Privacy Policy

Last updated: 8 October 2026

1. Who is responsible?

BridgePower, a company formed in Luxembourg, is responsible for the personal data it uses to operate this website and handle enquiries. For privacy questions or to exercise your rights, use the Contact us button at the bottom of this page and mark your message “Privacy”.

This notice covers website visits and related enquiries. The EU General Data Protection Regulation applies where relevant; UK processing is also subject to the UK GDPR and Data Protection Act 2018, as amended, where applicable. Separate notices may apply to formal investment, employment or project relationships.

2. Information we handle

Enquiries: your name, business contact details, organisation, message and any information you choose to send through the contact form or subsequent correspondence.
Website delivery and security: technical information such as IP address, requested page, access time, browser or device information and security events may be processed by hosting and network providers.

The website includes a contact form. It has no newsletter registration or visitor analytics scripts. Browsing does not require you to provide your name or email. Using the form is voluntary. Your name, email address and message are needed to submit an enquiry; your organisation is optional. Please avoid sending sensitive personal information or confidential investment documents through an initial enquiry.

3. Purposes and legal bases

Responding to business enquiries: legitimate interests in communicating with prospective investors, partners and suppliers, subject to your interests and rights.
Operating and protecting the website: legitimate interests in reliable delivery, preventing misuse and maintaining security.
Steps towards an agreement: where you personally request steps before entering a contract, or we perform a contract with you, contractual necessity may apply. Business representative details are generally handled on legitimate interests.
Legal obligations: compliance with a legal requirement where one applies to the processing.
Optional marketing or non-essential tracking: consent where required by applicable UK or EU rules. Sending an enquiry does not by itself constitute consent to unrelated marketing.

4. Cookies and similar technologies

The website code currently sets no cookies, uses no persistent browser storage and includes no advertising or analytics trackers. Hosting or security infrastructure may use strictly necessary technologies to deliver and protect the service. Submitting the contact form takes you to FormSubmit, which may use its own cookies and a CAPTCHA check under its privacy terms.

If optional cookies or trackers are introduced, this notice will be updated and a consent choice will be provided before they operate where required by applicable UK and EU rules. You can also manage cookies through your browser.

5. Who may receive information?

Information may be handled by authorised BridgePower personnel and service providers supporting hosting, network security, email and IT. This website uses OpenAI Sites hosting running on Cloudflare infrastructure. Professional advisers or public authorities may receive information where necessary for advice, legal obligations or the protection of legal rights.

Contact-form enquiries are processed by FormSubmit and delivered to Solanity’s designated mailbox, info@solanity.co.uk, where authorised personnel handle enquiries on behalf of BridgePower. FormSubmit’s privacy terms describe its service. Aquila Group and other project counterparties do not receive your enquiry automatically. Any further sharing for a specific collaboration must have a lawful purpose and basis. External links have their own privacy notices.

6. International processing

Hosting, email and support services may involve processing outside Luxembourg, the European Economic Area or the UK. Where restricted international transfers arise, the applicable EU or UK transfer requirements must be met. Depending on the destination and arrangement, these include an applicable adequacy decision or contractual safeguards, such as EU standard contractual clauses and, where required, the UK International Data Transfer Agreement or UK Addendum, together with the required transfer assessment.

Use the Contact us button at the bottom of this page for information about the destinations and safeguards relevant to your data, or to request a copy of applicable safeguards, subject to appropriate redaction.

7. Retention and security

FormSubmit states that it retains form submissions in its archive for 30 days. The copy delivered to our mailbox is handled under the correspondence retention approach below.

Enquiry correspondence is retained for as long as reasonably needed to respond, maintain an active business relationship and meet applicable legal, record-keeping or dispute requirements. Retention is assessed against the purpose, relevance, sensitivity and any statutory limitation or preservation period; information no longer needed should be deleted or anonymised.

Technical logs are subject to the hosting or security provider’s retention arrangements and any incident investigation or legal requirement. Use the Contact us button at the bottom of this page for details relevant to your visit. We use proportionate access controls and secure website delivery; no internet transmission or storage system can be guaranteed completely secure.

8. Your rights

Subject to the applicable law and relevant conditions, you may request access, correction, erasure, restriction of processing or portability of personal data. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Right to object: you may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to direct marketing at any time.

Submit privacy requests using the Contact us button at the bottom of this page. We may ask for proportionate information to verify your identity. Requests are normally answered within one month, with any lawful extension explained. The current website does not make solely automated decisions with legal or similarly significant effects on you, or profile visitors for investment eligibility.

9. Complaints

You can raise a concern using the Contact us button at the bottom of this page. You also have the right to complain to a competent supervisory authority without first contacting us. In Luxembourg, contact the Commission nationale pour la protection des données (CNPD). In the UK, contact the Information Commissioner’s Office (ICO). In the EU/EEA, you may complain to the authority where you habitually live, work or where an alleged infringement occurred; see the EDPB authority directory.

10. Updates

We will update this notice when website functionality, processing arrangements or applicable requirements change. The date above identifies the current version. Material changes will be brought to your attention as appropriate.