In short
The New Energy Wire is a subscription publication with access for invited readers.
- We use your email and subscription status to provide access and send sign-in links and service notices.
- We store a sign-in credential and the address you use on this browser, together with your saved records and display preferences.
- Stripe Managed Payments handles purchases, with Link as merchant of record. We receive subscription identifiers and status, not full card details.
- We do not run advertising or third-party analytics, sell personal data, or send a marketing newsletter.
- Our hosting providers receive ordinary request logs. Published reporting can also contain professional information about people in the news.
1. Who is responsible for your data
The New Energy Wire is published by Colibri Holdings Ltd, a company registered in England and Wales under number 09741137, whose registered office is at 71 Queen Victoria Street, London EC4V 4BE, United Kingdom. Our VAT registration number is GB271861001.
- Data protection contact: hello@axiom.vc
- ICO registration: ZB415775
"AXIOM" is a brand, not a company. AXIOM, AXIOM Venture Capital and the AXIOM New Energy Wire are names under which Colibri Holdings Ltd publishes. They are not separate legal entities.
We are the controller for the personal data described here. We have not appointed a Data Protection Officer and are not required to; the person accountable is the director, and the address above reaches them.
Readers in the EEA. We have not appointed an EEA representative. Our earlier assessment concerned a publication without reader accounts; it does not establish an exemption for the subscription service. Questions and data-rights requests reach us at hello@axiom.vc. Your rights described below continue to apply.
2. What we collect, why, and on what lawful basis
2.1 Reading the Wire
| What | Why | Lawful basis |
|---|---|---|
| IP address, user-agent, the page requested, the time, the referring page | Server logs kept by our hosting provider. Security, abuse prevention, and knowing whether the site is up | Legitimate interests — running a website securely (Art. 6(1)(f)) |
Subscriber requests also carry an access credential so the relay can check your entitlement. We record subscription status, login-token and session hashes, expiry times and a limited browser user-agent for sessions. We do not use this information for advertising profiles.
| What | Why | Lawful basis |
|---|---|---|
| Email, subscription plan/status, Stripe customer and subscription identifiers | Provide and manage your subscription, sign-in and support | Performance of the contract (Art. 6(1)(b)) |
| Sign-in/session hashes, expiry and access/revocation records | Secure access and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Checkout confirmations, their timestamp and Terms version | Record what was agreed and handle disputes | Performance of the contract and legitimate interests |
The search box on the Wire runs entirely in your browser against data already downloaded with the page. What you type into it is never sent to us.
2.2 Writing to us
The Wire has two mailto: links — one for feedback, one to report a problem. If you use either, you send us an ordinary email.
| What | Why | Lawful basis |
|---|---|---|
| Your email address, your name if you give it, and whatever you write | To read it, answer it, and fix what you told us about | Legitimate interests — answering correspondence (Art. 6(1)(f)) |
We keep correspondence for as long as it is useful and then delete it (see section 6). We do not subscribe you to marketing. Sign-in and subscription notices are separate service messages.
2.3 Personal data inside the news
This is the part of the Wire that processes the most personal data, and it is not about you as a reader.
The Wire reports on the energy transition: companies, projects, financings, policy and the people who run and decide them. Reporting necessarily names people — a chief executive quoted in a trade publication, a minister announcing a scheme, an analyst whose research we cite.
| What | Why | Lawful basis |
|---|---|---|
| Names, roles, employers and publicly reported statements and actions of people in the energy sector | Journalism: reporting what has been published, and keeping a record of it | Legitimate interests (Art. 6(1)(f)), and the journalism exemption — Schedule 2, Part 5, paragraph 26 of the Data Protection Act 2018 |
Where we get it. From the 191 sources described in clause 6.2 of the Terms: trade publications, company newsrooms, government and regulator announcements, and research publications. We do not buy personal data, we do not scrape social networks for it, and we do not enrich it against third-party databases.
