1. Who we are
Ihcanum Energy Solutions Limited ("IES", "we", "us", "our") is the controller of the personal information described in this notice. This means we decide how and why it is used.
- Company: Ihcanum Energy Solutions Limited, a private limited company registered in Scotland, company number SC902884.
- Registered office: 4 Mackie Way, Elrick, AB32 6AL, Aberdeenshire, United Kingdom.
- ICO registration: we are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC282633.
- Contact for privacy questions and requests: info@ihcanumenergy.com, or by post to our registered office.
We are not required to appoint a data protection officer and have not done so. Our Managing Director is responsible for data protection at IES.
2. What this notice covers
IES is a business-to-business company. We represent and distribute specialist energy and engineering technologies and help their owners enter markets in Africa, the UK and Europe. This notice explains how we handle personal information about:
- people who send us an enquiry through this website or by email;
- people at technology providers and OEMs (original equipment manufacturers) that we represent, or are discussing representing ("technology providers");
- people at operators, buyers, contractors and other organisations interested in the technologies we offer;
- people at organisations we contact about our services ("business development contacts");
- people at our suppliers, partners and advisers; and
- visitors to this website.
It does not cover other websites, including those we link to, such as the websites of technology owners. Those sites have their own privacy notices.
3. The information we collect
3.1 When you use our website forms
Our website has two enquiry forms. Fields marked as required on the form are needed for us to respond; the rest are optional.
| Form | Information collected |
|---|---|
| Partner with IES (for technology manufacturers and developers) | Full name, job title, company name, company website, business email, phone number with country code, country of headquarters, technology or product, focus areas, target markets, current presence in your target markets, preferred timeframe, how you heard about IES, and your description. |
| Request a solution (for operators and buyers) | Full name, job title, organisation, business email, phone number with country code, country of operation, industry, asset or equipment type, needs, your description of the challenge, timeframe and, when you send the form from a technology page, the technology you were viewing. |
We also receive the date and time of the submission. The forms include a hidden field that helps us filter out automated spam; it does not collect information about you.
Please use business contact details. Please do not send confidential or commercially sensitive technical information, or personal information about other people, until we have agreed with you how it will be handled (for example under a confidentiality agreement).
3.2 When you email or speak to us
Your name, contact details, job title, organisation, the content of your messages and any attachments, and notes of our calls and meetings.
3.3 Technology providers, customers, suppliers and partners
Business contact details and job titles of the people we deal with, our correspondence, meeting notes, and information needed to manage agreements, quotations, orders, payments and deliveries (for example names on purchase orders, invoices and shipping documents). We may also carry out basic due diligence on organisations we work with, which can include checking the names of directors or owners against public sanctions lists.
3.4 Business development contacts
When we contact people about our services, we hold:
- name, job title, organisation and business email address, as published by your organisation or by you (this may be a general address such as info@ or sales@);
- a link to your public professional profile, such as LinkedIn, kept only as a record of your role;
- a record of where and when we found your address and why we thought our message was relevant to your role; and
- our emails to you, your replies, and whether you have asked us not to contact you again.
We do not buy or rent contact lists, we do not guess or construct email addresses, and we do not collect personal phone numbers, home addresses or personal email addresses for this purpose.
3.5 When you visit this website
Our website is hosted by Webflow. Webflow delivers our pages, images, fonts and the standard code libraries the site needs to work (such as jQuery and Webflow's own scripts) from its servers and through content delivery networks it uses, such as Amazon Web Services, Fastly and Cloudflare. To do this, these services process technical information such as your IP address, browser and device type, and the pages and files requested, so that the site can be shown to you and kept secure. We do not use analytics, advertising or tracking tools, and we do not use this information to identify you.
Our fonts are hosted with our website by Webflow, so your browser does not contact Google Fonts or any other third-party font service.
Our hosting provider's security service may place one strictly necessary cookie on your device. See our Cookie Policy for details.
3.6 Information we do not want
We do not ask for, and ask you not to send us, special category information (such as health, religion or ethnic origin) or information about criminal convictions.
4. Where we get your information
- Directly from you, through our forms, by email or in person (for example at an industry event).
- From your organisation, for example when a colleague introduces you as the contact for a project.
- From public sources, such as your organisation's website, press releases, industry directories, event listings, and public professional profiles, which we view manually.
