Privacy Policy

Last updated: October 19, 2026

Website: fewton.earth

This Privacy Policy explains how we collect, use, share, and protect personal data when you visit fewton.earth, use our energy-intelligence platform and related services (the “Services”), or contact us. It also explains your rights under data protection law.

We comply with the EU General Data Protection Regulation (EU GDPR), the UK GDPR and Data Protection Act 2018 where applicable, and the relevant cookie and e-privacy rules.

1. Who we are

Fewton is operated by Kurtizo LTD, a company registered in Cyprus with registration number HE435000 (“Fewton”, “we”, “us”, “our”). Kurtizo LTD is the controller of the personal data described in this Policy. You can contact us about privacy, or request any further information referred to in this Policy, by email at info@fewton.earth.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Identity and contact data — such as name, job title, company, and business contact details.

• Account data — login credentials (passwords are stored in hashed form), settings, and permissions.

• Billing data — billing and tax details and transaction records. Card payments are handled by our payment provider; we do not store full card numbers.

• Usage and technical data — how you use the Services, plus IP address, device, browser, and log data.

• Communications data — the content of your messages, support requests, and notes from contact with you, and your preferences.

• Cookie data — information collected through cookies and similar technologies (see section 9).

We do not seek to collect special-category data (such as health or biometric data) and ask that you do not send it to us.

3. How we collect it

We collect personal data directly from you (for example when you complete a form, create or use an account, or contact us); automatically when you use the Services (through cookies and logs); from your organisation where you use the Services on its behalf; from our communications with you; and from third parties and public sources used for business purposes.

4. How we use it and our lawful basis

We use personal data for the purposes below, relying on the lawful bases shown:

• Providing and operating the Services and your account: Performance of a contract; legitimate interests

• Responding to enquiries and pre-contract requests: Pre-contract steps; legitimate interests

• Billing, payments, and accounting: Performance of a contract; legal obligation

• Customer support: Performance of a contract; legitimate interests

• Securing, maintaining, and improving the Services: Legitimate interests

• Service and administrative messages: Performance of a contract; legal obligation

• Marketing communications (see section 10): Consent, or legitimate interests for business contacts

• Non-essential cookies and analytics: Consent

• Complying with law and handling legal claims: Legal obligation; legitimate interests

Where we rely on legitimate interests, we balance them against your rights, and you may object. Where we rely on consent, you may withdraw it at any time, without affecting processing carried out beforehand.

5. Sharing and sub-processors

We do not sell personal data. We share it only where necessary with the following categories of recipients:

• Service providers acting on our behalf, including cloud hosting and infrastructure, analytics, email and communications, payment processing, and customer-relationship and support tools;

• Professional advisers such as lawyers, accountants, and auditors;

• Authorities and regulators where required by law; and

• A successor entity in connection with a merger, acquisition, or business transfer, subject to appropriate safeguards.

Our service providers act as our sub-processors under contract and may only process personal data on our instructions. A current list of our named sub-processors is available on request by email at info@fewton.earth.

6. International transfers

Where personal data is transferred outside the EEA or the UK, we put in place an appropriate safeguard recognised under data protection law — such as an adequacy decision, or standard contractual clauses (with the UK Addendum where the UK GDPR applies). You can request information about the safeguards used by email.

7. How long we keep it

We keep personal data only for as long as necessary for the purposes set out in this Policy, and then delete or anonymise it. The period depends on the type of data and the reason we hold it — including the duration of your account or our contract, our need to handle queries and possible claims, and any legal, accounting, or tax requirements that apply to us.

8. Security

We use appropriate technical and organisational measures designed to protect personal data, including encryption in transit and at rest, access controls on a need-to-know basis, and reputable cloud infrastructure providers, together with confidentiality obligations on our staff and contractual security commitments from our providers. No system can be completely secure, and we keep our measures under review.

9. Cookies and analytics

We use cookies and similar technologies on our website (fewton.earth). Strictly necessary ones keep the site working and remember your cookie choice; they do not need consent.

All other cookies, including analytics and marketing tools, run only after you allow them in our cookie banner. They are off until you choose.

You can change your choice at any time through the Cookie settings link at the bottom of every page.

Our Cookie Policy lists every tool, what it stores and for how long. Most browsers also let you block or delete cookies.

10. Marketing

We may send marketing emails and newsletters about our products and services. Where required, we send these only with your consent; for existing customers and business contacts we may rely on our legitimate interests, in line with the applicable e-privacy rules. You can opt out at any time using the unsubscribe link in any marketing email or by emailing us. Opting out does not stop service or administrative messages relating to your account.

11. Client building and energy data

Our Services process operational data from our clients’ sites, such as energy, metering, and building data. This is generally about buildings and equipment, not individuals, and is usually not personal data. Where such data does contain personal data, we act as a processor on the client’s behalf, under a written data processing agreement, and process it only on the client’s instructions. The client remains the controller of, and retains ownership of, its site data. We may use aggregated and anonymised insights derived from such data to operate and improve our Services in a form that does not identify any individual or client.

If you are an individual whose data is held in connection with a client site, please contact that client in the first instance, as the controller of that data.

12. Your rights

Subject to the conditions in data protection law, you have the right to: access your personal data; have it rectified; have it erased; restrict its processing; data portability; object to processing (including direct marketing); and withdraw consent where we rely on it. You also have rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects; we do not make such decisions about you on that basis.

To exercise any of these rights, email us at info@fewton.earth. We may need to verify your identity, and we will respond as required by applicable data protection law.

If you have a concern, please contact us first. You also have the right to complain to a data protection supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). If you are in the UK or another EEA country, you may complain to your local authority, such as the UK Information Commissioner’s Office (ico.org.uk).

13. Children

Our Services are intended for businesses and their staff and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to this Policy

We may update this Policy from time to time. When we do, we will update the date shown above and, where the changes are significant, take reasonable steps to let you know.

15. Contact us

For any questions about this Policy or how we handle personal data, or to exercise your rights, contact Kurtizo LTD at info@fewton.earth.