Our register holds organisations, not individuals. The register behind the Wire currently holds 96 organisations and 37 recorded claims. Its records describe companies — name, country, domain, regions, roles, technologies — and are not built around named individuals. People appear in the stories, as they do in any publication, rather than as entries in a database about them.
Your rights when you are in the news. Sections 7 and 8 apply, subject to the journalism exemption, which exists because reporting could not work if everyone written about could require their removal. We take corrections seriously and separately: clause 6.1 of the Terms is how to get something fixed, which is usually faster and more useful than a data protection request.
3. What we do not do
Stated positively, because the absence is the point:
- No advertising, and no advertising technology.
- No third-party analytics or advertising measurement.
- No advertising cookies, tracking pixels or fingerprinting. Essential access and chosen preferences use browser storage.
- No sale of personal data or disclosure to data brokers. Service providers receive the data needed for their tasks below.
- No automated decision-making with legal or similarly significant effects about any reader.
- No marketing newsletter. Full card details are handled on Stripe/Link, not by the Wire.
4. Cookies and what is stored on your device
The Wire uses localStorage for the requested sign-in and reader features:
| Entry | Purpose | Lifetime |
|---|---|---|
nrgw_acKey | Keep this browser signed in | Until sign-out or browser data is cleared; subscriber sessions expire on the server after 90 days |
nrgw_email | Remember the sign-in address | Until changed or browser data is cleared; signing out retains the remembered address |
new-energy-wire:saved:v1 | Records you choose to save | Until removed or browser data is cleared |
new-energy-wire:audience:v1, new-theme | Your audience and appearance choices | Until changed or browser data is cleared |
The Wire does not set advertising cookies. These entries support the features you request; we do not use them to follow you across websites. Stripe and Link operate their own checkout and account pages under their own privacy and cookie notices.
Do Not Track and Global Privacy Control. The Wire has no advertising or analytics tracking to disable. These signals do not turn off storage needed for sign-in or your chosen reader features.
5. Who else processes data for us, and where
| Provider | What they do | Personal data involved | Where processed |
|---|---|---|---|
| Render Services, Inc. (US) | Hosts the site and the relay | Server logs: IP address, user-agent, request | The relay runs in Frankfurt. The static site declares no region, so the provider's default applies and we treat it as US |
| Supabase, Inc. | Operator authentication and the subscriber, sign-in token, session and webhook event store | Email, entitlement and subscription identifiers; hashed credentials and session details | Ireland (eu-west-1) |
| Resend, Inc. | Sends verification codes, sign-in links and service notices, with open and click tracking disabled | Recipient email and message content, including a short-lived sign-in link | Sending region EU (Ireland); provider processing may also involve other locations |
| Stripe / Link | Managed Payments, merchant-of-record transactions, tax, billing and subscription management | Buyer and billing details, payment data supplied directly at Checkout, subscription details and consent record | Provider infrastructure and international processing under its privacy notice |
| DeepSeek | Generates and checks parts of the published text from source material | See §5.1 — published professional information, which can name people | People's Republic of China — a restricted transfer, see §5.1 |
| GitHub, Inc. (US) | Stores the repository the Wire is built from, including the published record | Names appearing in published material | US |
Stripe/Link also processes transaction data for its own payment, tax, fraud-prevention and legal obligations under its privacy notice. We remain responsible for the publication and the subscriber data we use to deliver it.
5.1 The model provider, stated plainly
Parts of the Wire's text are drafted and checked by a large language model. The provider is DeepSeek, called over HTTPS at api.deepseek.com.
Nothing about you is ever sent to it. Not your email, not your correspondence, not a server log, sign-in token, payment detail or subscriber record. Reader data is excluded from the model inputs used to produce the publication.
