Legal
Privacy policy
1. Introduction
Custom Solar PV Installers UK (“we,” “our,” “us”) respects your privacy and is committed to protecting your personal data. This GDPR-specific privacy policy explains how we collect, process, store, and protect your personal data, as well as your rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.
2. Data controller information
Custom Solar PV Installers UK is the data controller for the personal data collected via our website and services. For more details, contact us.
Company name: Custom Solar PV Installers UK
Contact: Contact page
3. Data we collect
We may collect and process the following types of personal data:
- Identity data: name, title, and company information.
- Contact data: email address, phone number, and postal address.
- Marketing preferences: opt-in and opt-out details.
- Technical data: IP address, browser type, operating system, and cookies.
- Usage data: information about how you interact with our website and services.
- Communication data: records of emails, calls, or messages exchanged with us.
We do not collect sensitive personal data (e.g., race, religion, health data).
4. How we collect data
We collect personal data through:
- Website forms: when you fill out forms on our website or landing pages.
- Direct communications: emails, phone calls, or live chat.
- Cookies and analytics tools: automated technologies that monitor usage patterns.
- Third-party platforms: CRM systems or marketing platforms where data has been legally collected.
5. Legal bases for processing data
We process personal data under the following legal bases:
- Consent: you have given clear consent for us to process your data for marketing purposes.
- Contract performance: data processing is necessary to deliver the services you requested.
- Legitimate interests: we use your data to improve our services or respond to enquiries, provided this does not override your rights.
- Legal obligation: compliance with legal requirements such as tax or fraud prevention.
6. How we use your data
We use your personal data to:
- Respond to enquiries and provide requested services.
- Deliver marketing campaigns and updates about our services.
- Optimise website performance and user experience.
- Analyse trends for improving our marketing strategies.
- Comply with legal and regulatory obligations.
7. Sharing your data
We may share your data with:
- Installation partners and suppliers: trusted, accredited partners (such as equipment suppliers and your local network operator) where needed to survey, install or register your system.
- Third-party processors: CRM providers, email marketing tools, and analytics platforms, which process data on our behalf.
- Legal authorities: where required by law for fraud prevention or compliance purposes.
All third-party processors are GDPR-compliant and contractually bound to protect your data.
We do not sell personal data to any other third parties.
8. International data transfers
We do not transfer data outside the UK or the European Economic Area (EEA).
9. Data retention
We store personal data:
- For as long as necessary to fulfil the purposes outlined in this policy.
- Until you request its deletion.
- As required by law for record-keeping purposes.
10. Your rights under GDPR
You have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure (right to be forgotten): request the deletion of your data.
- Restriction: limit how we process your data in certain situations.
- Portability: receive your data in a structured format or transfer it to another provider.
- Objection: object to data processing, especially for direct marketing.
- Withdraw consent: withdraw consent at any time without affecting prior processing.
To exercise any of these rights, please use our contact form.
11. Data security
We implement technical and organisational measures to protect your personal data, including:
- Encrypted communications and secure servers.
- Access controls and staff training on data protection.
- Regular security audits and monitoring systems.
12. Data breach procedures
In the event of a data breach:
- We will assess the impact and risk of the breach.
- Notify affected individuals if required by law.
- Inform the Information Commissioner’s Office (ICO) within 72 hours, if necessary.
- Implement corrective actions to prevent future breaches.
13. Cookies and tracking technologies
We use cookies to:
- Monitor website traffic and user behaviour.
- Improve website functionality and personalise experiences.
- Enable targeted advertising.
You can manage cookie preferences through your browser settings.
14. Complaints
If you believe we have mishandled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
We encourage you to contact us first to resolve any concerns.
15. Policy updates
We may update this policy from time to time to reflect changes in legal requirements or our practices. Updates will be posted on this page, and we recommend reviewing it periodically.
16. Contact us
If you have any questions about this GDPR policy, please contact us.
