1. Introduction
No Upfront Solar ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, use our services, or interact with us in any way. We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Our registered address is Unit 288 Northlight Industries, Pendle Road, Brierfield, Nelson BB9 5FL. If you have any questions about this policy, please contact us at [email protected] or call 01282 501589.
2. Information We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide Directly
- Contact details: Full name, email address, telephone number, and postal address when you complete our quote form, callback request, or contact us directly.
- Property information: Property type, number of bedrooms, postcode, and approximate monthly electricity spend to assess your eligibility for our solar subscription plans.
- Communication records: Any correspondence you send to us via email, telephone, or our website forms.
2.2 Information Collected Automatically
- Technical data: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage data: Pages visited, time spent on each page, referral source, and navigation paths through our website.
- Cookie data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for full details).
3. How We Use Your Information
We use your personal data for the following purposes:
- Service delivery: To assess your eligibility, prepare personalised solar quotes, arrange site surveys, and manage the installation process.
- Communication: To respond to your enquiries, provide updates on your application, and send appointment confirmations.
- Marketing: With your explicit consent, to send you information about our products, services, promotions, and industry news. You may withdraw consent at any time.
- Website improvement: To analyse usage patterns, diagnose technical issues, and enhance the functionality and user experience of our website.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
4. Legal Basis for Processing
We process your personal data under the following legal bases as defined by the UK GDPR:
- Consent: Where you have given clear consent for us to process your data for a specific purpose, such as marketing communications.
- Contractual necessity: Where processing is necessary to perform a contract with you or to take pre-contractual steps at your request, such as preparing a solar quote.
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights. This includes improving our services and website functionality.
- Legal obligation: Where processing is necessary to comply with a legal requirement.
5. Data Sharing
We may share your personal data with the following categories of third parties:
- Installation partners: MCS-certified solar installation engineers who carry out the physical installation at your property.
- Finance providers: Where applicable, third-party finance companies that administer solar subscription agreements.
- IT service providers: Companies that provide hosting, email, CRM, and analytics services on our behalf.
- Professional advisers: Lawyers, accountants, and insurers where necessary for the operation of our business.
- Regulatory bodies: Government agencies or regulators where required by law.
We do not sell your personal data to any third party. All third-party processors are contractually bound to handle your data securely and in accordance with our instructions.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:
- Quote enquiries: Retained for up to 24 months from the date of your last interaction if no contract is entered into.
- Customer records: Retained for the duration of your subscription agreement plus 7 years to comply with financial and tax regulations.
- Marketing data: Retained until you withdraw your consent or unsubscribe.
- Website analytics: Aggregated and anonymised data may be retained indefinitely for statistical analysis.
7. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of any inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data in certain circumstances.
- Right to restrict processing: You may request that we limit how we use your data.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, access controls, and regular security assessments.
9. International Transfers
Your personal data is primarily stored and processed within the United Kingdom. In the event that data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the Information Commissioner's Office (ICO).
10. Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). You can contact the ICO at ico.org.uk or by calling 0303 123 1113.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.