Privacy Policy

1) Data Controller

The controller responsible for your personal data is:

transfergecko.com
Email: support@transfergecko.com

2) What data we process

When you upload a CSV for comparison, the file may include:

• Meter identifiers (e.g., MPRN), meter configuration (MCC), region (urban/rural)
• Usage data (kWh per interval, timestamps), optional export data
• Derived fields we compute (kWh usage, seasonal totals)

We do not require names, email addresses, or contact details to produce results.

3) Purposes & legal bases

We process your data for the sole purpose of generating tariff comparisons tailored to your usage.

• Consent (GDPR Art. 6(1)(a)). By uploading a file and clicking submit, you consent to processing for this purpose.
• Legitimate interests (GDPR Art. 6(1)(f)). We may process minimal technical data (e.g., security logging, abuse prevention) to keep the service secure and reliable.

We do not use your uploaded data for marketing or profiling beyond the comparison you request.

4) How we process your file

• Files are handled on servers located in the EU/EEA.
• We read only the fields required to compute results.
• Files are deleted shortly after processing and are not retained beyond what is strictly necessary to deliver your result.
• Operational logs do not include your uploaded file contents.

5) Retention

Uploaded files are deleted shortly after processing is complete and in any event no later than 24 hours. Derived, non-identifying aggregates (e.g., hourly period totals) may be cached in memory to render your results during the same session and are then discarded.

6) Sharing & transfers

• We do not sell your data.
• We do not share your uploaded file with third parties.
• Where we use EU/EEA-based suppliers (e.g., hosting), they act as processors under GDPR-compliant agreements.
• No international transfers outside the EEA occur. If this changes, we will rely on an appropriate safeguard (e.g., SCCs) and update this notice.

7) Your rights

Under GDPR and the Data Protection Act 2018 you have the right to:

• Request access to your personal data (Art. 15)
• Request rectification of inaccurate data (Art. 16)
• Request erasure (“right to be forgotten”) in applicable cases (Art. 17)
• Request restriction of processing (Art. 18)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, without affecting lawfulness before withdrawal (Art. 7)
• Data portability where technically feasible (Art. 20)

To exercise your rights, contact us at support@transfergecko.com.

8) Cookies & analytics

We aim to minimise tracking. If we use analytics, we configure it in a privacy-preserving way (no cross-site tracking, no advertising identifiers). Details are provided in our Cookie Notice.

9) Security

We implement appropriate technical and organisational measures, including TLS encryption in transit, strict access controls, and least-privilege server permissions. Uploaded files are stored only temporarily for processing and are deleted thereafter.

10) Contact & complaints

If you have questions about this policy or your data, contact our privacy team at support@ptransfergecko.com.

You also have the right to lodge a complaint with the Irish supervisory authority:

Data Protection Commission (DPC)
6 Pembroke Row, Dublin 2, D02 RD28, Ireland
www.dataprotection.ie

11) Changes to this notice

We may update this policy to reflect changes in our processing or legal requirements. Material changes will be highlighted on this page with a new effective date.