How we handle your details

This page covers business contact details we hold for companies we have written to but who are not customers. It is the notice required by Article 14 of the GDPR, which applies because we did not get your details from you.

Who we are

ControllerNovagrid Energy Limited, trading as Easy-Group
AddressNicholaston House, Nicholaston, Penmaen, Swansea, West Glamorgan SA3 2HL, United Kingdom
Contactjonathan@easy-group.ai · +44 7851 500579
General contactinfo@easy-group.ai · +44 7851 500579
CompanyRegistered in England and Wales, company no. 17167206

Addresses we write from

We write from addresses at easy-group.ai and at easy-group-partners.com. Both domains belong to Novagrid Energy Limited, trading as easy-group. We use easy-group-partners.com for first-contact sales email to solar installers and equipment suppliers, and easy-group.ai for customer and account email. An email from either domain is from us, and this notice covers both.

Where we got your details, and what we hold

SourcePublic professional and trade registers. For solar installers in Ireland, the SEAI register of registered installers.
Also, by marketSolar installers in Ireland: the SEAI register, or your company's public business listing. Solar installers in Australia: the business address published on your company's own website. Equipment suppliers: the sales or trade contact address published on your company's own website.
DataCompany name, business email address, business phone number where published, the named contact as published on that register, and county.
Not heldWe do not hold private or home contact details, financial data, or any special category data.

Why, and on what basis

We contact companies in our industry to ask whether a product we are building would be useful to them. The legal basis is legitimate interests, GDPR Article 6(1)(f) — direct business-to-business enquiry to a published business address, which a company in this trade can reasonably expect. Electronic marketing to Irish businesses is governed by S.I. 336/2011 Regulation 13(4), which permits it provided every message carries a free and working way to opt out. Every message we send does.

In practice we write for two reasons: to offer solar installers our software and services, and to discuss referral or rebate arrangements with equipment suppliers. We write only about your business, never about you personally. We have recorded the balancing test behind our reliance on legitimate interests (a legitimate interests assessment) and keep it on file.

IrelandS.I. 336/2011 Regulation 13(4) for company addresses. Where the address is a named employee's work address, Regulation 13(2) also applies, and we write only about that person's role in the business.
United KingdomThe Privacy and Electronic Communications Regulations 2003, regulations 22 and 23: every message says who it is from and gives a valid address to opt out.
AustraliaSpam Act 2003, Schedule 2 clause 4: we write only to business addresses that are conspicuously published, where the publication does not say that commercial messages are unwanted, and only about the recipient's business role. An unsubscribe request takes effect within five business days at the latest.

Who sees it

Nobody outside our company. We do not sell, rent, share or trade contact details. Our mail is sent through Microsoft 365; Microsoft processes it only to deliver it.

Service providers that run our systems handle it on our behalf and under contract, and only to provide that service to us:

Microsoft 365Email sent from and received at easy-group.ai.
Google WorkspaceEmail sent from and received at easy-group-partners.com.
Amazon Web ServicesHosting of our systems and contact lists, in the London (UK) region.

To be precise about the first sentence of this section: no other organisation receives your details to use for its own purposes. The providers listed above process them only on our behalf, under contract, and only to run our systems for us.

International transfers

We hold your details in the United Kingdom. For contacts in Ireland and the rest of the EEA, the European Commission recognises the UK as providing adequate protection. Microsoft and Google may process email outside the UK and the EEA, including in the United States; where they do, the transfer is covered by their data protection terms, which use the safeguards the law requires (standard contractual clauses and the UK addendum to them, or the EU–US Data Privacy Framework and its UK extension). You can ask us for details.

How long we keep it

Up to 24 months from the last contact, then deleted. If you opt out, we keep only your email address on a suppression list — indefinitely, and for the sole purpose of making sure we never contact you again. Keeping that one record is what makes the opt-out permanent.

Your rights

You can ask us for a copy of what we hold, correct it, delete it, restrict how we use it, or object to us using it at all. Objecting to direct marketing is absolute — we must stop, with no balancing test. Email jonathan@easy-group.ai and we will act within one month, free of charge.

Stopping the mail

Use the unsubscribe link at the bottom of any message from us, or simply reply with the word unsubscribe. Either removes you permanently. You do not have to give a reason and we will not ask for one.

An opt-out reaches all of us: whichever of our addresses you reply to, on easy-group.ai or easy-group-partners.com, we stop email to you from all of our addresses, not only from the one that wrote to you. You can also email unsubscribe@easy-group-partners.com from the address you want removed.

Complaining

You can complain to a data protection supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In Ireland it is the Data Protection Commission (dataprotection.ie). You can go to them directly; you do not have to come to us first.

You can also complain to us: email info@easy-group.ai. We will confirm that we have received your complaint within 30 days, look into it, and tell you the outcome. Complaining to us does not affect your right to go to the ICO or the Data Protection Commission at any time.