D.Energy Privacy Policy

1. Introduction

Welcome to d.energy (“we”, “us”, “our”). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [https://www.d.energy/] (the “Site”), and provides you with information in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).

‍

2. Controller and Contact Details

Data Controller: D.Energy Address: Office A, RAK DAO Business Centre, RAK BANK ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates
Email: info@d.energy

We are the controller of the personal data processed through this Site.

‍

3. What Data We Collect

We may collect and process the following categories of personal data:

• Personal Identifiers: name, email address, phone number, and any information you voluntarily provide via contact forms or communications.
• Technical and Usage Data: IP address, browser type/version, OS, device info, pages visited, timestamps, referring URLs, and geolocation data (if enabled).
• Cookies and Tracking Technologies: D.Energy does not itself use or store cookies for tracking purposes. However, your web browser or device may independently store cookies or use similar technologies according to your individual browser settings and preferences. Please refer to your browser’s privacy settings and documentation for more information.

If we receive personal data from third-party sources (e.g., public databases or partners), we will notify you within one month, or sooner if we first communicate with you or disclose the data to others.

‍

4. Purpose and Legal Basis for Processing

In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we are required to inform you about the purposes of processing your personal data, the legal bases we rely on, and how your data is collected—either directly from you or indirectly through a third party.

We process your personal data only where we have a valid legal basis under Article 6 of the GDPR, including:

• Consent (Article 6(1)(a))
• Performance of a contract (Article 6(1)(b))
• Legal obligation (Article 6(1)(c))
• Legitimate interests (Article 6(1)(f)), where such interests are not overridden by your fundamental rights and freedoms.
  ‍

4.1. Identity Verification and KYC

To comply with our regulatory requirements and ensure the security and integrity of our platform, D.Energy is obligated to undertake Know Your Customer (KYC) checks. To do this D.Energy uses a third-party provider to carry out Know Your Customer (KYC) checks.

• As part of this process, you create a direct account with the KYC provider, which collects detailed personal data from you. This may include, but is not limited to:
  • First Name
  • Last Name
  • Nationality
  • Residential address (street, building number, city, postcode, state, country)
  • Identity documentation (ID card, passport, residence permit, driver’s license)
  • Biometric data (selfie and liveness check)
• The KYC provider shares the full set of verification data with D.Energy after the checks are completed.
• However, D.Energy only uses the data points listed below for the purposes of verifying identity. This check is performed whilst the data remains in our KYC provider’s system.
  
  • First name
  • Last name
  • City
  • Country
  • Email address
• We do not retain or process any additional KYC data such as your full address, identity documents, or biometric information. These remain accessible through the KYC provider only, in accordance with their own privacy and retention policies. • D.Energy only consumes and processes the data points below into its own systems:
  
  • First name
  • Last name

These are stored only for the purpose of matching against the data you provide when signing up with us, to confirm consistency and protect against fraud or identity misuse.

‍

4.2. Data Processing Purposes
‍

‍

5. Data Sharing and International Transfers

We may share your data with:

• Service Providers under contract who process data on our behalf.
• Authorities if required by law or legal process.
• Business Successors in connection with a merger or acquisition.

The data attributes listed in 4.1. Identity Verification and KYC will be stored in D.Energy systems located in the UAE and as such are covered by the rules pertaining to international data transfers. A Transfer Impact Assessment (TIA) has been undertaken with respect to transfer of EU citizens data to the UAE to ensure D.Energy meets its ongoing compliance obligations.

A copy of this TIA can be obtained via request to:  Email: info@d.energy5.1. International Data Transfers

D.Energy operates and hosts its infrastructure, including databases, in the United Arab Emirates (UAE). As such, your personal data may be transferred to and stored outside the European Economic Area (EEA).

While the UAE is not currently recognised by the European Commission as providing an adequate level of data protection, we ensure that all international transfers of EU personal data are compliant with Chapter V of the GDPR, by:

• Entering into Standard Contractual Clauses (SCCs) with all relevant parties involved in the processing and hosting of personal data.
• Conducting Transfer Impact Assessments (TIAs) in line with the guidance from the European Data Protection Board (EDPB).
• Implementing appropriate technical and organizational safeguards, such as:
  • Encryption in transit and at rest
  • Strict access controls and monitoring
  • Data minimization and retention policies
  • Hosting with providers holding ISO/IEC 27001 or equivalent security certification

These safeguards ensure that your personal data is protected to a level essentially equivalent to that provided under the GDPR.

You have the right to request further information about these safeguards or obtain a copy of the applicable SCCs by contacting us at info@d.energy.

6. Your GDPR Rights

You have the following rights under the GDPR:

• Right of access – Obtain a copy of your data.
• Right to rectification – Correct inaccurate or incomplete data.
• Right to erasure – Request deletion, subject to legal conditions.
• Right to restriction – Limit processing under certain circumstances.
• Right to object – To processing based on legitimate interest or for direct marketing.
• Right to data portability – Receive data in a structured, machine-readable format.
• Right to withdraw consent – At any time, where processing is based on consent.
• Right to lodge a complaint – With your national data protection authority.

To exercise your rights, contact us at info@d.energy

6.1. Is Provision of Data Mandatory?

You are not legally or contractually obliged to provide us with personal data through the Site. However, refusal to provide certain information may prevent access to some services.

7. Automated Decision-Making and Profiling

We do not engage in automated decision-making, including profiling, that produces legal effects concerning you or significantly affects you.

8. Security

We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the Internet is entirely secure. Use of our Site is at your own risk.

9. Changes to This Privacy Policy

We may update this Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Site indicates your acceptance of the changes.

10. Contact Us

For questions or to exercise your data rights, contact:
Email: info@d.energy
Address: Office A, RAK DAO Business Centre, RAK BANK ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates

‍