Privacy Notice
Everything you need to know about how we handle your personal data, your rights, and your options.
Last updated: 14 July 2026
Who we are
Energy Flux is operated by Energy Flux Limited (“we”, “us”), a company registered in England & Wales (company no. 16021701; registered office: 60 Tottenham Court Road, Suite 5194a, Fitzrovia, London, W1T 2EW), which is the data controller for the personal data described in this notice. Energy Flux is an independent, subscription-based research service covering European natural gas and LNG markets, and global energy geopolitics. This notice explains what personal data we collect about our readers, subscribers and forum members, why we hold it, who we share it with, and the rights you have over it.
It applies to www.energyflux.news, our newsletters, the Flux Exchange community forum at exchange.energyflux.news, and any gated content we deliver.
Contact for anything in this notice, or to exercise your rights: hello@energyflux.news · Energy Flux Limited, 60 Tottenham Court Road, Suite 5194a, Fitzrovia, London, W1T 2EW.
The data we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Identity & contact | Name, email address | You, when you subscribe or sign up |
| Account & subscription | Tier, subscription status, sign-up date, member since | Created as you use the service |
| Payment | Billing name, country, card type/last-4, invoices — full card details are held by Stripe, not by us | You, via Stripe at checkout |
| Newsletter engagement | Whether emails are delivered, opened, and which links are clicked | Automatically, as emails are sent |
| Forum activity | Username, profile, posts, and technical logs including IP address | You, when you use Flux Exchange |
| Website & device | Pages viewed, approximate location, device/browser, cookie identifiers, truncated IP | Automatically, via analytics cookies (with your consent) |
| Content downloads | Which gated decks/PDFs you download, and when | Automatically, via our delivery system |
| Correspondence | Emails and messages you send us | You |
| Enrichment (where we do it) | Publicly available professional information about a subscriber or their organisation | Public sources — see the note below |
A note on enrichment. From time to time we may supplement subscriber records with professional information from public sources (for example, a subscriber’s stated organisation) to understand our readership and tailor coverage. Where we do this we rely on our legitimate interests, we assess that this is not overridden by your rights, and you can object at any time (see Your rights). We do not build sensitive profiles and we do not make decisions about you by solely automated means that produce legal effects.
Why we use your data, and our lawful basis
| Purpose | Data used | Lawful basis |
|---|---|---|
| Send the newsletter you signed up for | Identity, contact, engagement | Consent (which you can withdraw at any time) |
| Provide and manage a paid subscription | Identity, account, payment | Contract |
| Take payment and keep financial records | Payment, transaction records | Contract and legal obligation (tax/accounting) |
| Run and secure the forum | Forum activity, technical logs | Contract/consent (to participate) and legitimate interests (security) |
| Measure and improve content and website | Engagement, website/device | Consent (analytics cookies) and legitimate interests |
| Understand our readership (incl. enrichment) | Account, enrichment | Legitimate interests |
| Tell you about our paid subscriptions | Identity, contact, engagement | Legitimate interests (promoting our own service to existing readers) and, where required, your consent. You can opt out at any time |
| Protect the service from abuse and fraud | Download logs, technical logs | Legitimate interests |
| Reply to your enquiries | Correspondence | Legitimate interests |
Where we rely on legitimate interests, we have weighed our interest against your rights and freedoms; you can ask us for that assessment.
Marketing and your consent
We send the newsletter on the basis of your opt-in consent. If you are an existing paying subscriber, we may also send you closely related updates about the service on the basis of the soft opt-in permitted by the UK’s PECR.
We also sometimes contact readers directly about our paid subscriptions — for example, if you read us regularly on the free list. We keep a record of those conversations (see Google Workspace below). Where you are a business contact, we rely on our legitimate interests in promoting our own service; where consent is required, we rely on your consent.
Every marketing email carries a working unsubscribe link, and you can opt out at any time — including from the paid-subscription emails while continuing to receive the newsletter, or vice versa. We act on it promptly and keep a minimal record of your email solely to make sure we honour that choice.
Cookies and analytics
We use a small number of cookies. Strictly necessary cookies (for login, sessions and security) are always on. Non-essential cookies — Google Analytics and Microsoft Clarity — are set only with your consent, which you give (or decline, or later change) via our cookie banner. You can change your choice at any time using the “Cookie settings” option on this site. Google Analytics is configured to truncate IP addresses and to retain user-level data for a limited period.
