Privacy Policy

Last updated: 5 October 2026

1. Who we are

This policy explains how Neura Energy (“Neura”, “we”, “us”) handles personal data collected through our website neura.energy (the “Site”). Neura Energy is made up of two companies:

  • NEURA ENERGY LIMITED, a company registered in England and Wales under company number 14692100, with its registered office at Flat 14 Fleet House, Barley Way, Fleet, England, GU51 2AB; and
  • GRIDQ LTD, trading as Neura Energy, a company registered in Cyprus under registration number HE466769, of Arch. Makarios III Avenue 225, Oriana Court, 1st floor, 3106 Limassol, Cyprus.

The two companies run the Site together and are joint controllers of the personal data described here. They have agreed that NEURA ENERGY LIMITED is your first point of contact. It handles all requests to exercise your data protection rights in the first instance and is responsible for this policy, with GRIDQ LTD's support. You can still exercise your rights against either company, using the details in section 12. We process personal data in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and the UK Data Protection Act 2018.

This policy covers the Site only. Data we process when we provide our energy optimisation software to customers is governed by our contract with each customer.

2. What data we collect

Information you give us

  • Contact form: first and last name, work email, company and your message.
  • Demo request: name, email, company, phone number (optional), business name and type, and building type.
  • Case study enquiry forms: name, company, email, phone number (optional), cooling system type, approximate annual energy consumption and your message.
  • Meeting bookings: when you book a call with us through Calendly, your name, email, the time you choose and any answers or notes you add.
  • Email: anything you send us directly, including job applications and CVs sent to the addresses listed on our careers pages.

Information collected automatically

  • Technical data sent with a form: your IP address, browser user agent, and the time of submission.
  • Spam-protection data: Google reCAPTCHA v3 assesses how you interact with the page and returns a score that we store with your submission to filter out automated spam.
  • Usage data: Google Analytics records pages visited, referring site, approximate location (country/city), device and browser type, and similar information about how the Site is used.
  • Company identification: Snitcher matches your IP address against business databases to tell us which organisation visited the Site and which pages were viewed. It identifies companies, not individuals. However, the IP address it uses can be personal data, for example when the business is a sole trader or very small.
  • Server logs: our web server records IP addresses, requested URLs and timestamps for security and troubleshooting.

We do not ask for, and ask you not to send us, special category data (such as health information) through the Site.

3. How and why we use it

PurposeDataLegal basis
Replying to your enquiry, arranging a demo and preparing a savings estimate Form data, emails Steps taken at your request before entering into a contract; our legitimate interest in responding to business enquiries
Following up on a business relationship with you or your company Name, email, company, correspondence Legitimate interest in developing our business. You can object at any time.
Protecting the Site and forms against spam, fraud and abuse IP address, user agent, reCAPTCHA score, server logs Legitimate interest in keeping the Site secure
Understanding how the Site is used so we can improve it Usage data from Google Analytics Consent
Scheduling and holding meetings you book with us Calendly booking details Steps taken at your request before entering into a contract
Identifying which companies visit the Site, so we can follow up with relevant businesses IP address, pages viewed, company details inferred by Snitcher Consent
Considering job applications CV and information you send us Steps taken at your request before entering into a contract
Keeping your application to consider you for future roles CV and information you send us Consent
Meeting legal obligations and defending legal claims Any relevant data Legal obligation; legitimate interest

We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.

4. Cookies and analytics

Cookies are small files stored on your device. When you first visit, a banner asks which optional cookies you accept. Analytics and company identification only start after you opt in. You can change your choice at any time with the Cookie settings link in the footer.

Necessary (always on)

  • csrftoken: protects our forms against cross-site request forgery.
  • neura_consent: remembers your cookie choices for 12 months.
  • Google reCAPTCHA: Google may set or read cookies to tell humans from bots when our forms are used. See Google’s Privacy Policy and Terms of Service.
  • Calendly: if you open our booking page or a booking widget, Calendly may set cookies the booking needs to work. See Calendly’s Privacy Notice.

Analytics (with your consent)

  • Google Analytics 4: cookies such as _ga and _ga_* that distinguish visitors and sessions. They last up to 2 years. Google Analytics 4 does not log or store full IP addresses.

Company identification (with your consent)

  • Snitcher: a script and cookies that recognise returning visitors and link page views to the visiting company. See Snitcher’s Privacy Policy.

You can also block or delete cookies in your browser settings. Blocking necessary cookies may stop our forms from working.

5. Who we share data with

We share personal data only with service providers that help us run the Site and our business. They act on our instructions and are bound by data protection terms:

  • Each other: NEURA ENERGY LIMITED and GRIDQ LTD share enquiry data so that the right team can respond.
  • Hosting and infrastructure providers, who host the Site and its database.
  • Google (Google Analytics and reCAPTCHA).
  • Calendly, which we use to schedule meetings.
  • Snitcher, which identifies the companies visiting the Site.
  • Slack, which our team uses to receive notifications of new form submissions.
  • Email and productivity providers we use to correspond with you.
  • Professional advisers such as lawyers and accountants, where needed.

We may also disclose data where the law requires it, to protect our rights, or as part of a merger, acquisition or sale of all or part of our business. If that happens, this policy will continue to apply to your data.

6. International transfers

We work across the UK and the EU, and some of our providers (including Google, Calendly and Slack) may process data in the United States or other countries. When personal data leaves the UK or the European Economic Area, we rely on an adequacy decision (such as the EU–US Data Privacy Framework and its UK extension) or on Standard Contractual Clauses, including the UK Addendum, together with appropriate additional safeguards.

7. How long we keep data

  • Enquiries, demo requests, case study requests and other client data: up to 3 years, and for any longer period the law requires.
  • Job applications: 3 months after we receive them. If you ask us in your application to keep your details so we can consider you for future roles, we keep them for 12 months.
  • Server logs: for as long as we need them to keep the Site secure and investigate problems.
  • Google Analytics, Calendly and Snitcher data: these providers keep data according to their own retention settings and policies.

You can ask us to delete your data at any time by emailing ka@neura.energy. We will delete it unless the law requires us to keep it.

8. Security

The Site is served over HTTPS only. Form submissions are stored in a database that only authorised staff can access through an authenticated admin interface. We use access controls and keep software up to date. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires it.

9. Your rights

Under the GDPR and UK GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to delete your data;
  • ask us to restrict how we use your data;
  • object to processing based on legitimate interests, including direct marketing;
  • receive your data in a portable format (data portability);
  • withdraw consent at any time, where we rely on consent. This does not affect processing that took place before you withdrew it.

To exercise any of these rights, email ka@neura.energy. NEURA ENERGY LIMITED handles all requests in the first instance, including those sent to GRIDQ LTD, and will reply within one month. We may ask you to confirm your identity first.

You can also complain to a data protection authority. In the UK, that is the Information Commissioner’s Office (ICO). In Cyprus, it is the Commissioner for Personal Data Protection. You can also contact the authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first, so please contact us before you complain.

10. Children

The Site is for businesses and is not aimed at children under 16. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, and the “Last updated” date at the top shows when it last changed. If we make significant changes, we will make them clear on the Site.

12. Contact us

For questions about this policy or how we handle your data, email ka@neura.energy or use our contact page. You can also write to us by post:

  • NEURA ENERGY LIMITED, Flat 14 Fleet House, Barley Way, Fleet, England, GU51 2AB (first point of contact)
  • GRIDQ LTD, Arch. Makarios III Avenue 225, Oriana Court, 1st floor, 3106 Limassol, Cyprus