Privacy Policy

Last updated: 28 August 2026 · Controller: Compounding Energy Ltd, registered in England & Wales, company no. 17319227 · Registered office: Tanners Farm, Tanners Lane, Chalkhouse Green, Reading RG4 9AB · Contact: privacy@compoundingenergy.com

This policy explains how we handle personal data when you use CECadence (the "Service") at cadence.compoundingenergy.com. We are the controller for the account and usage data below. Where we process personal data contained in a customer's own inputs on their behalf, we act as processor under our Data Processing Addendum (available on request).

1. What we collect

• Account data — your name, work email and organisation, received via Compounding Energy single sign-on when you sign in. We do not store your password.
• Usage data — the scenarios and runs you create, run history and saved outputs, your subscription plan, and an append-only audit log (who did what, when).
• Technical data — IP address and request metadata, used only for security, abuse-prevention (rate limiting) and diagnostics.
• Billing data — online payment is handled by Stripe; we receive confirmation and plan status, not your card details.
• Quarterly-index subscription data — if you submit the form on the quarterly GB BESS Index page or the subscribe strip in the report, we record the work email you enter (plus the optional name and company, and the request IP) so we can send you the index. No account is required. Every email we send carries a one-click unsubscribe link; unsubscribing records your address on a suppression list so we do not mail it again. You can also reply to any issue we send you or email privacy@compoundingenergy.com, and we will remove your address.
• Quote-request data — if you submit the quote form on the pricing page (the sales-assisted plans and reports), we record the work email you enter, the optional name, company, what the enquiry is about and anything you type in the message box, plus the request IP, so we can reply with a quote and keep a record of the enquiry. No account is required. It does not add you to any mailing list, and it is kept separately from the quarterly-index list: opting out of that list does not stop us answering a quote you asked for. Ask us at privacy@compoundingenergy.com and we delete the record.
• A functional token (ce_token) is stored in your browser's localStorage to keep you signed in. We use no advertising or cross-site tracking cookies.

2. Why we use it (lawful bases)

• Contract — deliver the Service, authenticate you, store your runs, bill the subscription.
• Legitimate interests — securing the Service, preventing abuse, improving the product, and sending the quarterly GB BESS Index to a work email you gave us for that purpose (unsubscribe at any time). We do not use your inputs to train models for other customers.
• Steps at your request before a contract — answering a quote request you submit on the pricing page, and keeping the record of that enquiry.
• Legal obligations — accounting and tax records.

3. Where it is processed & who we share it with

Hosted data is processed in the United Kingdom (Fly.io, London region). We share personal data only with sub-processors that help us run the Service, each under contract: Fly.io (hosting, UK region), Stripe (payments), and the Compounding Energy fleet identity provider (single sign-on). We do not sell personal data, and we do not transfer it outside the UK except where a sub-processor requires it, with UK IDTA or equivalent safeguards.

CEAtlas (intra-company). Since 23 August 2026, when you appraise a candidate site and supply coordinates, our server sends that site's latitude, longitude and power rating in MW to CEAtlas — Compounding Energy Ltd's own grid-network service, not a third party — to assign the nearest transmission bus (used to infer the charging zone) and to return an indicative grid-connection cost estimate. The call is server-to-server, carries no account identifier, name or email, and stays inside the same company and the same controller; nothing about the site is published. If CEAtlas is unavailable the appraisal falls back to a bundled local estimate and the default charging zone.

4. Retention

We keep account and run data for the duration of your subscription and a reasonable period after (renewals, disputes, legal records), then delete or anonymise it. You can request export or deletion of your runs at any time (§6).

5. Security

Data is encrypted in transit (HTTPS/TLS). Access is controlled by per-tenant isolation, role-based access and authenticated API keys; actions are recorded in the audit log. We keep backups of the hosted store. On-prem / air-gapped customers hold their own data entirely.

6. Your rights (UK GDPR)

You may request access to, correction of, deletion of, or a copy of your personal data, and may object to or restrict certain processing — email privacy@compoundingenergy.com. You may also complain to the UK Information Commissioner's Office (ico.org.uk).

7. Changes

We will post changes here and update the date above; material changes will be notified to account holders.