Who we share your data with
We never, ever sell your personal data. That would be immoral and probably illegal. We share it only with the service providers (“processors”) that run Energy Flux on our behalf, each under a data-processing agreement, and only as needed to deliver the service.
| Provider (and group entity) | What it does for us | Data involved | Where it is processed, and safeguard |
|---|---|---|---|
| Ghost(Pro) — Ghost Foundation Ltd | Website, membership database, newsletter sending | Identity, contact, account, engagement | Stored in the EU (Amsterdam). Any provider access from outside the EU is covered by Standard Contractual Clauses |
| Stripe — Stripe Payments Europe Ltd (Ireland) | Payment processing for paid tiers | Billing name, email, country, card data (held by Stripe), invoices | EU and US, under the EU-US Data Privacy Framework (UK Extension) and SCCs. Stripe also acts as its own controller for payments, fraud prevention and legal compliance |
| Mailgun / Sinch — Mailgun Technologies Inc (US) | Sends the welcome email and system alerts | Email address | EU region storage; transfers to the US entity under the Data Privacy Framework (UK Extension) and SCCs |
| Zapier — Zapier, Inc. (US) | Automations (e.g. triggering the welcome email) | Name, email | US, under the Data Privacy Framework (UK Extension) and SCCs / UK Addendum |
| DigitalOcean — DigitalOcean, LLC (US) | Hosts our sign-in bridge between site and forum | Account identifiers | EU/UK region; provider transfers under the Data Privacy Framework (UK Extension) and SCCs |
| Communiteq (Netherlands) | Hosts the Flux Exchange forum | Username, email, posts, IP | EU (Frankfurt); no transfer outside the EEA |
| Google — Google Ireland Ltd | Website analytics (GA4) — set only with your consent | Device/behaviour, cookie ID, truncated IP | EU and US, under the Data Privacy Framework (UK Extension) and SCCs |
| Google Workspace — Google Ireland Ltd | Our email, documents, and the spreadsheet we use to keep track of reader relationships | Name, email address, subscription status, and our own notes about our contact with you | EU and US, under Google’s Cloud Data Processing Addendum and the Data Privacy Framework (UK Extension) / SCCs |
| Microsoft — Microsoft Clarity | Website usage analytics — set only with your consent | Device/behaviour, cookie ID, IP | US, under Microsoft’s data-protection terms and approved transfer safeguards |
| Cloudflare — Cloudflare, Inc. (US) | Content delivery, security, gated-file delivery | IP address, download logs | Gated files and logs pinned to the EU; edge traffic is global; transfers under the Data Privacy Framework (UK Extension) and SCCs |
| Anthropic (Claude) — Anthropic Ireland Ltd, with processing by Anthropic PBC (US) | AI assistance for internal readership analysis and for drafting | Subscriber records provided for a specific task — typically name, email address, subscription tier and status, and newsletter engagement. Never payment card details, passwords, or special-category data | US, under Standard Contractual Clauses and the UK Addendum. Under our business terms, inputs are not used to train AI models |
A note on our use of AI. We use AI tooling (Claude, provided by Anthropic) for internal work — principally understanding readership patterns, and drafting. We provide only the minimum data needed for the task in hand, under business terms that prohibit our data being used to train AI models. We do not input payment details, passwords, or special-category data, and we do not use AI to make automated decisions about you. A human reviews any conclusion that affects what we do.
Where a provider processes data outside the UK/EEA, we rely on an approved safeguard such as the provider’s certification under the EU-US Data Privacy Framework (and its UK Extension), the UK International Data Transfer Agreement / Addendum, or Standard Contractual Clauses. You can ask us which applies to a given provider.
How long we keep your data
We keep personal data only as long as we need it. In summary: subscriber contact data for as long as you are subscribed (and a short window after); billing records for the period tax law requires; forum data while your account is active; and analytics for a limited window. Our full schedule is set out in our Data Retention Policy, which is available on request. When data is no longer needed, we delete or anonymise it.
Your rights
Under UK and EU data-protection law you have the right to:
- be informed about how we use your data (this notice);
- access the personal data we hold about you;
- rectify inaccurate data;
- erase your data (“right to be forgotten”), subject to legal-retention exceptions;
- restrict or object to certain processing — including an absolute right to object to direct marketing, which we always honour;
- data portability — receive your data in a portable format;
- not be subject to solely automated decisions with legal or similarly significant effects (we do not make such decisions about you); and
- withdraw consent at any time, where we rely on consent.
To exercise any of these, contact us at hello@energyflux.news. We respond within one month. There is normally no charge for reasonable requests.
You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, although we would appreciate the chance to resolve any concern first. If you are in the EU, you may complain to your local supervisory authority.
Security
We take reasonable technical and organisational measures to protect your data, and we work only with providers that offer appropriate security. No system is perfectly secure, but we design our processes to minimise the data we hold and to limit who and what can access it.
Children
Energy Flux is a professional research service intended for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Changes to this notice
We may update this notice as our service or the law changes. We will post the updated version here with a revised date, and for material changes tell subscribers by email.