Privacy Policy 

3ti Energy Hubs Ltd 

This privacy policy explains how 3ti Energy Hubs Ltd (3ti, we, us) collects, uses, shares and protects personal data through our website at www.3ti.co.uk (the Website) and in the course of providing our services. We take your privacy seriously, and we process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). 

Who we are 

3ti Energy Hubs Ltd is the data controller for the personal data described in this policy. We are a company registered in England and Wales (company number 11868514), with our registered office at Century House, 1 The Lakes, Northampton, NN4 7HD, and our operating office at the Surrey Research Park, 40 Occam Road, Guildford, GU2 7YG. 

If you have any questions about this policy, or wish to exercise your rights, please contact our Data Protection Lead at info@3ti.co.uk. 

The personal data we collect 

We collect personal data that you give us, and data generated when you interact with us, including: 

• Contact and enquiry data, such as your name, email address, postal address and telephone number, when you contact us or request information or services. 

• Recruitment data, such as your CV and application details, if you apply for a role with us. We hold applications from unsuccessful candidates for six months, after which they are securely deleted. 

• Service and electric vehicle (EV) charging data, which, depending on the service, may include your account details, charging-session data, location data, device identifiers and internet protocol (IP) address. Where you use one of our public charge points, the terms in our EV Charging Terms and Conditions also apply. 

• Website and analytics data, such as traffic data, approximate location and usage data collected through cookies and similar technologies. This information does not usually identify you personally. 

How we use your personal data 

We use personal data to: 

• provide, manage and improve our services and meet our commitments to you; 

• respond to your enquiries and keep you informed about changes to our services; 

• manage recruitment; 

• send you marketing about our goods and services, or those of selected partners, where you have consented or where we are otherwise permitted to do so; and 

• operate, protect and improve our Website. 

Our lawful basis for each activity, under Article 6 UK GDPR, will be one or more of: performance of a contract with you; our legitimate interests (balanced against your rights and interests); your consent; and compliance with a legal obligation. Where we rely on your consent, you can withdraw it at any time. 

Cookies 

Our Website uses cookies and similar technologies, grouped as strictly necessary, analytics, functional and marketing cookies. Strictly necessary cookies are required for the Website to work and do not need consent. We set non-essential cookies (analytics, functional and marketing) only where you have given consent through our cookie banner, in line with the Privacy and Electronic Communications Regulations 2003 (PECR). You can change or withdraw your choices at any time through the banner or your browser settings. Full details are set out in our Cookie Policy. 

Sharing your personal data 

We do not sell your personal data. We may share it with: 

• service providers who process data on our behalf under written contracts; 

• regulators, law-enforcement and fraud-prevention bodies, where we are legally required or permitted to do so; and 

• a prospective buyer, in the event of a sale or reorganisation of our business, on terms that protect the confidentiality of your data. 

We do not disclose special category data (such as data revealing race, religion or political opinions) without your explicit consent, other than where the law requires it. 

International transfers 

We are UK-based and store data in the United Kingdom wherever practicable. Where personal data is transferred to, or accessible from, a country outside the UK (for example, where a service provider or its infrastructure is located overseas), we ensure an appropriate safeguard is in place under Articles 44 to 46 UK GDPR. This means the transfer is either to a country covered by UK adequacy regulations, or protected by the International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission standard contractual clauses. 

Artificial intelligence and automated decisions 

We may use approved AI-assisted tools to help us run our business, for example to help draft or summarise information. Where such tools process personal data, that processing is carried out under this Privacy Policy and our internal Information Security and AI Policy. We do not use AI to make solely automated decisions that produce legal effects concerning you, or that similarly significantly affect you. You can object to certain processing under Article 21 UK GDPR, and you have rights in relation to automated decision-making under Article 22 UK GDPR. 

Keeping your data secure 

We apply appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage, in line with Article 32 UK GDPR. No transmission over the internet can be guaranteed to be completely secure, so any transmission is at your own risk; once we receive your data we use appropriate controls to protect it. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Information Commissioner’s Office (ICO) within 72 hours where required, and will tell you directly where the breach is likely to result in a high risk to you. 

How long we keep your data 

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law, after which it is securely deleted or anonymised. For example, we hold unsuccessful job applications for six months. 

Your rights 

Under the UK GDPR and DPA 2018 you have the right to: be informed about our use of your data; access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; withdraw consent where we rely on it; and object to direct marketing at any time. To exercise any of these rights, contact info@3ti.co.uk. We will respond within one month, and there is normally no charge. 

Complaints 

If you are concerned about how we handle your personal data, please contact us first at info@3ti.co.uk so we can try to put things right; we will acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk or on 0303 123 1113. 

Third-party links 

Our Website may contain links to third-party websites. Those websites have their own privacy policies, which you should review. We are not responsible for the privacy practices of websites we do not control. 

Changes to this policy 

We keep this policy under review and may update it to reflect changes to our services, our practices or the law. Any changes will be posted on this page. 

Last updated: July 2026