Privacy Policy
Last updated: June 23, 2026
Website: fewton.earth
This Privacy Policy explains how we collect, use, share, and protect personal data when you visit fewton.earth, use our energy-intelligence platform and related services (the “Services”), or contact us. It also explains your rights under data protection law.
We comply with the EU General Data Protection Regulation (EU GDPR), the UK GDPR and Data Protection Act 2018 where applicable, and the relevant cookie and e-privacy rules.
1. Who we are
Fewton is operated by Kurtizo LTD, a company registered in Cyprus with registration number HE435000 (“Fewton”, “we”, “us”, “our”). Kurtizo LTD is the controller of the personal data described in this Policy. You can contact us about privacy, or request any further information referred to in this Policy, by email at info@fewton.earth.
2. Personal data we collect
Depending on how you interact with us, we may collect:
Identity and contact data — such as name, job title, company, and business contact details.
Account data — login credentials (passwords are stored in hashed form), settings, and permissions.
Billing data — billing and tax details and transaction records. Card payments are handled by our payment provider; we do not store full card numbers.
Usage and technical data — how you use the Services, plus IP address, device, browser, and log data.
Communications data — the content of your messages, support requests, and notes from contact with you, and your preferences.
Cookie data — information collected through cookies and similar technologies (see section 9).
We do not seek to collect special-category data (such as health or biometric data) and ask that you do not send it to us.
3. How we collect it
We collect personal data directly from you (for example when you complete a form, create or use an account, or contact us); automatically when you use the Services (through cookies and logs); from your organisation where you use the Services on its behalf; from our communications with you; and from third parties and public sources used for business purposes.
4. How we use it and our lawful basis
We use personal data for the purposes below, relying on the lawful bases shown:
Purpose
Lawful basis
Providing and operating the Services and your account
Performance of a contract; legitimate interests
Responding to enquiries and pre-contract requests
Pre-contract steps; legitimate interests
Billing, payments, and accounting
Performance of a contract; legal obligation
Customer support
Performance of a contract; legitimate interests
Securing, maintaining, and improving the Services
Legitimate interests
Service and administrative messages
Performance of a contract; legal obligation
Marketing communications (see section 10)
Consent, or legitimate interests for business contacts
Non-essential cookies and analytics
Consent
Complying with law and handling legal claims
Legal obligation; legitimate interests
Where we rely on legitimate interests, we balance them against your rights, and you may object. Where we rely on consent, you may withdraw it at any time, without affecting processing carried out beforehand.
5. Sharing and sub-processors
We do not sell personal data. We share it only where necessary with the following categories of recipients:
Service providers acting on our behalf, including cloud hosting and infrastructure, analytics, email and communications, payment processing, and customer-relationship and support tools;
Professional advisers such as lawyers, accountants, and auditors;
Authorities and regulators where required by law; and
A successor entity in connection with a merger, acquisition, or business transfer, subject to appropriate safeguards.
Our service providers act as our sub-processors under contract and may only process personal data on our instructions. A current list of our named sub-processors is available on request by email at info@fewton.earth.
6. International transfers
Where personal data is transferred outside the EEA or the UK, we put in place an appropriate safeguard recognised under data protection law — such as an adequacy decision, or standard contractual clauses (with the UK Addendum where the UK GDPR applies). You can request information about the safeguards used by email.
7. How long we keep it
We keep personal data only for as long as necessary for the purposes set out in this Policy, and then delete or anonymise it. The period depends on the type of data and the reason we hold it — including the duration of your account or our contract, our need to handle queries and possible claims, and any legal, accounting, or tax requirements that apply to us.
8. Security
We use appropriate technical and organisational measures designed to protect personal data, including encryption in transit and at rest, access controls on a need-to-know basis, and reputable cloud infrastructure providers, together with confidentiality obligations on our staff and contractual security commitments from our providers. No system can be completely secure, and we keep our measures under review.
9. Cookies
We use cookies and similar technologies on our website. Strictly necessary cookies, which are required for the site to function, do not need consent. Functional, analytics, and marketing cookies are non-essential and are only set with your prior consent, which we collect through our cookie banner. You can change or withdraw your cookie preferences at any time through the cookie settings on our website, and most browsers also let you block or delete cookies.
10. Marketing
We may send marketing emails and newsletters about our products and services. Where required, we send these only with your consent; for existing customers and business contacts we may rely on our legitimate interests, in line with the applicable e-privacy rules. You can opt out at any time using the unsubscribe link in any marketing email or by emailing us. Opting out does not stop service or administrative messages relating to your account.
11. Client building and energy data
Our Services process operational data from our clients’ sites, such as energy, metering, and building data. This is generally about buildings and equipment, not individuals, and is usually not personal data. Where such data does contain personal data, we act as a processor on the client’s behalf, under a written data processing agreement, and process it only on the client’s instructions. The client remains the controller of, and retains ownership of, its site data. We may use aggregated and anonymised insights derived from such data to operate and improve our Services in a form that does not identify any individual or client.
If you are an individual whose data is held in connection with a client site, please contact that client in the first instance, as the controller of that data.
12. Your rights
Subject to the conditions in data protection law, you have the right to: access your personal data; have it rectified; have it erased; restrict its processing; data portability; object to processing (including direct marketing); and withdraw consent where we rely on it. You also have rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects; we do not make such decisions about you on that basis.
To exercise any of these rights, email us at info@fewton.earth. We may need to verify your identity, and we will respond as required by applicable data protection law.
If you have a concern, please contact us first. You also have the right to complain to a data protection supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). If you are in the UK or another EEA country, you may complain to your local authority, such as the UK Information Commissioner’s Office (ico.org.uk).
13. Children
Our Services are intended for businesses and their staff and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this Policy
We may update this Policy from time to time. When we do, we will update the date shown above and, where the changes are significant, take reasonable steps to let you know.
15. Contact us
For any questions about this Policy or how we handle personal data, or to exercise your rights, contact Kurtizo LTD at info@fewton.earth.
