Privacy notice
Last updated: 1 September 2026
This notice explains how NRB Tech Ltd (“we”, “us”) collects and uses personal information when you use wiggle.energy (the “site”), including when you register interest in Wiggle, ask for home-energy help, or make an investor or professional enquiry.
Who is responsible
The data controller is NRB Tech Ltd, a company registered in England and Wales (company number 11590173). Registered office: Fairleigh, Coldhill Lane, New Mill, Holmfirth, West Yorkshire, HD9 7JX.
We are registered with the Information Commissioner’s Office as a data controller, reference ZC196238.
Questions about this notice or your data: nick@nrbtech.io.
What we collect
Almost everything we hold is what you chose to send us through a form on the site.
Interest form
- Name and email address (required)
- Why you are getting in touch (required)
- If you say you are interested for your home or an early pilot: electricity tariff, whether you have a smart meter, home equipment (for example EV, charger, solar, battery, heat pump), postcode, and any free-text notes you leave
Help request form
- Name and email address (required)
- Phone number (optional, only if you want a call)
- Tariff, home equipment, your message, and which help page you came from
- Whether you ticked the optional box asking us to keep you posted about Wiggle
Investor enquiry form
- Name and email address (required)
- Organisation and message (optional)
- Whether you are contacting us as a prospective investor, network or syndicate, intermediary, adviser, introducer, or potential commercial partner
Technical data
Our server uses your network address briefly to deliver the site and limit repeated form submissions. The form receiver stores only a keyed, one-way digest for that abuse check, not the address itself, and deletes those markers after 48 hours. It does not store your browser user-agent alongside your submission or use technical data to build a profile of you.
This site sets no cookies at all, and loads no third-party scripts, fonts or analytics — which is why you will never see a cookie banner here. We do not sell your information.
How we collect it
You submit the information yourself by filling in a form. It is received directly by NRB Tech's dedicated form service on our operations server. We may read and reply to your message by email or phone using the contact details you gave.
Why we use it (purposes and lawful basis)
We rely on consent under UK GDPR — given when you submit the interest form, or tick the optional box on a help form — to:
- send occasional updates about Wiggle to people who registered interest
- decide who to invite into early pilots and when, using the home details you share
- send Wiggle updates to people who asked for help and ticked that box
You can withdraw consent at any time (see Your rights). Withdrawing consent does not affect processing already carried out.
We rely on our legitimate interests — in answering people who contact us, and in keeping the site working and free of spam — to:
- reply to help requests with suggestions
- reply to partnership, investor or professional enquiries
- send a requested investor pack and arrange related discussions
- keep hosting logs and screen form submissions for spam
If you ask for help and do not tick the updates box, we will use your details to reply and nothing else. You can object to processing based on legitimate interests (see Your rights).
How we store it and who can access it
Each complete form submission is encrypted before it is written to the dedicated form database on our UK-hosted operations server. Encryption keys are stored separately from that database and access is restricted to authorised NRB Tech personnel. Submission contents remain encrypted in backups. We do not share your details with third parties for their own marketing.
A private staff alert tells us only that a form type and random reference are ready for review. It contains no name, contact detail, home information or free text. Spam and rate-limit checks run on our own service rather than sending your submission to a third-party spam service.
How long we keep it
We keep interest-list details until you ask us to remove them, or until we retire the interest list for this early stage of the product. Help-request messages are kept for up to 24 months after we reply (or longer if needed to complete a follow-up you asked for), then deleted.
Investor and professional enquiries are kept for up to 24 months after the last substantive contact, unless an active discussion or a legal record-keeping requirement means we need them for longer.
One-way form rate-limit markers are deleted after 48 hours. Operational logs do not contain the form contents, contact details or raw network address.
Every marketing-style update we send will include a way to opt out. You can also email us at any time to be removed.
How we dispose of it
When retention ends, or when you ask us to delete your data, we delete your form submission from the form database and remove related copies from our email and working files where reasonably practical. Encrypted backups may take a short period to clear under their retention schedule.
Your rights
Under UK data protection law you can ask us to:
- access the personal data we hold about you
- correct inaccurate data
- erase your data
- restrict or object to how we use it
- receive a copy in a portable format (where applicable)
- withdraw consent to marketing or other consent-based processing
Email nick@nrbtech.io and we will respond without undue delay, and within one month where the law requires it.
Complaints
If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO).
Changes
We may update this notice as the site or product develops. The “Last updated” date at the top will change when we do. Continued use of the site after a change means you should read the updated notice.