1. Introduction and Scope
NextGrid Energy LLC (“NextGrid,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit nextgrid.com (the “Site”) or contact us through the Site.
This Policy is intended to comply with applicable privacy laws in all fifty (50) U.S. states—including, without limitation, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Montana Consumer Data Privacy Act (MCDPA), the Oregon Consumer Privacy Act (OCPA), the Iowa Consumer Data Protection Act (ICDPA), the Delaware Personal Data Privacy Act (DPDPA), the Indiana Consumer Data Protection Act, the Tennessee Information Protection Act (TIPA), the New Hampshire Privacy Act, and other state privacy statutes that may come into effect—as well as the European Union General Data Protection Regulation (GDPR) and the UK GDPR.
Please read this Policy carefully. By using the Site, you acknowledge that you have read and understood this Policy.
2. Data Controller / Business Identity
For purposes of the GDPR and UK GDPR, NextGrid is the “data controller.” For purposes of U.S. state privacy laws, NextGrid is a “business” or “controller.”
3. Personal Information We Collect
We collect personal information that you voluntarily provide and information collected automatically when you visit our Site.
3.1 Information You Provide to Us
When you complete a contact or inquiry form on our Site, we may collect:
- Full name
- Email address
- Phone number
- Company or organization name (if provided)
- The content of your message or inquiry
3.2 Information Collected Automatically
When you visit our Site, our systems and third-party service providers automatically collect certain technical and usage information, including:
- IP address (which may be truncated or anonymized)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring URL
- Date and time of access
- Cookie identifiers and similar tracking data (see Section 5 for details)
3.3 Sensitive Personal Information
We do not intentionally collect sensitive personal information (e.g., Social Security numbers, financial account numbers, health data, precise geolocation, racial or ethnic origin, or biometric data). Please do not submit such information through our contact forms.
4. How We Use Your Personal Information
We use the personal information we collect for the following purposes:
- To respond to your inquiries, questions, or requests submitted via our contact forms
- To communicate with you about our services, including follow-up correspondence
- To analyze website traffic and user behavior in order to improve the Site’s functionality, content, and user experience
- To administer and operate the Site, including troubleshooting and security monitoring
- To comply with applicable legal obligations and enforce our Terms of Use
- To detect and prevent fraud, unauthorized access, or other harmful activities
- To respond to lawful requests from government authorities or as otherwise required by law
5. Cookies and Tracking Technologies
5.1 What Are Cookies
Cookies are small text files placed on your device by websites you visit. We and our third-party service providers use cookies, web beacons, pixels, and similar technologies to collect and store information about your interactions with our Site.
5.2 Types of Cookies We Use
- Strictly Necessary: Strictly Necessary Cookies
- Required for the Site to function. These cannot be disabled.
- Analytics/Performance: Analytics and Performance Cookies
- Help us understand how visitors interact with the Site (e.g., Google Analytics). Data may be aggregated or anonymized.
- Functional: Functional Cookies
- Remember your preferences to personalize your experience.
5.3 Third-Party Analytics
We may use Google Analytics or similar analytics services. These services may set their own cookies and collect data subject to their own privacy policies. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.
5.4 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Disabling cookies may affect certain functionality of the Site. For more information about managing cookies, visit www.allaboutcookies.org.
5.5 Do Not Track
Some browsers transmit “Do Not Track” (DNT) signals to websites. Currently, there is no universally accepted standard for responding to DNT signals. Our Site does not currently alter its data collection practices in response to DNT signals. We will continue to monitor developments in this area.
6. Legal Basis for Processing (GDPR and UK GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires a legal basis for processing personal data, we rely on the following bases under Article 6 GDPR:
- Legitimate Interests: Legitimate Interests (Art. 6(1)(f)):
- Processing contact form submissions to respond to inquiries; analyzing website traffic to improve the Site.
- Consent: Consent (Art. 6(1)(a)):
- Where we use non-essential cookies and analytics, we rely on your consent, which you may withdraw at any time.
- Legal Obligation: Legal Obligation (Art. 6(1)(c)):
- Processing required to comply with applicable law.
7. How We Share Your Personal Information
We do not sell, rent, or trade your personal information for money. We may share personal information as follows:
- Service Providers/Processors:
- We share data with vendors who provide services on our behalf (e.g., website hosting, email delivery, analytics). These parties are contractually bound to protect your data and may only process it for the purposes we specify.
- Business Transfers:
- In connection with a merger, acquisition, sale of assets, or other corporate transaction, personal information may be transferred as a business asset, subject to the same protections described in this Policy.
- Legal Requirements:
- We may disclose personal information when required by law, court order, subpoena, or governmental authority, or when we believe disclosure is necessary to protect the rights, safety, or property of NextGrid, our users, or others.
- With Consent:
- With your consent, we may share information with third parties when you have given us your explicit consent to do so.
We do not engage in cross-context behavioral advertising or targeted advertising using personal information collected from our Site.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. Specifically:
- Contact form submissions are retained for up to twenty-four (24) months after your most recent inquiry, after which they are securely deleted or anonymized unless a longer period is required by law.
- Analytics data is retained in accordance with the retention policies of our analytics service providers, typically no longer than twenty-six (26) months.
- Log files and technical data may be retained for up to twelve (12) months for security and operational purposes.
9. Your Privacy Rights
Depending on your state of residence or country of location, you may have various rights with respect to your personal information. A summary of applicable rights is set out below. To exercise any right, please see Section 10.
9.1 Rights for All U.S. Residents
Regardless of your state of residence, we provide all users with the ability to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete personal information
- Opt out of any future sale of your personal information (note: we do not currently sell personal information)
- Contact us with privacy questions or concerns at any time
9.2 California Residents (CCPA / CPRA)
If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:
- Right to Know: The right to know what personal information we collect, use, disclose, and sell or share, including the specific pieces of personal information collected about you.
