Who we are
Nodal Shift is the controller of the personal information described in this notice.
If you have any questions about this notice or your information, email hello@nodalshift.trade.
What information we collect
When you join the waitlist
- your work email address, full name and company or organisation
- your job title, if you give it
- which product you're interested in
- details about your site or generation assets, if you give them (site type, location, capacity and technology)
- whether you want to receive occasional updates
-
the page you signed up on, the website that referred you, and any campaign tags in the link you followed
(for example
utm_source) - the version of the consent wording you saw, and the dates you signed up, confirmed or unsubscribed
Technical information
- a one-way, salted hash of your IP address, which we use to limit abuse. We never store your IP address itself
- the country your request came from, as reported by our hosting provider
- records of the emails we've sent you and whether sending succeeded. We don't track whether you open emails or click links
Bot protection
Our signup form uses Cloudflare Turnstile to check that a person, not a bot, is filling it in. To do this, Cloudflare processes information about your browser and device. We receive only a pass or fail result.
Website analytics
We use Cloudflare Web Analytics to count page views and see which pages are popular. It does not use cookies or collect information that identifies you.
How we use your information and our lawful basis
| What we do | Information used | Lawful basis (UK GDPR) |
|---|---|---|
| Confirm your email address and contact you about early access | Waitlist details | Consent, Article 6(1)(a). You can withdraw it at any time by unsubscribing |
| Send you occasional updates about UK flexibility markets, if you ticked the box | Email address, name | Consent, Article 6(1)(a) |
| Protect the form from spam, bots and abuse | Hashed IP address, Turnstile result, country | Legitimate interests, Article 6(1)(f): keeping our service secure |
| Keep a do-not-contact record after you unsubscribe | Email address | Legitimate interests, Article 6(1)(f): making sure we respect your choice |
| Understand how our website is used | Aggregated page views (not personal information) | Not applicable |
We don't sell your information, and we don't use it for automated decisions that have legal or similarly significant effects on you.
How long we keep your information
- If you don't confirm your email address, we automatically delete your details 30 days after you last submitted the form.
- If you confirm, we keep your details until you unsubscribe or we close the waitlist.
- If you unsubscribe, we delete everything except your email address, which we keep on a do-not-contact list so that we don't contact you again.
- Application logs are kept for up to 7 days and are designed not to contain your email address, name or IP address.
Who we share your information with
We use Cloudflare, Inc. as our processor to host this website, store the waitlist database, send our emails, provide bot protection and run analytics. Cloudflare processes your information only on our instructions, under a data processing agreement.
We use Google Ireland Limited as our processor for website analytics, under Google's data processing terms.
We may also share information if the law requires it, or with professional advisers (such as lawyers) where necessary. If Nodal Shift is ever sold or merged, the waitlist may be transferred to the new owner, who would have to keep using it in line with this notice.
Where your information is stored
The waitlist database is stored in Cloudflare's European Union jurisdiction, which means it is held in data centres in the EU. The UK recognises the EU as providing adequate protection for personal data.
Cloudflare runs a global network, so some processing, such as delivering pages, sending email and checking for bots, may happen in other countries. Where that involves a transfer outside the UK, it is covered by appropriate safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contract Clauses.
Cookies
Cloudflare may set cookies that are strictly necessary to protect the website from attacks and bots. These don't need consent under the Privacy and Electronic Communications Regulations.
We also use Google Analytics 4 to understand how the site is used. It sets first-party
cookies whose names begin _ga, which last up to two years, and collects a shortened IP address,
the pages you visit and how you arrived. Google Ireland Limited is the processor and may transfer this data
outside the UK under the appropriate safeguards described above. You can refuse these cookies in your browser
settings or with Google's
Analytics opt-out add-on.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- ask us to correct information that's wrong
- ask us to delete your information
- ask us to restrict or stop using your information
- object to how we use your information
- ask for your information in a portable format
- withdraw your consent at any time, without affecting what we did before you withdrew it
The quickest way to stop all emails and delete your details is the unsubscribe link at the bottom of any email we send. For anything else, email hello@nodalshift.trade. We'll reply within one month.
How to complain
If you're unhappy with how we've used your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes to this notice
We'll update this notice if the way we use your information changes. The date at the top shows when it was last updated.