- From people who refer us to you. If so, we will tell you who referred us in our first message.
- From public registers and sanctions lists, when we check organisations we may work with.
5. How we use your information and our lawful basis
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) we must have a lawful basis for each use.
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries submitted through our forms or by email, and keeping a record of our correspondence | Legitimate interests (responding to people who contact us and running our business). Where you ask about entering into an agreement with us, steps taken at your request before entering into a contract. |
| Assessing whether a technology suits a market or a customer need, and introducing technology providers and customers to each other | Legitimate interests (developing our representation and distribution business, and helping you with your enquiry). |
| Managing representation, distribution, supply and other agreements, including quotations, orders, invoicing and delivery | Performance of a contract where the contract is with you; otherwise legitimate interests (managing our relationship with your organisation). |
| Sending individual business development emails to people whose role makes our services relevant | Legitimate interests (promoting our services to relevant organisations). We have assessed this use and keep a written record of the assessment. |
| Keeping a "do not contact" list and records of where we found addresses | Legitimate interests (respecting objections and showing that we follow the electronic marketing rules); and legal obligation where the law requires it. |
| Checking organisations and their owners or directors against sanctions lists, and preventing bribery, fraud and other wrongdoing | Legal obligation; and legitimate interests (complying with anti-bribery, sanctions and export control laws and protecting our business). |
| Keeping accounting, tax and company records | Legal obligation. |
| Running and securing this website and our systems | Legitimate interests (keeping our website and systems working and secure). |
| Handling privacy requests and complaints | Legal obligation. |
| Establishing, exercising or defending legal claims | Legitimate interests. |
Where we rely on legitimate interests, we have weighed our interests against yours, and you can ask us for details. You have the right to object (see section 11).
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We may use software tools, including AI-assisted tools, to help with research, drafting and record-keeping, but a person decides who we contact and reviews every message before it is sent.
6. Business-to-business emails and your right to object
We send only a small number of individual, relevant emails to business contacts. Under the Privacy and Electronic Communications Regulations 2003 (PECR), we may send marketing emails to people at companies, limited liability partnerships, Scottish partnerships and government bodies ("corporate subscribers") without prior consent, provided we identify ourselves and give a simple way to opt out. We do not send unsolicited marketing emails to sole traders or individual partners in non-LLP partnerships in the UK without their consent. Where recipients are outside the UK, we also follow the rules that apply in their country.
Every business development email we send identifies IES, gives our postal address and explains how to opt out. You can ask us to stop at any time by replying "unsubscribe" or emailing info@ihcanumenergy.com. We will stop straight away. We will keep your email address and the date of your request on a suppression list, used only to make sure we do not contact you again.
7. Who we share your information with
We do not sell your personal information. We share it only where needed, with:
- Our service providers, who act on our instructions and must keep it secure:
- Webflow, Inc. (USA): website hosting and the enquiry forms (form submissions are stored in Webflow and emailed to us), including the content delivery networks Webflow uses to deliver the site;
- Google (Google Workspace): email, calendar and file storage;
- Grok, provided by SpaceXAI LLC (USA): our AI assistant workspace, used for research, drafting and record-keeping;
- providers of any CRM, accounting, e-signature or file-sharing tools we use to run our business;
- Technology providers and OEMs we represent, mainly based in the United States and Canada, where your enquiry concerns their technology and they need the details to answer it, prepare a proposal or quotation, or provide technical support. If you would prefer us not to share your details with a technology provider, tell us and we will discuss alternatives;
- Partners in the countries where we work, such as local partners, agents, logistics providers and freight forwarders in Nigeria, Ghana, Côte d'Ivoire and other markets, where needed to answer your enquiry or deliver an order;
- Customers and prospective customers, where you are a technology provider and we are presenting your technology to them (business contact details only, where relevant);
- Professional advisers, such as accountants, lawyers and insurers;
- Banks and payment providers, to process payments;
- Authorities, regulators and law enforcement, where the law requires it or to protect our rights; and
- A buyer or investor, if our business is sold or restructured, under appropriate confidentiality terms.
