Last Updated: January 1, 2025
EllenaCat Solar Limited ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ellenaccat.com or use our services.
1. Information We Collect
Personal Information
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, postal address
- Property Information: Property details, roof specifications, energy usage data
- Financial Information: Information needed for quotes, financing, and payment processing
- Technical Information: IP address, browser type, operating system, device information
- Usage Information: How you interact with our website and services
Information We Collect Automatically
When you visit our website, we automatically collect certain information:
- Log data (IP address, browser type, pages visited)
- Device information (device type, operating system, screen resolution)
- Usage patterns (time spent on pages, click patterns)
- Referral sources (how you found our website)
2. How We Use Your Information
We use your personal information for the following purposes:
Service Provision
- Providing solar panel installation and maintenance services
- Conducting site surveys and energy assessments
- Preparing quotes and proposals
- Processing orders and managing installations
- Providing customer support and after-sales service
Communication
- Responding to inquiries and requests
- Sending appointment confirmations and reminders
- Providing project updates and installation progress
- Sending newsletters and marketing communications (with consent)
- Notifying you of service updates or changes
Business Operations
- Managing our business operations and administration
- Conducting market research and analysis
- Improving our website and services
- Ensuring compliance with legal obligations
- Protecting against fraud and security threats
3. Legal Basis for Processing
Under UK GDPR, we process your personal information based on the following legal grounds:
- Contract: To perform our contractual obligations to you
- Legitimate Interests: For our legitimate business interests, such as improving our services
- Consent: Where you have given us specific consent (e.g., for marketing communications)
- Legal Obligation: To comply with legal requirements
4. Information Sharing and Disclosure
We may share your information with the following parties:
Service Providers
- Installation contractors and technicians
- Equipment suppliers and manufacturers
- Financial service providers for payment processing
- IT service providers for website hosting and maintenance
- Professional advisors (lawyers, accountants, insurers)
Regulatory Bodies
- MCS (Microgeneration Certification Scheme) certification bodies
- Local authorities and planning departments
- Energy suppliers and grid operators
- Government agencies as required by law
Other Disclosures
We may also disclose your information:
- To protect our rights, property, or safety
- To investigate potential fraud or security issues
- In connection with a business transfer or acquisition
- As required by law or court order
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods
- Customer records: 7 years after contract completion (for warranty and tax purposes)
- Marketing data: Until you withdraw consent or 3 years from last interaction
- Website analytics: 26 months from collection
- Financial records: 7 years as required by law
6. Your Rights
Under UK GDPR, you have the following rights regarding your personal information:
Access and Rectification
- Right of Access: Request a copy of your personal information
- Right of Rectification: Correct inaccurate or incomplete information
- Right to Update: Keep your information current
Deletion and Restriction
- Right to Erasure: Request deletion of your personal information
- Right to Restrict Processing: Limit how we use your information
- Right to Object: Object to processing based on legitimate interests
Portability and Consent
- Right to Data Portability: Receive your data in a structured format
- Right to Withdraw Consent: Withdraw consent for marketing communications
- Right to Lodge Complaints: Complain to the Information Commissioner's Office
7. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. Please refer to our Cookie Policy for detailed information about:
- Types of cookies we use
- How to manage cookie preferences
- Third-party cookies and analytics
- Your choices regarding cookies
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
Technical Measures
- SSL/TLS encryption for data transmission
- Secure servers and databases
- Regular security updates and patches
- Access controls and authentication
- Regular security assessments
Organizational Measures
- Staff training on data protection
- Access controls and authorization procedures
- Regular review of data processing activities
- Incident response procedures
- Vendor security assessments
9. International Data Transfers
We primarily process your data within the UK. If we transfer your information outside the UK, we ensure appropriate safeguards are in place:
- Adequacy decisions by the UK government
- Standard contractual clauses approved by the UK government
- Binding corporate rules where applicable
- Certification schemes and codes of conduct
10. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a child, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on our website
- Update the "Last Updated" date
- Notify you of significant changes via email or website notice
- Obtain your consent for material changes that affect your rights
12. Contact Information
For questions about this Privacy Policy or to exercise your rights, please contact us:
EllenaCat Solar Limited
Regulatory Authority
If you have concerns about our data processing practices, you can contact the Information Commissioner's Office:
- Website: ico.org.uk
- Phone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the new owner. We will provide notice of any such transfer and inform you of your choices regarding your information.
15. Compliance and Monitoring
We regularly review our privacy practices to ensure compliance with applicable laws and regulations. This includes:
- Regular privacy impact assessments
- Staff training on data protection
- Monitoring of data processing activities
- Review of third-party data processing agreements
- Incident response and breach notification procedures
By using our website or services, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.