Privacy Policy
How UK Data Development Limited collects, uses, stores, and protects your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last Updated: September 2026 | Version 1.0
1. Data Controller
The data controller responsible for your personal data is:
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide Directly
- Identity Data: Full name, job title, and professional role.
- Contact Data: Business email address, telephone number, and professional postal address.
- Organisational Data: Company or fund name, registered jurisdiction, and institutional capacity.
- Inquiry Data: The nature of your inquiry, target power capacity requirements, and preferred engagement structure submitted through our contact forms.
- Compliance Data: Know Your Customer (KYC) and Anti-Money Laundering (AML) documentation where required for institutional counterparty verification.
2.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, time zone setting, and device identifiers.
- Usage Data: Pages visited, duration of visit, navigation paths, and referral sources.
We do not collect any Special Category Data (as defined under Article 9 of UK GDPR) through this website.
3. Lawful Basis for Processing
Under UK GDPR (Article 6), we process your personal data on the following lawful bases:
| Purpose | Lawful Basis (Article 6) |
|---|---|
| Responding to institutional inquiries and contact form submissions | Legitimate Interest (Article 6(1)(f)) — to engage with prospective business counterparties |
| Executing Non-Disclosure Agreements (NDAs) and bilateral commercial agreements | Contractual Necessity (Article 6(1)(b)) — processing necessary for entering into a contract |
| KYC / AML verification for qualified counterparties | Legal Obligation (Article 6(1)(c)) — compliance with UK money laundering regulations |
| Website analytics and performance monitoring | Legitimate Interest (Article 6(1)(f)) — to improve website functionality and user experience |
| Sending technical briefings and regulatory updates (where opted in) | Consent (Article 6(1)(a)) — withdrawable at any time |
4. How We Use Your Data
We use your personal data for the following purposes:
- To process and respond to your contact form inquiries and institutional engagement requests.
- To execute bilateral Non-Disclosure Agreements and facilitate confidential document exchange.
- To perform counterparty due diligence, including KYC and AML checks as required under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (as amended).
- To administer, protect, and improve our website and services.
- To deliver technical briefings, regulatory intelligence, and origination updates where you have provided your explicit consent.
5. Data Sharing & Third-Party Disclosure
We do not sell, trade, or rent your personal data to third parties. We may share your data with the following categories of recipients where necessary:
- Professional Advisors: Legal counsel, accountants, and compliance consultants acting under confidentiality obligations.
- Technology Service Providers: Website hosting (Cloudflare, Inc.), email infrastructure, and CRM platforms that process data on our behalf under Data Processing Agreements (DPAs) compliant with UK GDPR.
- Regulatory & Law Enforcement Authorities: Where we are required to do so by law, court order, or regulatory obligation under UK legislation.
6. International Data Transfers
Where your personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place in accordance with UK GDPR (Articles 44–49), including:
- Transfers to countries with an Adequacy Decision by the UK Secretary of State for Science, Innovation and Technology.
- Use of International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Contact form inquiries | 24 months from last interaction |
| NDA counterparty records | Duration of agreement plus 6 years |
| KYC / AML records | 5 years from conclusion of business relationship (as required by MLR 2017) |
| Website analytics data | 26 months |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.
8. Your Rights Under UK GDPR
Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of Access (Article 15) — to obtain a copy of the personal data we hold about you.
- Right to Rectification (Article 16) — to request correction of inaccurate or incomplete data.
- Right to Erasure (Article 17) — to request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Restrict Processing (Article 18) — to request that we limit the processing of your data in certain circumstances.
- Right to Data Portability (Article 20) — to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object (Article 21) — to object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at privacy@ukdatadevelopment.co.uk. We will respond to your request within one calendar month as required by UK GDPR (Article 12(3)).
9. Cookies & Tracking Technologies
Our website uses essential cookies necessary for the proper functioning of the site. We do not deploy third-party advertising or tracking cookies.
- Strictly Necessary Cookies: Required for core website functionality, security, and session management. These cannot be disabled.
- Analytics Cookies: Where deployed, these are used to understand visitor behaviour and improve site performance. We will seek your consent before setting any non-essential analytics cookies in compliance with the Privacy and Electronic Communications Regulations 2003 (PECR).
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with UK GDPR (Article 32). These measures include:
- TLS/SSL encryption for all data transmitted between your browser and our servers.
- Access controls restricting personal data to authorised personnel only.
- Regular security assessments and vulnerability testing.
- Secure data centre hosting infrastructure with Cloudflare edge protection.
11. Children's Data
Our website and services are directed at institutional investors, infrastructure developers, and qualified business professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a child, we will take steps to delete it promptly.
12. Complaints & Supervisory Authority
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first at privacy@ukdatadevelopment.co.uk.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any material changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.