8. International transfers
Some of the organisations we share information with are outside the UK. Where we transfer personal information outside the UK, we make sure it is protected as UK law requires:
| Recipient | Where | Safeguard |
|---|---|---|
| Webflow (website and forms) | United States | Webflow is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), and its Data Processing Addendum includes the UK International Data Transfer Agreement as a fallback. |
| Google (Google Workspace) | United States and other locations | UK–US data bridge certification and/or the UK International Data Transfer Addendum in Google's data processing terms. |
| SpaceXAI LLC (Grok AI assistant workspace) | United States | The standard contractual clauses approved for international transfers, as amended by the UK International Data Transfer Addendum, which are included in SpaceXAI's data processing addendum. |
| Technology providers in Canada | Canada | UK adequacy regulations for Canada (covering organisations subject to Canada's federal private-sector privacy law). |
| Technology providers in the United States | United States | The UK–US data bridge where the technology provider is certified; otherwise the UK International Data Transfer Agreement or Addendum in our agreement with them; or, for occasional transfers, where the transfer is necessary for a contract or steps you have asked us to take. |
| Partners and customers in Nigeria, Ghana, Côte d'Ivoire and other African countries | Africa | These countries do not have UK adequacy regulations. We use the UK International Data Transfer Agreement or Addendum in our agreements where practicable; otherwise we transfer only what is necessary for a contract with you, or for steps you have asked us to take, or for a contract made in your interest. |
| Partners in the EU/EEA | EU/EEA | UK adequacy regulations for the EEA. |
You can ask us for more information about these safeguards, or a copy of them, using the contact details in section 1.
9. How long we keep your information
We keep personal information only for as long as we need it for the purposes in this notice. We review the information we hold at least once a year and securely delete or anonymise what we no longer need.
| Information | How long we keep it |
|---|---|
| Form submissions held in Webflow | Copied to our email and deleted from Webflow within 30 days of receipt |
| Enquiries and correspondence that do not lead to an agreement | 2 years from our last contact with you |
| Business contact details of people at technology providers, customers, suppliers and partners we work with | For as long as we work with your organisation, then 2 years from our last dealings (records that form part of an agreement or transaction are kept as set out below) |
| Business development contacts who do not reply | 12 months from our last email to you |
| People we researched but never contacted | 3 months from the research date |
| After you opt out or object to our emails | Your record is deleted within 1 month; your email address and the date of your request stay on our suppression list for as long as we send business development emails, so that we do not contact you again |
| Bounced email addresses | Deleted within 1 month |
| Records relating to an agreement, order or transaction (including accounting and tax records) | 6 years from the end of the financial year in which the agreement ends or the transaction completes |
| Sanctions and due-diligence checks | 6 years from the end of our relationship with the organisation concerned |
| Privacy requests and complaints | 5 years from the date we close the request or complaint |
We may keep information for longer where the law requires it, or where it is needed to establish, exercise or defend a legal claim, for example if a dispute is ongoing.
10. Security
We may use business accounts and the security features provided by our service providers to protect personal information. We limit access to personal information to people who need it, and we require our service providers to protect it. No method of sending or storing information is completely secure, so please do not send us sensitive information by email or through our forms.
11. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict how we use it;
- object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing (we will always stop marketing when you object);
- ask us to transfer information you gave us to another organisation, where this applies; and
- where we rely on consent, withdraw your consent at any time.
These rights have some limits. To use them, contact us using the details in section 1. We will respond within one month, which may be extended in some cases where the law allows. There is normally no charge. We may need to confirm your identity.
12. Cookies
We do not use analytics, advertising or tracking cookies. Our website uses only cookies that are strictly necessary for its security and operation. Please see our Cookie Policy for details.
13. Children
Our website and services are for businesses and professionals. They are not aimed at children, and we do not knowingly collect information about anyone under 18.
14. Complaints
If you are unhappy with how we have handled your personal information, please send your complaint by email to info@ihcanumenergy.com, with "Data protection complaint" in the subject line, unless the law requires us to accept it another way.
Please tell us what your complaint is about and how we can contact you. We will acknowledge your complaint within 30 days of receiving it. We will then look into it without undue delay, keep you informed of our progress, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator. The ICO will usually expect you to have raised your complaint with us first. You can contact the ICO at www.ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
15. Changes to this notice
We will update this notice when the way we handle personal information changes, for example if we add new tools to our website. We will publish the updated version on this page with a new "last updated" date.
Last updated: 26 October 2026.