Privacy notice for the SAF demonstration

1. Controller and scope

Future Energy Capital Limited, trading as Future Energy Global (FEG), Irish company number 734459, Unit J, Block 1, Shannon Business Park, Shannon, Co. Clare, V14 EV57, Ireland is the FEG entity identified for this demonstration. For a privacy request, use FEG’s published privacy contact below and mark it for the attention of the Head of Marketing and Communications, identifying this SAF demo. You may also write to the registered address.

This notice concerns the protected demo, not every FEG website or a future live service. The demo is operated on Ed Dowding’s existing hosting infrastructure. Controller/processor arrangements with the operator and service providers must be confirmed before real customer data is introduced.

2. Data received and its sources

You or an authorised reviewer may enter a name, email, phone number, address, buyer/beneficiary country and state, beneficiary wording, public reference, test order and acknowledgement choices. These fields should contain fictional details. If someone supplies details about another person, they must have authority and provide that person with this notice.

The service also processes access/session identifiers, requests and technical/error logs needed to operate the site. Infrastructure providers may process IP addresses and connection metadata. Operator actions, order status changes, document versions and simulated communications may form part of the test record. Do not enter payment-card data, identity documents or sensitive personal information.

3. Why data is used and proposed lawful bases

The purpose is to evaluate the storefront, troubleshoot defects, manage review access and protect the service. For incidental real reviewer data, the proposed basis is legitimate interests in conducting a limited business evaluation and maintaining security, subject to necessity and balancing against your rights. It is not a contract for a real SAF purchase.

Consent would be used for genuinely optional publicity if later activated, with a separate choice and withdrawal route. The demo records a test choice only; it does not start a marketing campaign. Legal-obligation processing is relevant only where a specific obligation actually applies, not simply because a screening field exists.

A live service needs a separate, approved purpose-and-basis assessment covering customer contacts, fulfilment, regulatory screening, accounting and disclosures. This notice does not assert that those activities or obligations are already in operation.

4. Access and recipients

Authorised FEG reviewers and the technical operator can access demo records for evaluation and support. Hosting is provided through Contabo, deployment management through Coolify Cloud and DNS through Cloudflare. A recovery copy is held on the operator’s machine. Provider access depends on their actual service and support role.

No real payment is processed, no customer record is submitted to a registry and checkout email is captured inside the demo rather than delivered externally. This storefront is not described as having the separate marketing website’s HubSpot integration. Links to external sites are governed by those sites’ notices.

5. International access and safeguards

Provider locations, remote support access and the operator’s recovery location can affect where data is processed. We have not verified a complete demo transfer map or contractual safeguard register. Do not assume all processing remains in Ireland or the EEA.

Before real customer data is used, FEG must document recipients and locations and, where required, the appropriate adequacy decision or other lawful transfer mechanism and supplementary measures. Contact FEG for the applicable arrangements; this draft does not claim that a specific transfer agreement has been executed.

6. Retention and deletion

Test orders and generated files are retained while needed to review, reproduce or correct the demonstration. They are reviewed for deletion when a test is superseded and when the demo is reset or retired. Recovery copies are retained only while needed to recover that review state and must be included in deletion planning.

This is a purpose-based retention criterion, not a claim that an automatic deletion schedule is deployed. If real personal data is entered accidentally, contact FEG with the relevant record so it can be identified and removed where appropriate. Limited records may need to be preserved for an actual legal obligation or dispute, with access restricted. Live tax, contractual or screening retention periods are not adopted by this demo.

7. Cookies and browser storage

The demo gate uses an essential session cookie to remember successful access for up to eight hours. Application authentication and cart/session state are used to maintain the requested interaction. Browser storage also supports preferences and the calculator plan. Clearing browser storage may reset those features but does not itself delete server-side test records.

The demo does not require consent to optional advertising as a condition of entry. Any future non-essential tracking must be assessed and disclosed before activation; the marketing website’s cookie policy is not a description of this demo’s storage.

8. Location checks and human review

Buyer, beneficiary and supplied address country/state values are checked against a fixed demo policy. An unsupported location or California prevents simulated checkout and produces a reason. This is not identity verification, a sanctions-list search or a finding about a person’s conduct.

No real contract, credit decision or payment is decided through this demo. If a location is incorrect, correct the input; if you dispute the policy’s application, contact FEG for human review. Do not falsify an address to bypass the restriction. Future real decisions require an assessment of applicable automated-decision rules and an effective review route.

9. Your rights and complaints

Where applicable, you can request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting prior lawful processing. Rights may be subject to statutory conditions; a necessary legal hold should be explained rather than treated as a blanket refusal.

Use FEG’s published privacy contact to make a request. Sufficient identity information may be needed to protect records from disclosure to the wrong person. GDPR requests normally require a response within one month; any lawful extension must be explained. You can complain directly to Ireland’s Data Protection Commission or another competent supervisory authority without first obtaining FEG’s permission.

10. Required fields, security and changes

Fields marked required are needed to run the simulated flow; omitting them prevents that test, not access to a real product. Fictional details are sufficient. The review site is password protected and uses HTTPS, but reviewers must still avoid uploading confidential or real customer information.

This notice is versioned for review. FEG must resolve the identified operational gaps and provide an accurate updated notice before materially changing the purposes, recipients or data used. This page is not a certification of GDPR compliance.