Privacy Notice

Who we are

Welsh Solar (registered office: Unit 14, Bridgend Industrial Estate, Bridgend CF31 3SH) is the data controller for any personal data you provide to us. Our ICO registration number is ZA123456. You can contact our Data Protection lead by email at or by post at the address above.

What data we collect

When you contact us, request a quote or use our services we may collect:

• Your name, address, email and phone number
• Property details: roof type, orientation, size, photographs
• Electricity usage data (when provided by you)
• Payment and finance details (collected by our regulated finance partners, not by us directly)
• Records of our communications with you (email, phone, site visit notes)
• System monitoring data – generation, consumption and battery state for installed systems

Why we collect it

We use your data for the following purposes:

• To respond to enquiries and provide quotes
• To design, install and commission your solar system
• To deliver warranty and aftercare services
• To submit MCS, HIES and DNO/G99 paperwork on your behalf
• To monitor your system performance and notify you of faults
• To provide ongoing service and maintenance
• To comply with our legal and regulatory obligations
• To send occasional updates about products and services that may interest you (only with your consent)

Legal basis

We process your personal data on the following legal bases under UK GDPR: performance of contract (for quotes, installations and aftercare); legal obligation (for MCS and HIES records); legitimate interest (for system monitoring and improving our service); and consent (for marketing communications).

Who we share it with

We share data only with parties who need it to deliver your installation or our service. These typically include: scaffolding contractors; electrical inspectors; your DNO (Distribution Network Operator); MCS and HIES certification bodies; HMRC where required; our finance partners (Novuna, Kandoo) where you opt for finance; and our IT and CRM providers under strict data-processing agreements.

We never sell your data and never share it for marketing purposes.

How long we keep it

We retain quote and enquiry data for two years from last contact. Installation records are kept for the lifetime of your installation plus seven years (a regulatory requirement). System monitoring data is kept for the duration of your monitoring agreement.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Request deletion of your data (subject to our regulatory retention obligations)
• Object to or restrict our processing
• Withdraw consent at any time
• Receive your data in a portable, machine-readable format
• Complain to the Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, please contact us at . We will respond within one month.

Cookies

Our website uses only essential cookies needed to operate the site and remember your preferences. We do not use analytics or advertising cookies. A small analytics package (Plausible or Fathom, both cookieless) may be used to count visitors anonymously.

Security

We store data on UK-based servers with industry-standard encryption at rest and in transit. Access is restricted to staff who need it. Our CRM provider holds ISO 27001 certification. We test our security annually and report any breaches to the ICO within 72 hours where required.

Changes to this notice

We may update this notice from time to time. The current version will always be available at /privacy.html. Material changes will be notified to existing customers by email.

International transfers and additional rights

Welsh Solar processes personal data within the United Kingdom and the European Economic Area. We do not routinely transfer your data outside these regions. If at any point we need to transfer personal data internationally, for example because a software supplier hosts services elsewhere, we will only do so where appropriate safeguards are in place under UK GDPR, such as the International Data Transfer Agreement or equivalent standard contractual clauses.

Children's data

Our services are aimed at homeowners, landlords, and businesses. We do not knowingly collect personal data from children under the age of sixteen. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Automated decision making

We do not use your personal data for any automated decision making or profiling that produces legal or similarly significant effects. All decisions about whether we can serve you, what system to recommend, and what price to quote are made by qualified members of our team.

How to contact our Data Protection lead

If you have any questions about this notice, want to exercise any of your rights, or wish to raise a concern about how we handle your personal data, please contact us by emailing info@welshsolar.co.uk or writing to the registered company address. We will respond within one calendar month and aim to resolve any concerns informally before they need to be escalated.

Complaints to the supervisory authority

You have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority for data protection. We would, however, appreciate the opportunity to address your concerns first, so please consider contacting us before going to the ICO. The ICO's contact details are available on their website at ico.org.uk.

Changes to this notice

We review this privacy notice regularly and update it to reflect changes in our practices, the services we offer, or the law. The version shown on this page is always the current one. If we make any material changes that affect how we use existing customers' personal data, we will notify you directly by email.