- Right to Delete: The right to request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: The right to request correction of inaccurate personal information.
- Right to Opt Out of Sale or Sharing: The right to opt out of the “sale” or “sharing” of personal information (we do not sell or share personal information for cross-context behavioral advertising).
- Right to Limit Use of Sensitive Personal Information: The right to limit the use and disclosure of sensitive personal information to permitted purposes (we do not collect sensitive personal information as defined by the CPRA).
- Right to Non-Discrimination: The right not to be discriminated against for exercising your CCPA/CPRA rights.
California residents may submit requests through the methods described in Section 10. We will respond within forty-five (45) days, which may be extended by an additional forty-five (45) days when reasonably necessary. We do not charge a fee for first requests in any twelve-month period. California residents may also designate an authorized agent to exercise rights on their behalf.
9.3 Virginia Residents (VCDPA)
If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act:
- Right to access personal data we process about you
- Right to correct inaccuracies in your personal data
- Right to delete personal data provided by you or obtained about you
- Right to obtain a portable copy of your personal data in a machine-readable format
- Right to opt out of processing for targeted advertising, sale of personal data, or profiling (we do not engage in these activities)
If we decline to take action on your request, you may appeal our decision by contacting us at privacy@nextgrid.com. If your appeal is denied, you may submit a complaint to the Virginia Attorney General at www.oag.state.va.us.
9.4 Colorado Residents (CPA)
If you are a Colorado resident, the Colorado Privacy Act grants you similar rights to those described for Virginia residents above, including rights to access, correction, deletion, data portability, and opt out of targeted advertising and sale. If we deny your request, you have the right to appeal, and if the appeal is denied, you may contact the Colorado Attorney General at https://complaints.coag.gov/s/contact-us.
9.5 Connecticut Residents (CTDPA)
If you are a Connecticut resident, the Connecticut Data Privacy Act provides you with rights to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising, sale, and profiling. You may appeal a denial of your request, and if your appeal is denied, you may contact the Connecticut Attorney General at portal.ct.gov/AG.
9.6 Texas, Montana, Oregon, Iowa, Indiana, Tennessee, Delaware, New Hampshire, and Other State Residents
Residents of Texas (TDPSA), Montana (MCDPA), Oregon (OCPA), Iowa (ICDPA), Indiana (ICDPA), Tennessee (TIPA), Delaware (DPDPA), New Hampshire, and other states with enacted privacy legislation have similar rights to those described above, including rights to access, correct, delete, and obtain portability of personal data, as well as the right to opt out of targeted advertising and sale of personal data. We apply these rights uniformly to all U.S. residents who submit a verified request, regardless of their state of residence.
9.7 EEA, UK, and Switzerland Residents (GDPR / UK GDPR)
If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the GDPR and/or UK GDPR:
- Right of Access (Art. 15): Obtain a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of personal data under certain circumstances (“right to be forgotten”).
- Right to Restriction of Processing (Art. 18): Request that we limit how we use your data in certain circumstances.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Rights Related to Automated Decision-Making (Art. 22): Not be subject to solely automated decisions that produce significant legal or similarly significant effects.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
You also have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk.
10. How to Exercise Your Privacy Rights
To exercise any of the rights described in this Policy, you (or your authorized agent) may contact us using any of the following methods:
Email: privacy@nextgrid.com
Mail: NextGrid Energy LLC
68 Harrison Ave, Ste 605 PMB 73069
Boston, MA 02111
Attention: Privacy Officer
Please include the following subject line: “Privacy Rights Request”
We will respond to verifiable requests within the timeframes required by applicable law (generally forty-five (45) days, extendable where permitted). We may need to verify your identity before processing your request by asking you to confirm information associated with your prior contact with us. We will not discriminate against you for exercising your privacy rights.
If you are submitting a request on behalf of another individual as an authorized agent, you must provide written authorization from that individual and verification of your own identity.
11. Do Not Sell or Share My Personal Information
We do not sell personal information as defined under the CCPA/CPRA or any other applicable state law, and we do not share personal information for cross-context behavioral advertising. We do not have actual knowledge that we sell or share personal information of consumers under the age of sixteen (16).
12. International Data Transfers
Our operations are based in the United States. If you are visiting from the EEA, UK, Switzerland, or any other jurisdiction outside the U.S., please be aware that your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your home country.
Where required by applicable law (including the GDPR), we rely on appropriate safeguards for international data transfers, which may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The UK International Data Transfer Agreement (IDTA) or Addendum
- An adequacy decision issued by the relevant data protection authority
For more information about our international transfer mechanisms, please contact us at privacy@nextgrid.com.
13. Children’s Privacy
Our Site is not directed to individuals under the age of thirteen (13) in the United States or under the age of sixteen (16) in the EEA/UK. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@nextgrid.com and we will promptly delete such information.
14. Security of Your Information
We implement reasonable and appropriate technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS (Transport Layer Security)
- Access controls limiting personal information to authorized personnel
- Regular review of our data collection, storage, and processing practices
No method of electronic transmission or storage is one hundred percent (100%) secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of any login credentials and for notifying us promptly of any unauthorized access.
15. Third-Party Websites and Links
Our Site may contain links to third-party websites, services, or content that are not owned or controlled by NextGrid. This Policy does not apply to such third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. We have no responsibility or liability for the privacy practices of third parties.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will update the “Effective Date” at the top of this Policy. We encourage you to review this Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the revised Policy.
17. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact as set forth above or at privacy@nextgrid.com.