Introduction
At Cherry Hitech (“we,” “our,” or “us”), we value your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and safeguard your personal data in accordance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

We operate as a partnership and brokerage service provider in gas, electricity, and card payment solutions, connecting customers with trusted suppliers and partners.
This Policy outlines our data-handling practices, your privacy rights, and how you can contact us for more information.

1. Information We Collect
To deliver our services effectively, we may collect the following categories of data:

• Identification Details – Your name, address, contact number, and email address.
• Business Information – Business name, registered address, company registration or VAT number.
• Service Data – Utility details (gas, electricity meter numbers, current supplier, contract terms), or payment terminal usage information.
• Financial Information – Payment details where applicable for transactions or commissions.
• Device and Usage Data – IP address, browser type, operating system, and website activity to improve performance.
• Marketing Preferences – Your consent and preferences for receiving updates, offers, and newsletters.

We only collect information that is necessary for providing and improving our services.

2. How We Collect Your Data
We obtain personal data through various channels, including:

• Direct Interactions – When you contact us via phone, email, forms, or in person.
• Online Submissions – Through our website, quote forms, and partnership inquiries.
• Third-Party Partners – From suppliers or brokers we collaborate with for energy or card machine services.
• Cookies and Tracking Technologies – To improve site functionality and personalize your experience.
• Public or Regulatory Sources – For verifying business information and compliance checks.

3. How We Use Your Information
Your personal data is processed for the following legitimate business purposes:

• Service Delivery – To connect you with relevant suppliers or service providers.
• Account Management – To maintain records of contracts, quotes, and communications.
• Customer Support – To respond promptly to inquiries or resolve issues.
• Compliance and Verification – To meet legal, regulatory, or anti-fraud obligations.
• Marketing and Communication – To send service updates, offers, or partnership information (with your consent).
• Analytics and Improvement – To assess website performance and improve our services.

We do not sell or rent your personal data to third parties.

4. Data Sharing and Disclosure
We may share your personal data with:

• Energy and Utility Partners – For quote generation and contract setup.
• Card Machine Providers and Payment Partners – To process your application or agreement.
• Professional Advisors – For legal, financial, or compliance guidance.
• Regulatory Authorities – When required to comply with applicable laws.
• IT and Hosting Providers – To maintain secure website and system operations.

All third parties are required to maintain the confidentiality and security of your data in compliance with GDPR.

5. Data Security
We take appropriate measures to protect your information, including:

• Encryption of data in transit and at rest.
• Access Controls ensuring only authorized personnel handle sensitive data.
• Secure Servers and Firewalls to prevent unauthorized access.
• Regular Security Audits and data protection training for our staff.

6. Data Retention
We retain your personal information only for as long as necessary to fulfil our business purposes or meet legal obligations.
Once no longer needed, data is securely deleted or anonymized.

7. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:

• Right to Access – Request a copy of the data we hold about you.
• Right to Rectification – Request correction of inaccurate information.
• Right to Erasure (“Right to be Forgotten”) – Request deletion of your data.
• Right to Restrict Processing – Request limits on how your data is used.
• Right to Object – Object to direct marketing or certain types of processing.
• Right to Data Portability – Request transfer of your data to another provider.

To exercise any of these rights, please contact us at:
Email: info@cherryhitech.co.uk

8. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:

• Legitimate Interest – For providing and improving our services.
• Contractual Obligation – To perform an agreement or prepare a quote.
• Consent – For sending marketing or promotional content.
• Legal Requirement – To comply with financial or regulatory duties.

9. Policy Updates
We may update this Privacy Policy periodically to reflect changes in regulations or business practices.
All updates will be posted on this page, and significant changes may be communicated directly via email or notice on our website.

10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact:
Email: info@cherryhitech.co.uk
Address: 

Cherry Hitech is committed to maintaining transparency, accountability, and trust in how we handle your personal data.