Privacy and cookies

Who is responsible

Pendulum Power Consultants Ltd, registered in England and Wales under company number 13684414, registered office One New Street, Wells, Somerset, BA5 2LA, United Kingdom, is the data controller for this site.

For anything on this page, email design@pendulum-power.co.uk.

Using the calculator without an account

The P28 calculator is designed to work with no account and no tracking. If you have not signed in and have not accepted analytics cookies, we do not set any cookie, do not store your inputs, and do not know who you are.

Your inputs travel in the page address so a result can be bookmarked and shared. They appear in our web server's access logs, which our hosting provider keeps for a limited period for security and diagnostics. We do not read those logs to analyse individual assessments.

If you create an account

We store:

• your name, email address and, if you give one, your company name;
• a cryptographic hash of your password — never the password itself;
• any P28 assessments you choose to save: the values you entered, the result, and the version of our calculation engine that produced it;
• optional report details you enter for a PDF: project number, client, DNO and site address.

Your account is shared with the G5/5 Calculator. Both draw on the same account record, so your credits and your G5/5 studies are the same on each. Your saved P28 assessments are held on this site only. The two run on separate domains, so you will be asked to sign in separately on each one.

The lawful basis is performance of a contract: you asked for an account so that your assessments can be saved and returned to you.

We do not sell your data, and we do not use your email for marketing unless you separately ask us to.

Cookies

If you never sign in and never accept analytics, this site sets no cookies at all. Your choice about analytics is remembered in your browser's local storage rather than in a cookie, so that declining does not itself require setting one.

Changing your mind

You can withdraw or give consent at any time.

Change my cookie choice

Analytics

We use Google Analytics 4 to see which pages are read and which tools are used. It runs only after you accept. Until then, Google's tag is not even downloaded, so no request reaches Google and no identifier is created.

When it does run, IP addresses are anonymised, and advertising and personalisation features are switched off. Google acts as our processor and may transfer data outside the UK under its standard contractual clauses.

Who else handles your data

• QSS IT Solutions — hosting and email. Our servers and database are operated on their infrastructure in the UK.
• Google — analytics, only with your consent.
• Stripe — payment processing, but only if you buy credits or a membership on the G5/5 Calculator. Nothing on this site takes payment, and Stripe is not loaded here.

How long we keep things

• Saved assessments — until you remove them. Removing one takes it off your list straight away. We keep the underlying record, so it can be put back if you ask us, and it is deleted for good when you close your account.
• Your account — until you ask us to close it. Closing an account deletes its saved assessments with it.
• Payment records — if you have bought credits or a membership on the G5/5 Calculator, we keep the record of that transaction for six years. UK tax and company law require it, and the right to erasure does not extend to information we are legally obliged to keep. Closing your account removes your name and contact details, so the retained record no longer identifies you. Stripe keeps its own copy under its own retention policy.
• Records of your data requests — if you ask us for a copy of your data or ask us to close your account, we keep a record that you asked and that we acted on it. That is how we can evidence we did what we said. While your account is open, that record includes the email address, IP address and browser details the request came from. When you close your account we remove all three, and keep the rest for as long as we keep the closed account itself, so what is left records what happened rather than who you are.
• Server logs — kept by our host for a limited period for security and diagnostics.
• Analytics — retained by Google under the retention period set on our property.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything inaccurate;
• delete your account and everything saved under it;
• export your data in a portable form;
• restrict or object to how we use it;
• withdraw consent for analytics, which you can also do with the button above.

Email design@pendulum-power.co.uk and we will respond within one month.

If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

Security

The site is served over HTTPS only. Passwords are stored as salted hashes using PHP's current default algorithm, and are re-hashed automatically when that default improves. Session cookies are marked HttpOnly, Secure and SameSite=Lax. Changing your password signs you out everywhere.

Changes to this policy

If we change how we handle data we will update this page and its date. Material changes affecting existing accounts will be notified by email.