What is sent is published material. Headlines and extracts from articles other publications have already put out, and structured facts about organisations from our register. Where a person is named in it, they are named because a publication named them, in their professional capacity — a chief executive announcing a project, a minister launching a scheme, an analyst whose research is being cited. It is the same material a reader sees on the Wire with the link back to where it came from.
Where it goes, and under what law. DeepSeek's Open Platform terms are governed by the law of the People's Republic of China, with disputes heard where Hangzhou DeepSeek Artificial Intelligence Co., Ltd. is registered. DeepSeek's privacy policy describes collection, processing and storage of personal data in the People's Republic of China. The PRC has no UK adequacy decision, so this is a restricted transfer and we treat it as one.
What their terms do not say. Neither the Open Platform terms nor the privacy policy states a retention period for API inputs and outputs, or whether they may be used for training. The privacy policy does say personal data is used "to train and improve our technology" with a right to opt out — but it expressly excludes developer API processing from its scope: "The processing rules for Personal Data collected from end users when accessing downstream systems or applications developed by developers using our open platform services are not covered by this privacy policy." So the consumer-facing answer does not apply to us, and the API-facing answer is not published.
We tell you this rather than assert a guarantee we do not have.
We have not established a written API retention/training commitment or a completed transfer assessment for this processing. We do not represent those safeguards as already in place.
5.2 International transfers
International processing can require an adequacy decision or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses. The unresolved DeepSeek position is described above. Contact hello@axiom.vc for the documented arrangements for a particular provider; this notice does not assert that an unverified agreement or assessment has been completed.
6. How long we keep things
| What | How long |
|---|---|
| Server logs | A short fixed period set by our hosting plan, never more than 30 days. We do not extend it or copy the logs elsewhere |
| Subscriber and billing-support records | While needed to provide access, resolve disputes and satisfy applicable record-keeping obligations; contact us to request deletion or details |
| Sign-in and session records | Login links expire after 15 minutes and subscriber sessions after 90 days; expiry prevents reuse and does not itself assert immediate database deletion |
| Correspondence you send us | Up to 24 months after the matter is closed, then deleted |
| Corrections and complaints, and what we did about them | 6 years, because the point of a correction is that the record of it survives |
| Published material, including the register and the archive | Indefinitely. A wire whose archive could be quietly edited would not be worth reading — see clause 6.1 of the Terms |
7. Your rights
Under UK GDPR you may ask us to: give you a copy of your data; correct it; erase it; restrict or object to how we use it; and port it. You may object to processing based on legitimate interests at any time.
Where the journalism exemption applies — broadly, where complying would stop us publishing something in the public interest — some of these rights are limited. We will always tell you when we are relying on it, and why, rather than simply declining.
To exercise any of them, write to hello@axiom.vc. We answer within one month. There is no charge unless a request is manifestly unfounded or excessive.
Complaining. If we get it wrong, please tell us first — we would rather fix it. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), or to the supervisory authority where you live if that is in the EEA.
8. Security, and being honest about its limits
How access and data are protected is set out in clause 6.6 of the Terms. In summary: the site is served over HTTPS with a content security policy; the relay is protected and its reader and operator access is verified server-side. Subscriber sign-in links are single-use; server records hold hashes of login and session credentials. The active credential remains in your browser, so sign out on a shared device.
What we cannot promise. No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will tell the ICO within 72 hours of becoming aware and tell you without undue delay where the risk to you is high.
9. Changes to this policy
When this changes we update the version and the date at the top. Where a change materially affects you, we will say so on the Wire itself rather than relying on you to re-read this page. Previous versions are available on request.
*Questions about anything here: hello@axiom.vc.*
Free registration and enquiries
We use your email address to create and verify your account and send requested sign-in codes or links. We record the Terms version accepted and verification time. Codes and links expire after 15 minutes and can be used once. Free registration does not enrol you in marketing.
Plan enquiries are sent through Formspree, Inc. (United States) to hello@axiom.vc. The information is what you enter in the enquiry form: contact details, company, intended plan and message.