Legal

Privacy Policy

Last updated: March 18, 2026

N2N Energy ("N2N," "we," "us" or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard information when you visit our website, use our energy management platform, interact with our hardware devices or otherwise engage with our services (collectively, the "Services").

By accessing or using the Services you acknowledge that you have read, understood and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Services immediately.

1. Information We Collect

1.1 Information You Provide

Account registration data such as name, email address, phone number, company name and job title.
Billing and payment information processed through our third-party payment processors.
Support requests, feedback and any other communications you send to us.
Information submitted through contact forms, demo requests or event registrations.

1.2 Information Collected Automatically

Device and browser information including IP address, browser type, operating system, device identifiers and language preferences.
Usage data such as pages visited, features used, click patterns, session duration and referring URLs.
Cookies, pixels, web beacons and similar tracking technologies as described in Section 6.

1.3 Energy and Device Data

When you use our platform (including HEMS, DERMS, Maestro or Edge Box hardware), we may collect energy production and consumption data, battery status, inverter telemetry, EV charger session logs, grid interaction data, location data associated with installed devices and other operational metrics necessary to provide the Services.

1.4 Third-Party Sources

We may receive information from business partners, utility companies, grid operators, equipment manufacturers and publicly available sources to supplement the data we collect directly.

2. How We Use Your Information

We process your information for the following purposes:

To provide, operate, maintain and improve the Services, including real-time energy monitoring, AI-driven optimization and automated device control.
To create and manage your account, authenticate your identity and process transactions.
To communicate with you regarding service updates, technical notices, security alerts and administrative messages.
To analyze usage patterns, diagnose technical issues and enhance platform performance and reliability.
To develop new features, products and services based on aggregated and anonymized data.
To send promotional communications where you have consented or where permitted by applicable law.
To comply with legal obligations, enforce our terms and protect against fraud, abuse or security threats.
To respond to your inquiries, provide technical support and fulfill your requests.

3. Legal Basis for Processing

Where applicable under data protection laws (including the EU General Data Protection Regulation and the UK GDPR), we rely on the following legal bases:

Contractual necessity: processing required to perform our contractual obligations to you.
Legitimate interests: processing necessary for our legitimate business interests such as improving the Services, fraud prevention and network security, provided these interests are not overridden by your rights.
Consent: where you have given explicit consent, for example for marketing communications or optional analytics.
Legal obligation: processing necessary to comply with applicable laws and regulations.

4. Sharing and Disclosure of Information

We do not sell your personal data. We may share your information in the following circumstances:

Service providers: with trusted third-party vendors who perform services on our behalf (hosting, analytics, payment processing, customer support) under contractual data protection obligations.
Business partners: with utility companies, grid operators or equipment manufacturers to the extent necessary to deliver integrated energy services.
Legal requirements: when required by law, regulation, legal process or governmental request.
Business transfers: in connection with a merger, acquisition, reorganization or sale of assets, in which case your data may be transferred to the successor entity.
Protection of rights: to protect the rights, property or safety of N2N Energy, our users or the public.
Aggregated data: we may share anonymized and aggregated data that cannot reasonably be used to identify you.

5. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. Where we transfer personal data outside the European Economic Area, the United Kingdom or other jurisdictions with data transfer restrictions, we implement appropriate safeguards including Standard Contractual Clauses approved by the European Commission, adequacy decisions or other legally recognized transfer mechanisms.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage and deliver relevant content. The categories of cookies we use include:

Strictly necessary cookies: essential for the operation of the Services (authentication, security, load balancing).
Performance and analytics cookies: help us understand how visitors interact with the Services so we can improve functionality and user experience.
Functional cookies: enable enhanced functionality and personalization such as language preferences and dashboard settings.
Marketing cookies: used to deliver relevant advertisements and measure campaign effectiveness. These are only set with your consent.

You can manage your cookie preferences through your browser settings or through our cookie consent mechanism. Disabling certain cookies may limit your ability to use some features of the Services.

7. Data Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure or destruction. These measures include end-to-end encryption (TLS 1.2+), role-based access controls, regular security audits, intrusion detection systems and compliance with IEC 62443 standards for industrial cybersecurity. However, no method of electronic transmission or storage is completely secure and we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes and enforce our agreements. Energy telemetry and operational data may be retained in anonymized or aggregated form for longer periods to improve our algorithms and Services. When data is no longer required, it is securely deleted or anonymized in accordance with our data retention policies.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Rectification: request correction of inaccurate or incomplete data.
Erasure: request deletion of your personal data, subject to legal retention requirements.
Restriction: request that we restrict processing of your data in certain circumstances.
Data portability: receive your data in a structured, commonly used and machine-readable format.
Objection: object to processing based on legitimate interests or for direct marketing purposes.
Withdraw consent: where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information promptly. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies or legal requirements. The revised policy will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. For material changes, we will provide additional notice through email or a prominent notice on our website prior to the change becoming effective.

12. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us at:

N2N Energy

Data Protection Inquiries

Email: [email protected]