Chameleon Technology and ivie Consent and Privacy Notice
We want you to know that we respect your privacy and are committed to protecting your personal data. This privacy notice tells you how we look after your personal data when you sign up to our services, download our app, purchase our products or activate a purchased device. This includes any data you may provide to us through our sales and support processes. This privacy notice applies to the products and services of both Chameleon and ivie (a brand owned by Chameleon).
It is important that you read this document so that you are fully aware of how and why we are using your data.
Controller
ivie is a brand name owned by us, Chameleon Technology (UK) Limited. Chameleon is the controller and is responsible for your personal data. If you have any queries relating to this Consent and Privacy Notice, please contact us using the details set out below.
Contact Details
Chameleon Technology (UK) Limited
1st Floor, Central House
Otley Road
Beckwith Knowle
Harrogate
England
HG3 1UG
If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us at: legal@chameleontechnology.co.uk or privacy@ivie.co.uk or the address above.
Personal Information We Collect From You
Personal information includes any information about an individual from which that person can be identified, for example: your name, address, phone number and email address.
As part of our sign-up, sales, ordering and/or device activation processes, you will be asked to give us personal information, including your contact details. You may also give us your contact details when you correspond directly with us by post, phone, email or otherwise. We may collect, use, store and transfer different kinds of personal data about you which we have categorised as follows:
Identity Data includes first name, last name, title.
Contact Data includes billing address, delivery address, email address and contact telephone numbers where supplied.
Financial Data includes payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes information specific to the smart meters installed at the intended installation address along with that address.
Profile Data including a username and password, purchases or orders made by you, your preferences, feedback and any survey responses.
Usage Data includes information about how you use our products and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and any related third parties and your communication preferences.
Authentication Data includes data confirming your right to join (or “pair”) your consumer access device that you purchase from us with your smart meter system. This may include a proof of address, such as a recent utility bill or payment card details registered to the address.
To support the security and continuation of your services, we also collect and use Analytics Data including the connectivity and performance of your installed equipment. Analytics Data is derived from your Usage Data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. Contributions to analytics data are anonymised or pseudonymised to protect individuals. If we combine or connect Analytics Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
If You Fail to Provide Data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time. Please see our Terms and Conditions at ivie.co.uk/terms-of-sale.
How Is Your Personal Data Collected?
We use different methods to collect data from you including:
Direct interactions. You may give us your Identity, Contact, Technical, Profile and Financial Data by filling in forms or surveys or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you place an order for our products and services.
Automated data collection. Once connected to your home WiFi, the device that you have purchased from us connects with our central data platform and will automatically send Usage Data and Analytics Data to our Data Platform. This is described in more detail above.
How We Use Your Information
We use your personal data when the law allows us to. Most commonly we will use your personal data to process your orders and/or deliver products, services and support to you. We will also use your data to send information requested by you or to respond to you if you contact us with a query or feedback.
We will seek your consent before sending third party direct marketing communications to you via email or text message. If you don’t want to receive marketing communications, you can unsubscribe at any time by contacting us (by post or email) at the address above or by following links on the corresponding email.
We may also contact you to tell you about our products / services or news and events relating to our business that we think you may be interested in. If you don’t want to hear about any of this, you can unsubscribe at any time by contacting us (by post or email) at the address above or by following links on the corresponding email.
Please note that we will never share or sell your personal information to any third party, except as may be set out in this Privacy Notice.
Please see the end of this Privacy Notice for a summary of all the ways we plan to use your data.
Smart Energy Code and Consent
The Smart Energy Code requires us to seek unambiguous consent from you to manage the connection of your consumer access device that you purchase from us with your smart meter system. To satisfy these requirements, you will be asked for information to verify your identity as the energy consumer at your property (Authentication Data). You will also be asked for your consent to allow us to connect and disconnect a device with your smart meter system and to share certain information with third parties to enable these processes to take place. This is described in the paragraph below (Third Party Processing).
If you do not give your consent as required, we will not be able to pair your device to the system; in which case your device will not operate.
Third Parties
We require all third parties to respect the security of your personal data and to treat it in accordance with our instructions and data protection law.
We use a third-party contractor to support managing the connection of devices to the smart meter system. We only share such information with the contractor as is necessary to manage or investigate your installation at your request. We do not share any of your personal data for this purpose, other than your postcode and house number.
