing and shipping addresses, transaction records, invoice data, and method of purchase.

3.7 Preference Data
Includes information collected regarding your consent for marketing communications, selected communication channels, and expressed interests in products or energy services.

4. Legal Bases for Processing

We rely on the following legal grounds to process personal data:

– Consent: Where required under the law, we seek your explicit consent for data collection and marketing communications.
– Contract: Processing is necessary for the fulfilment of a contract with you or in order to take pre-contractual steps at your request.
– Legitimate Interest: Where processing is required for our legitimate business interests, such as site optimization, fraud prevention, security enhancement, or customer relationship management, and only where such interests are not overridden by your fundamental rights and freedoms.
– Legal Obligation: Where we are required by law to collect, store, or disclose certain information.

5. Your Rights

As a data subject, you have the following rights regarding your personal information, subject to applicable legal constraints:

– Right to Access: You may request confirmation as to whether or not we process your personal data and, if so, access to such information.
– Right to Rectification: You may request correction or update of inaccurate or incomplete data.
– Right to Erasure: Also known as the “right to be forgotten”, you may request deletion of your personal data under applicable circumstances.
– Right to Restriction: You may request limitations on processing in certain cases, such as pending accuracy disputes.
– Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format or transmit it to another controller.

To exercise any of these rights, you may contact us at [email protected].

6. Security Measures

We implement robust security protocols to ensure the protection of your personal data. These measures include, but are not limited to:

– Secure encryption (TLS/SSL) of data transmission.
– Role-based access controls and authorization management.
– Regular data backups and disaster recovery protocols.
– Endpoint, server, and infrastructure-level security practices.
– Security training and confidentiality agreements for staff and contractors.

7. International Transfers

Your data may be transferred to and processed in countries outside of your jurisdiction, including those that may not provide the same level of data protection. In such instances, we rely on appropriate safeguards such as:

– Standard Contractual Clauses (approved by the European Commission).
– Data Processing Addendums with service providers.
– Privacy Shield certifications (where applicable) or equivalent legal mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

– Usage Data: Retained for up to 24 months for analytics and diagnostic purposes.
– Account Data: Retained so long as your account remains active, and for up to 6 years thereafter for legal compliance.
– Transaction Data: Retained for 7 years to comply with tax and accounting obligations.
– Communication and Support Data: Retained for 3 years to maintain customer service history.
– Preference Data: Retained until consent is withdrawn or data is deemed outdated.

Once data is no longer required for these purposes, it is securely deleted or anonymized.

9. Cookie Policy

meaford-energy.com uses cookies and similar tracking technologies to enhance user experience, analyze site performance, and enable core functionality. Our categories of cookies include:

– Essential Cookies: Required for the functioning of the website (e.g., session management, security features).
– Functional Cookies: Improve usability and provide personalized features (e.g., saving preferences).
– Performance Cookies: Collect aggregated, anonymized data to measure and improve site functionality.
– Analytics Cookies: Track website usage and help us understand user behavior (e.g., Google Analytics).

10. Cookie Management and Compliance

When you first visit meaford-energy.com, you are prompted to provide or withhold consent for various cookie categories in compliance with GDPR and CCPA.

You may also manage or withdraw your cookie preferences at any time through the “Cookie Settings” interface on the website or by adjusting your browser’s privacy controls. Opt-outs for analytics or advertising cookies are respected according to Do Not Track (“DNT”) or Global Privacy Control (“GPC”) signals where supported.

11. Special Protections for Children

meaford-energy.com is not intended for children under 13 years of age. We do not knowingly collect or solicit personal data from children under 13. If you believe we have collected such data inadvertently, please contact us immediately at [email protected] so we can take appropriate action, including deletion.

12. Policy Updates & Notifications

We may update this Privacy Policy from time to time to reflect changes in legal obligations, service offerings, technology, or industry best practices. Any material changes will be communicated through notices posted on meaford-energy.com or through direct communication mechanisms where appropriate.

We encourage you to review this page periodically to remain informed of how we protect your personal data.

13. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, you may contact:

Meaford Energy
Email: [email protected]
Web: meaford-energy.com

We are committed to transparency and accountability, and we welcome your privacy inquiries and requests.

Meaford Energy is dedicated to maintaining compliance with all relevant privacy regulations and to safeguarding your rights as a data subject. Please contact us at [email protected] with any privacy-related concerns or requests.