Privacy Policy
Last updated: March 2026
This Privacy Policy explains how Green Mountain Geothermal Ltd (trading as GMG Africa) (“GMG”, “we”, “us”) collects and uses personal data when you visit GMGAfrica.com and when you contact us.
1) Who we are
Controller: Green Mountain Geothermal Ltd (UK) (Company No. 17051966).
Contact: info@gmgafrica.com
2) What personal data we collect
We may collect and process:
Contact details and enquiry content you provide (e.g., name, email address, organisation, and the content of your message) when you contact us by email or via a contact form.
Website usage data (e.g., pages visited, approximate location, device/browser information, and interactions) collected via cookies/analytics.
Technical data such as IP address and server logs (used for security and troubleshooting).
We do not intentionally collect special category data (e.g., health, political opinions). Please do not include sensitive personal information in your enquiry.
3) How we use your data
We use your personal data to:
respond to enquiries and communicate with you;
manage and improve our website (including performance and user experience);
maintain the security of our website and systems;
keep internal records of legitimate business communications.
4) Legal bases for processing
We rely on the following legal bases under UK GDPR:
Legitimate interests: responding to enquiries, maintaining business communications, and running and improving our website.
Consent: where required for non-essential cookies/analytics (you can withdraw consent via your browser or cookie settings).
Legal obligation: where we must retain information to comply with law (e.g., accounting or regulatory requirements).
5) Cookies and analytics
We may use cookies and similar technologies to:
enable core website functionality;
measure site traffic and understand how visitors use the site (analytics).
You can control cookies through your browser settings and (where available) cookie consent tools. Blocking some cookies may affect site functionality.
6) Who we share data with
We may share personal data with trusted service providers who help us operate the website and communications, such as:
Website hosting provider (e.g., IONOS),
Email provider, and
Analytics provider (if enabled).
These providers process data only on our instructions (as processors) and are required to protect it.
We do not sell personal data and do not share it with third parties for marketing.
7) International transfers
Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards (e.g., UK International Data Transfer Agreement or other lawful mechanisms).
8) How long we keep your data
Enquiry emails and contact form messages: typically up to 24 months after our last interaction, unless we have an ongoing relationship or a lawful reason to retain longer.
Analytics data: retained according to the analytics provider settings (typically up to 14–26 months).
Server logs: retained for security purposes for a limited period.
9) Your rights
You have rights to:
access your personal data;
correct inaccurate data;
request deletion;
restrict or object to processing;
request portability (where applicable);
withdraw consent (where processing is based on consent).
To exercise these rights, contact info@gmgafrica.com
.
10) Complaints
If you have concerns, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).
11) Changes to this policy
We may update this policy from time to time. The latest version will always be posted on this page.