1. Who this notice covers
This notice applies to this website and to the personal information BaseBlue Power collects through it. BaseBlue Power is an HDF Energy project, and where answering you needs the input of HDF Energy colleagues outside the United States, this notice covers that too.
It does not cover other sites we link to, including hdf-energy.com, which publishes its own privacy notice.
2. Information you give us
There is one place on this site where you can give us information: the request form. It asks for the following.
- Your name, and the work email address you want the reply sent to. These two are the only required fields.
- Your company and your role, if you choose to give them.
- The location, the capacity and the timing of the load you want served.
- Anything you write in the free-text field. Please do not put sensitive personal information there — it is not the right channel for it.
3. Information collected automatically
- A one-way salted hash of your IP address. We store the hash and not the address itself, so the record cannot be turned back into a location, but it can still be used to stop the same source submitting the form hundreds of times.
- Your browser’s user agent string and the page you arrived from.
- The language version of the site you were reading.
Our hosting provider also keeps standard web server logs for security and diagnostics, in line with its own retention practice.
4. Why we use it
- To answer your enquiry, and to work out whether we can serve the site you describe.
- To keep a record of the enquiry so that a conversation six months later does not start from nothing.
- To protect the form against automated abuse.
- To meet legal, tax and regulatory obligations.
We process this information because you asked us to get in touch, and because we have a legitimate interest in responding to business enquiries and in running the site securely.
5. What we do not do with it
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
- We do not add you to a newsletter or a marketing list.
- We do not profile you for automated decisions that produce legal or similarly significant effects.
- We do not run advertising or analytics trackers on this site.
6. Who else sees it
- Our web hosting provider, which stores the site and its database.
- The service that delivers our email, so that a reply actually reaches you.
- HDF Energy colleagues outside the United States, where their technical or financial input is needed to answer you.
- Professional advisors — legal, accounting, insurance — under confidentiality obligations.
- A regulator, court or law enforcement body, where we are legally required to disclose.
Service providers act on our instructions and are not permitted to use your information for their own purposes.
7. International transfers
HDF Energy is a French company and part of the team sits in the European Union. Where personal information moves between the United States and the European Union in order to answer you, we rely on the transfer safeguards required by the law of the country the information leaves.
8. How long we keep it
- Enquiries: twenty-four months from our last contact with you. If a contract follows, the record is kept for the life of that contract and for seven years after it ends.
- Hashed IP records used for abuse prevention: twelve months.
9. Your rights
If you are a Texas resident, the Texas Data Privacy and Security Act gives you the right to do the following.
- Confirm whether we are processing your personal data, and get a copy of it.
- Correct anything that is inaccurate.
- Have it deleted.
- Obtain a portable copy in a usable format.
- Opt out of targeted advertising, of the sale of personal data, and of profiling in furtherance of decisions that produce legal or similarly significant effects — none of which we do in the first place.
We answer within forty-five days, and may extend once by a further forty-five days where a request is genuinely complex. If we decline, you can appeal, and we will respond to the appeal within sixty days. If the appeal is denied you may submit a complaint to the Texas Attorney General.
Residents of California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws have comparable rights, and we handle those requests the same way rather than making you find the right statute first. We do not treat anyone worse for exercising a right.
We may need to verify your identity before we act, and we will ask for no more information than that verification needs.
10. Security
The site is served over HTTPS. Form submissions carry a single-use token that ties them to this site, and are rate-limited. Access to enquiry records is restricted to the people who need it to do their work. No system is perfectly secure and we are not going to claim this one is.
11. Children
This is a business-to-business site. It is not directed to children and we do not knowingly collect personal information from anyone under eighteen. If you believe a child has sent us information, tell us and we will delete it.
12. Changes to this notice
When this notice changes we update the date shown at the top of the page. Where a change materially affects how we use information you have already given us, we will say so on the page rather than rely on you noticing a new date.