In addition, we also use trusted third parties to host our data platform (such as Amazon Web Services) and to process payments for goods and services. These third parties have access to data we share with their platforms for the purpose of performing their duties. All of your payment information is encrypted using SSL technology.
When you purchase products from us, we may need to share certain information with your energy supplier (at the time of purchase), to enable them to manage your customer account. We do not share any of your personal data for this purpose, other than your postcode and house number.
If you obtained our device or service through another company (a “Purchaser”), they are responsible for collecting and maintaining your consent. We process your data only as needed to provide our services on their behalf. The Purchaser is your main point of contact for privacy queries, but you can also contact us directly using the details in this Privacy Policy.
As part of your purchase or your relationship with us, you may also be invited to subscribe to third party services or enrol with relevant third-party organisations. If you purchase goods or services, or subscribe to third party marketing activities, your data will be handled by that third party. Please refer to the terms of their privacy policy for further detail.
In addition to the above, we may share certain technical, usage and event participation data with our trusted partner organisations, if you take part in partnership referral schemes or research projects; we will seek your consent prior to sharing any personal data.
We do not share your personal data with any other third parties (other than as described in this Privacy Notice).
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:
Promotional offers from us: We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.
Third-party marketing: We will seek your express opt-in consent before we share your personal data with any third party for marketing purposes.
Opting out: You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time (using the contact details above).
Please note that where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product / service purchase, warranty registration, product/service experience or other transactions.
Security
Your personal information is protected. We have put in place appropriate security and management measures to safeguard and secure the data we collect, store and manage. We ensure that data is stored on secure servers (internal servers and those operated by our third-party contractors).
We limit access to your personal data to personnel and contractors who have a need to access the data and are authorised to do so. They will only process your personal data on our instruction and under strict duties of security and confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Data Retention
We will only retain your personal data for as long as necessary to fulfil the purpose we collected it for.
We will retain relevant information to fulfil legal and regulatory requirements (such as authentication and consent details), so that we are able to evidence compliance with our legal obligations to the relevant authorities. For this purpose only, we keep such records for up to 5 years from the date services are terminated by either party.
For avoidance of doubt, where we use payment card details for authentication checks (see above), we will only retain the results of those checks and will not retain any payment information provided to us.
Your Legal Rights
Under certain circumstances you have rights under data protection laws in relation to your personal data. To find out more about these rights, please see the Information Commissioner Office website at www.ico.org.uk.
If you wish to exercise any of these rights, please contact us at the address and email at the top of this Privacy Notice.
Our products and services are not intended for children under 16, and we do not knowingly collect data relating to children.
Summary Table Showing How We Plan to Use Your Data
We have set out below, in a table format, a description of all the ways we plan to use your data, and which of the legal bases we rely on to process your personal data. We have also identified what our legitimate interests are where appropriate.
| Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|---|---|---|
| To register you as a new customer | Identity Contact | Performance of a contract with you. |
| To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us | Identity Financial Transaction Marketing and Communications Contact | Performance of a contract with you. Necessary for our legitimate interests (to recover debts due to us). |
| To seek consent to manage connection of the consumer access device with the smart meter system at the property address. | Authentication | Performance of a contract with you. Necessary to comply with regulatory obligations |
| To manage our relationship with you which will include: (a) providing updates to devices and technical support when requested (b) Notifying you about changes to our terms or privacy notices (c) Asking you to leave a review or take a survey | Identity Technical Profile Usage Marketing and Communications Analytics Data Contact | Performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests (to keep our records updated and to study how customers use our products / services) |
| To deliver relevant consumer-related content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you | Identity Profile Usage Marketing and Communications Technical Contact | Necessary for our legitimate interests (to study how customers use our products services, to develop them, to grow our business and to inform our marketing strategy |
| To use data analytics to improve our products services, marketing, customer relationships and experiences | Technical Analytics Data Usage | Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). |
| To make suggestions and recommendations to you about goods or services that may be of interest to you | Identity Contact Technical Profile Marketing and Communications Usage | Necessary for our legitimate interests (to develop our products/services and grow our business). Performance of a contract with you |
Last Updated: 30th September 2025
Version: 8