This notice applies across all websites that we own and operate and all services we provide, including our Flex platform and online monitoring and energy management products, and any other apps or services we may offer. For the purpose of this notice, we'll call them our 'services'.
When we say 'personal data' we mean identifiable information about you, like your name, email address, telephone number, payment information, or support queries. If you can't be identified (for example, when data has been aggregated and anonymised) then this notice doesn't apply.
Blackcurrent Limited is bound by the New Zealand Privacy Act 2020. We may update this notice from time to time. Where a change is significant, we'll let you know, usually by email.
Who are we?
When we refer to 'we' (or 'our' or 'us'), that means Blackcurrent Limited. We provide energy management consulting and cloud-based energy software services, including the Flex platform, to business customers across New Zealand.
For privacy queries, contact us at: support@blackcurrent.io
Our principles of data protection
Our approach to data protection is built around four principles that are at the heart of everything we do.
- Transparency: We are open, honest and straightforward about how we handle personal data.
- Enablement: We use data to deliver real value to our customers and improve the services we provide.
- Security: We apply strong, industry-standard security practices to the data entrusted to us.
- Stewardship: We take seriously the responsibility that comes with holding personal data.
What data we collect
We collect two broad categories of data through our services.
Personal data
Information you provide directly: We collect personal data when you contact us, sign up for our services, use our support channels, participate in training or events, or otherwise interact with us. This includes your name, email address, phone number, and any other information you choose to share.
Information we collect automatically: When you visit our websites or use our services, we automatically collect certain technical data such as your device type, browser, and how you navigate through our sites and products. We use cookies and similar technologies to support this. This helps us improve the experience and performance of our services.
Information from third parties: We may occasionally receive personal data about you from trusted sources, such as marketing or research partners, to supplement the information we already hold and improve our services.
Energy system and platform data
Our Flex platform connects to customer energy systems (including solar generation, battery storage, EV chargers, heat pumps and other controllable loads) and collects operational telemetry data such as energy generation, consumption, import, export, battery state, and device activity. While much of this data relates to energy assets and systems rather than individuals, it may in some cases be associated with an identifiable person, particularly in smaller business or sole trader contexts. We treat any such data with the same care we apply to personal data.
Why we collect your data
We collect and use personal data only where we have a lawful basis to do so under the Privacy Act 2020. This means we process personal data:
- to perform a contract with you, or to take steps at your request before entering into one
- where we have a legitimate interest in doing so and that interest is not outweighed by your rights
- to comply with a legal obligation
- where you have given us your consent
The main purposes for which we use your personal data are:
To provide and manage our services: operating our platforms, fulfilling contracts, managing your account, and supporting your ongoing use of our products.
To communicate with you: sending operational updates, responding to support requests, and providing information you've asked for. We may also send marketing communications about Blackcurrent products and services in accordance with your preferences.
To improve our services: tracking and analysing how our websites and platform are used so we can fix problems, improve performance, and build better products.
To keep our services secure: detecting and preventing fraud, misuse, and unauthorised access.
To meet legal obligations: complying with applicable laws, regulations and lawful requests from authorities.
International data transfers
Our services are built on cloud infrastructure hosted by Amazon Web Services (AWS). Data may be stored or processed in AWS regions outside New Zealand, including in Australia or the United States. Where this occurs, we take steps to ensure your data is protected in a manner consistent with the New Zealand Privacy Act 2020, including by relying on contractual protections with our infrastructure providers.
How long we keep your data
We keep your personal data for as long as we have an active relationship with you and for a reasonable period afterwards to meet legal, regulatory, and business requirements, for example to comply with tax and accounting obligations or to respond to any disputes or queries that may arise.
The length of time we retain data varies depending on its type and purpose. Account and contact information is kept for the duration of our relationship with you and for a period afterwards as required by law. Energy system telemetry and platform data collected through the Flex platform is retained for as long as it is needed to deliver our services and support performance analysis, after which it is deleted or de-identified. Financial and transactional records are kept in accordance with applicable legal and tax requirements.
When personal data is no longer needed, we delete it or anonymise it in accordance with our data retention practices.
Your rights
Under the Privacy Act 2020, you have the right to:
- ask whether we hold personal data about you and request access to it
- request correction of any personal data that is inaccurate or out of date
- make a complaint if you believe we have breached the Privacy Act
You can also ask us to stop sending you marketing communications at any time by following the unsubscribe instructions in any marketing email, or by contacting us directly.
To exercise any of these rights, contact us at support@blackcurrent.io. We will respond within a reasonable timeframe.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz.
Contact
Blackcurrent Limited
support@blackcurrent.io
www.blackcurrent.io
Blackcurrent Privacy Policy — Version 2.0 — May 2026