1. Who We Are

Home Solar Direct ("we", "us", "our") operates the installer portal at app.homesolardirect.co.uk and the associated website at homesolardirect.co.uk. We are the data controller for the personal data we collect through this platform.

For any privacy-related queries, contact us at [email protected].

2. Data We Collect

When you register and use the platform, we collect the following information:

• Account information: Business name, email address, and phone number provided at registration
• Profile information: Accreditation schemes and service categories you select
• Postcode data: The postcode areas you register for and your subscription status
• Activity data: Login history, postcode registration requests, change requests, and other actions taken within the portal
• Technical data: IP address, browser type, and device information collected automatically when you use the platform
• Communications: Any correspondence you send to us via email

3. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your installer account
• To match your postcode registrations with customer enquiries and route leads to you
• To send you customer enquiry notifications and platform communications
• To process and manage your postcode registrations, switches, and change requests
• To verify your accreditations and eligibility to use the platform
• To improve and develop the platform and our services
• To comply with our legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to provide the services you have registered for
• Legitimate interests: To operate and improve the platform, prevent fraud, and maintain security
• Legal obligation: Where processing is required by law

5. Data Sharing

We share your data in the following circumstances:

• Customer enquiries: When a customer makes an enquiry in your registered postcode area, we will share your business name and contact details with that customer so they can get in touch with you directly
• Service providers: We use third-party services to operate the platform including hosting providers and payment processors. These providers process data on our behalf and are bound by appropriate data processing agreements
• Legal requirements: We may disclose data where required by law or to protect our rights

We do not sell your personal data to third parties.

6. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will retain certain records for up to 7 years for legal and accounting purposes, after which they will be securely deleted. Activity logs are retained for 12 months.

7. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

The installer portal uses a session cookie to keep you logged in during your visit. This cookie is essential for the platform to function and is deleted when you sign out or close your browser. We do not use tracking or advertising cookies on the portal.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Passwords are stored using industry-standard bcrypt hashing. Access to personal data is restricted to authorised personnel only.

10. Third-Party Links

The platform may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page indicates when the policy was last revised.

12. Contact Us

For any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].

Home Solar Direct is a trading name registered in England and Wales.