Privacy Notice March 2026

We are committed to protecting your privacy and to complying with applicable data protection and privacy laws. This privacy notice (together with our terms of service) tells you how we collect, use, and protect your information when you visit our website or use our energy management services ("services"), and your rights to your information. We will only use information we collect about you in accordance with this privacy notice.

This notice is effective from 20th October 2023 and may be updated from time to time. This privacy policy supplements other privacy notices we might provide to you.

Who we are

By "we", "us", "our" or "Levelise" we mean Levelise Limited, a company registered in England No.10653159 at Synergy House Woolpit Business Park, Woolpit, Bury St. Edmunds, Suffolk IP30 9UP. Our ICO registration number is ZA530773.

What data we collect and how

We may collect personal information about you that includes:

• Locational data: Your geolocation as transmitted by our equipment if installed in your property. Your Metering Point Administration Number (MPAN) which is a unique identifier of the electricity supply for your property.

• Energy usage and market data: Energy use in your home, including when and how much energy is consumed by your household appliances, or produced by your solar installation, or other microgeneration equipment. Your electricity supplier, tariff information, and distribution network operator (DNO). Your solar feed-in tariff.

• Technical data: IP address, browser type and version, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website. We track some technical data by using cookies (see 'Cookies' section below for more details).

• Auditing data: Use of some website or app functions are logged to identify and isolate usage patterns and system problems (e.g. successful logins are logged, but the log only uses a user ID number and does not store details of passwords used to login).

• Personal details: Your full name, date of birth, contact address, property address, email address, telephone number and username.

• Financial data: Your bank account details to enable us to make payment to you

• Correspondence: Any emails, letters or other forms of contact you have sent us or we have sent you, and any communications we have received from parties dealing directly with you, referencing you or your data.

We typically collect information in three ways:

• If and when you provide information to us (e.g. through use of our website, app or product registration).

• Through a device installed in your home which is connected to one of our services. This device will monitor and manage electrical equipment in your home (e.g. your solar and battery installation, heat pump or other energy consuming/producing appliances).

• From outside sources (e.g. your electricity supply details, including your MPAN, from industry sources, or third parties (e.g. your energy supplier or renewable energy installer).

External data controllers

As data controllers, the organisations below determine the purposes and means of processing your personal data, including how information is collected, used, stored, and shared. You can withdraw your consent for this at any time by contacting us at support@levelise.com.

External data processors

With your explicit consent, we use FlatPeak ( https://www.flatpeak.energy/) incorporated and registered in England and Wales with the company number 13581791 whose registered office is at FlatPeak Technology Ltd, 25 Luke Street, London, EC2A 4DS to obtain your tariffs from your electricity supplier. Depending on the relationship held between FlatPeak and your electricity supplier, FlatPeak may retain your account login credentials securely which will only be used for the purpose of accessing your tariff information. We use your tariff information to accurately calculate your savings and earnings; and to suggest if you could save money by switching to a different tariff or supplier. You can withdraw consent at any time by contacting us at support@levelise.com.

How we protect your information

The security of your information matters to us. In order to protect your information, we have put in place physical, electronic and procedural safeguards. For example, these include:

• Storing your data in highly secure cloud environments hosted by Amazon, Microsoft, Zendesk and Google.

• Ensuring that data sent between you and Levelise is secured using industry standard TLS (Transport Layer Security) encryption.

• A strict user access policy that only allows access to your data to relevant personnel.

What we do with your data

We will only use personal information where we are allowed to by law. This will be under one or more of the following circumstances:

• To perform our contract we have or will have with you, either directly or via a third party.

• To operate our website and to deliver the services that you have requested.

• Where it is necessary for us to run our business and to give you the best possible service.

• To comply with a legal or regulatory obligation.

• Where you have consented, or where you are a direct customer of ours, we may send you information about our other products and services which we think will be of interest to you.