Privacy policy

Last updated: 2 May 2026

Solar Panels UK ("we", "us", "our") operates the website solarpanels-uk.co.uk (the "Site"). This policy explains how we collect, use and protect your personal data when you use our Site. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are (data controller)

For the purpose of UK GDPR, the data controller is Solar Panels UK. Contact: [email protected].

2. What we collect

When you use our quote form we collect:

• Property details: property type, roof type, monthly electricity bill range, postcode
• Contact details: full name, email address, UK phone number
• Technical metadata: page source URL, user agent (browser), referrer URL, timestamps for each form step

We do not collect special-category data (health, biometric, etc.). We do not collect payment information.

3. Progressive form-data saving

Our quote form saves your responses to our database at the end of every step, not only when you click final submit. This means that if you complete steps 1–4 and abandon the form, we will still hold the data you provided up to that point. If this is not what you want, do not start the form.

Partial form data is stored under the same retention and rights regime as completed submissions — see sections 6 and 7 below.

4. Lawful basis

We process your personal data on the following lawful bases:

• Consent (Art. 6(1)(a) UK GDPR): when you submit the quote form, you consent to us passing your details to an MCS-certified installer covering your postcode.
• Legitimate interest (Art. 6(1)(f)): for fraud prevention, site security and basic analytics. Balanced against your rights and freedoms.

5. Who we share data with

We share your contact and property details with:

• The MCS-certified installer matched to your postcode — so they can contact you about your quote.
• Google Cloud / Firebase (Google Ireland Limited): our database processor. Form data is stored in Google Cloud Firestore, hosted in the EU. Google's role is purely as a data processor under our instructions; they do not access your data for their own purposes. See Firebase privacy.

We do not sell your data to data brokers or list-buyers. We do not share with multiple competing installers without your explicit opt-in.

6. International transfers

Firestore data is stored in EU (Frankfurt) by default. Google may transfer aggregated or de-identified data to the US for security and platform operations under the EU-US Data Privacy Framework / UK Extension.

7. Retention

We retain quote data for 24 months from your last interaction. After that, it is deleted unless we are legally required to keep it longer (e.g. for tax records or active legal claims).

8. Your rights under UK GDPR

You have the right to:

• Access the data we hold about you
• Have inaccurate data corrected
• Have your data deleted ("right to erasure")
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time

To exercise any of these, email [email protected]. We will respond within one calendar month.

9. Cookies

We use a small number of cookies — see our cookie policy for the full list and how to control them.

10. Security

Form submissions travel over TLS (HTTPS) and are stored in Google Cloud Firestore with Google's standard encryption-at-rest. Access to the database is restricted to authorised personnel via authenticated admin tooling.

11. Complaints

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. We'd appreciate the chance to address your concern first — email us at [email protected].

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the Site for at least 14 days.