We at energdive.com ("we", "our", "us") respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you access or use our website www.energdive.com and related services.
By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.
Links from our Services may lead to external websites not covered by this Privacy Policy. We are not responsible for their privacy practices.
1. What information do we collect about you and how do we collect it?
1.1 Information you provide directly
We may collect personal information when you:
- Create or manage an account on energdive.com
- Fill out forms or submit information
- Request access to insights, reports, or content
- Subscribe to newsletters or alerts
- Participate in surveys, feedback, or promotions
- Communicate with us via email or contact forms
This may include:
- Identity details: name, title, organisation, industry, country
- Contact details: email, phone number, postal address
- Account information: username, preferences, settings
- Communication data: queries, feedback, correspondence
- Marketing preferences: newsletter and alert choices
1.2 Payment and transaction information
Payment details are processed by authorised payment gateways. We receive limited transaction data for billing, access, and record-keeping. Full card details are not stored by energdive.com.
1.3 Information collected automatically
- Pages visited, content viewed, navigation patterns
- IP address, approximate location, time zone
- Device and browser information
- Session duration and technical logs
2. Data collection by source
We collect personal data from multiple sources. Each source has distinct consent and processing requirements:
2.1 Show Lead Forms (Own Portal)
When you register directly on our portal (energdive.com), we collect your information through our registration and onboarding forms. This represents direct, first-party data collection.
- A mandatory checkbox confirms your acceptance of these Terms and Privacy Policy
- Your consent timestamp and IP address are recorded
- The exact consent text shown to you is stored as a snapshot
2.2 Ad Lead Forms (Meta/Google Ads)
Data may be collected through advertising platforms such as Meta Lead Ads or Google Ads lead forms. When collected this way:
- We obtain a second layer of consent via a welcome/verification email
- Each lead is linked to its originating campaign ID
- Platform-specific terms may limit how your data can be used or transferred
- Double opt-in (email verification) is required before activation
2.3 Third-Party Platforms (Backstage, TradeIndia, etc.)
Data sourced from third-party platforms (B2B platforms, event platforms, etc.) is handled with additional safeguards:
- All third-party data is marked with its external source origin
- Re-consent is required before your data is activated in our systems
- A valid Data Processing Agreement (DPA) is maintained with each third-party provider
- The DPA reference is stored alongside your consent record
3. How and why do we use your personal information?
3.1 To provide and manage services
- Account creation and management
- Providing access to content and insights
- Responding to queries and support requests
- Website performance and maintenance
3.2 Communications and marketing
We may send newsletters, alerts, and updates you opt into. You may unsubscribe at any time.
4. Sharing your personal information
We do not sell your personal data. Information may be shared with:
- CRM platforms (Zoho CRM) for lead management and member services
- Email marketing platforms (Brevo/Sendinblue) for communications
- Analytics partners for website performance measurement
- Legal authorities where required by law
All data sharing is governed by Data Processing Agreements and complies with the DPDP Act.
5. Data Processing Agreements
We maintain written Data Processing Agreements (DPAs) with all third-party platforms from which we receive user data. These agreements specify:
- The purpose and scope of data processing
- Security measures and safeguards in place
- Sub-processor disclosure obligations
- Data breach notification procedures
- Data deletion and return obligations upon termination
Current DPA partners include Backstage and TradeIndia. Users whose data originates from these platforms will be clearly informed of the third-party source.
6. Cookies and tracking technologies
- Essential cookies for functionality
- Analytics cookies for performance measurement
- Advertising cookies for campaign optimisation
7. Data retention
We retain your personal data only as long as necessary for the purposes set out in this policy. Our retention schedule:
- Active user profiles: Retained while your account is active, plus 12 months after deactivation
- Consent records: Retained for 7 years as required for legal compliance and audit trails
- Marketing engagement data: Retained for 24 months from your last interaction
- Third-party sourced data: Subject to terms of the applicable Data Processing Agreement
- System and security logs: Retained for 12 months
After the retention period, data is securely deleted or anonymised. For full details, see our Data Retention Policy.
8. Data security
We use technical and organisational safeguards to protect your data, including encryption in transit and at rest, access controls, and regular security audits. However, no online transmission is fully secure.
9. Your rights and choices
Under the Digital Personal Data Protection (DPDP) Act, 2023, you have the right to:
- Access and obtain a copy of your personal data
- Correct inaccurate or incomplete data
- Request deletion (erasure) of your data
- Restrict or object to certain processing activities
- Withdraw your consent at any time
- Data portability where applicable
- Lodge a grievance with our Data Protection Officer
To exercise any of these rights, contact our Data Protection Officer at dpo@energdive.com.
10. International data transfers
Your data may be processed outside your jurisdiction with appropriate safeguards, including data processing agreements with all receiving parties.
11. Children's privacy
Our services are not intended for children below 18 years. We do not knowingly collect their data. If you become aware that a child has provided us with personal data, please contact us immediately.
12. Data Protection Officer
We have designated a Data Protection Officer (DPO) responsible for overseeing data protection strategy and compliance. You may contact the DPO for any data-related queries or to exercise your rights:
- Email: dpo@energdive.com
- Address: Data Protection Officer, EnergyClub / energdive.com, New Delhi, India
13. Changes to this policy
We may update this policy periodically. Changes will be reflected with an updated effective date and consent version. Users will be notified of material changes via email.
For privacy-related queries, reach us at legal@energdive.com
