Privacy
policy.

01 Who we are

This Privacy Policy explains how Rich Energy ("we", "us", "our") handles personal information collected through our website, our contact and sign-up forms, and our wider commercial activities. Rich Energy is a drinks company operating in the United Kingdom, Europe and North America.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR), Rich Energy is the data controller of the personal information we process.

02 What we collect

We collect personal information that you give us directly, and limited technical information collected automatically when you visit our site.

Information you give us

• Contact form submissions: your name, email address, region (Europe or North America), topic and message.
• Newsletter sign-ups: your email address.
• Commercial enquiries: business name, role, address and any other details you choose to share with us in correspondence.

Information collected automatically

• Technical data: your IP address (truncated where possible), browser type, device type, operating system and approximate location at country or city level.
• Usage data: pages visited, time on page, referring URL and similar website-analytics signals.

We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

03 How we use it

We use your personal information for the following purposes and on the following legal bases under UK GDPR and GDPR:

We do not use your information to make automated decisions that produce legal or similarly significant effects. We do not sell your personal information to third parties.

04 Who we share it with

We share personal information only with the small number of service providers we need to run the business. These include:

• Formspree (formspree.io) — processes our contact-form and newsletter sign-up submissions and forwards them to us by email.
• Cloudflare — our hosting and CDN provider; receives technical request data such as IP addresses for security and content delivery.
• Email and productivity providers — used to receive enquiries and run day-to-day correspondence.
• Professional advisers — accountants, auditors and lawyers, where required.
• Authorities — where we are legally required to disclose information, such as in response to a valid court order or regulatory request.

Where any of these providers is located outside the UK or European Economic Area, we rely on appropriate safeguards (such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfers to countries the UK or EU has deemed adequate).

05 How long we keep it

We keep personal information only as long as we need it for the purpose it was collected, after which we delete or anonymise it. In practice:

• Contact-form enquiries: up to 24 months from the last interaction, then deleted.
• Newsletter subscriptions: until you unsubscribe.
• Commercial correspondence: for the duration of the commercial relationship and up to 7 years afterwards, for tax, audit and contractual record-keeping.
• Analytics and server logs: typically 13 months or less.

06 Your rights

Depending on where you live, you have some or all of the following rights over the personal information we hold about you:

• The right to access the information we hold about you.
• The right to have inaccurate information corrected.
• The right to ask us to delete your information.
• The right to restrict or object to processing.
• The right to data portability for information you provided to us.
• The right to withdraw consent at any time where we rely on it.
• The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email privacy@richenergysystems.com. We will respond within one month. We do not charge a fee unless your request is manifestly unfounded or excessive.

California residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA. To exercise your California rights, contact us at the email above.

07 Security

We take appropriate technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include encrypted transport (HTTPS), access controls, vendor due diligence and routine review. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security, but we work hard to keep your information safe.

08 Cookies

For details about cookies and similar technologies, see our Cookie Policy.

09 Supervisory authorities

If you are in the UK, you can contact the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you can contact your local data protection authority. We would, however, appreciate the chance to deal with your concerns before you approach the regulator — please contact us first.

10 Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it was last changed. Material changes will be flagged on the website or by email where appropriate.

11 Contact

Questions about this policy or about how we handle your information? Email privacy@richenergysystems.com or write to either of the addresses listed at the top of this page.