1. Who we are

Mr Solar Ltd is the controller of personal information covered by this notice when we decide how and why that information is used. We provide solar PV, battery storage, electrical, EV charging, servicing, repair, monitoring and related renewable-energy services.

This notice applies to customers, prospective customers, website visitors, people who contact us, owners of systems we service or repair, suppliers and other business contacts.

2. Personal information we may collect

Depending on how you interact with us, this may include:

• Identity and contact information: name, postal address, installation address, email address and telephone number.
• Property and survey information: postcode, property type, roof details, photographs, site plans, access information and information needed to design or inspect a system.
• Energy and technical information: electricity consumption, tariff information you provide, meter details, MPAN where needed, inverter/battery/panel details, serial numbers, generation data, fault codes, monitoring screenshots and system logs.
• Quotation, contract and customer information: enquiries, quotations, orders, contracts, installation records, service history, warranty information and communications.
• Financial and transaction information: invoices, payment status, refunds and accounting records. Payment providers may process payment-card or bank details directly.
• Communications: emails, website forms, letters, complaint records, call notes, messages, photographs and information you choose to send us.
• Website and device information: IP address, browser/device details, cookie identifiers, security logs, pages viewed and similar technical information where the site or its providers collect it.
• Marketing preferences: whether you have asked to receive or not receive particular marketing communications.

Special category information

We do not normally need information about health, ethnicity, religion or other special category information. If you voluntarily provide information of this type because it is genuinely relevant to access, vulnerability, safety or another specific need, we will only use it where there is a lawful reason to do so and will limit its use to what is necessary.

3. Where we get personal information from

Most information comes directly from you, for example when you telephone, email, complete a form, request a quotation, buy a product, book a service or become a customer.

We may also receive relevant information from:

• another owner, landlord, tenant or authorised representative involved with the property;
• your previous installer or service provider where you ask us to take over a system;
• equipment manufacturers and monitoring-platform providers;
• electricity network operators, energy suppliers or export-tariff providers where needed for an application or support request;
• MCS, NAPIT, HIES, TrustMark or other certification/consumer-protection bodies where relevant;
• payment, finance, insurance or professional advisers where relevant to your transaction or claim;
• publicly available sources where this is necessary for a legitimate business purpose.

4. Why we use your information and our lawful bases

Where we rely on legitimate interests, we consider the purpose, necessity and effect on your rights. You can object to processing based on legitimate interests in appropriate circumstances.

5. Marketing communications

We may send relevant marketing where you have consented, or where the law permits us to contact an existing customer about similar products or services and you were given a clear opportunity to opt out. We will identify ourselves and provide a simple way to unsubscribe from electronic marketing.

6. Who we may share personal information with

We only share information where there is a genuine business, contractual or legal need. Recipients may include:

• Mr Solar employees, engineers and authorised contractors;
• equipment suppliers, manufacturers and warranty providers;
• scaffolding, roofing, electrical and specialist subcontractors involved in your project;
• MCS, NAPIT, HIES, TrustMark and other certification or consumer-protection bodies where applicable;
• Distribution Network Operators, electricity suppliers, SEG/export providers and metering organisations where needed;
• payment processors, finance providers and banks where relevant;
• website hosting, email, cloud, CRM, security, backup and other IT service providers;
• analytics, mapping, anti-spam, review, calculator, chat or similar website-service providers where enabled;
• accountants, auditors, insurers, legal advisers and debt-recovery providers;
• regulators, courts, law-enforcement agencies or other authorities where disclosure is required or permitted by law.

Some recipients act as our processors and may only use information on our instructions. Others, such as certain manufacturers, certification bodies, network operators, finance providers or regulators, may act as independent controllers and provide their own privacy information.

We do not sell your personal information.

7. International transfers

Some technology, cloud, email, analytics, support or software providers may process information outside the UK. Where a restricted international transfer occurs, we use an available lawful transfer mechanism and appropriate safeguards as required by UK data protection law.

Depending on the provider and destination, this may include UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to approved EU Standard Contractual Clauses, the UK Extension to the EU-US Data Privacy Framework where applicable, or another legally permitted safeguard.

You can contact us if you want more information about the safeguards relevant to a particular transfer.

8. Cookies and similar technologies

Our website may use cookies, pixels, scripts, local storage and similar technologies for necessary website operation, security, preferences, analytics and embedded third-party services.

Depending on the features currently enabled, services may include technologies connected with:

• WordPress and WooCommerce functionality;
• Google Analytics and/or Google Tag Manager;
• Google reCAPTCHA or similar anti-spam/security services;
• Google Maps or other embedded mapping;
• Trustpilot, Trustindex or embedded customer-review services;
• solar calculators or quotation tools such as Solar Wizard;
• chat, AI-assistance or customer-support tools where enabled.

Strictly necessary technologies may operate without consent where the law permits. For non-essential technologies, we obtain consent where required and you should be able to accept, reject or change those choices through the website’s cookie controls.

Third-party services may collect technical information such as IP address, browser/device data and interaction information. Their own privacy notices may also apply.

9. AI, chat and automated processing

Where an AI-assisted chat or similar tool is available on the website, information you type into the tool may be processed by the technology providers configured to deliver that service. Do not submit passwords, payment-card details or unnecessary sensitive information through a chatbot.

Mr Solar does not normally make decisions about customers solely by automated processing where the decision has legal or similarly significant effects. If we introduce such processing, we will give appropriate information about the decision-making and the safeguards available to you.

10. Embedded content and links

Our pages may include videos, maps, reviews, images, calculators or other content supplied by third parties. Loading or interacting with embedded content may allow that third party to receive information about your device or interaction. External websites are responsible for their own privacy practices and we encourage you to review their notices.

11. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including contractual, warranty, safety, accounting, regulatory and legal-claims requirements.

We may retain information for longer where required by law, where there is an active dispute, or where it is reasonably needed to establish, exercise or defend legal rights.

12. How we protect information

We use proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration or disclosure. These may include access controls, passwords and account security, secure systems, backups, staff procedures and appropriate arrangements with service providers.

No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess it and take the notification steps required by law.

13. Children

Our solar, battery and electrical services are not directed at children and we do not knowingly seek to collect children’s personal information for marketing. Where a website interaction may involve a child, we will take account of the child’s age, understanding and best interests when deciding how personal information should be used.

14. Your data protection rights

Depending on the circumstances and lawful basis, your rights may include the right to:

• ask for access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask for information to be erased in circumstances where the right applies;
• ask us to restrict particular processing;
• object to processing based on legitimate interests;
• object at any time to the use of your information for direct marketing;
• receive certain information in a portable format where the right to data portability applies;
• withdraw consent at any time where consent is the basis for processing, without affecting processing already carried out lawfully;
• receive safeguards relating to qualifying automated decisions where applicable.

Rights are not absolute and exemptions can apply. We may need enough information to confirm your identity and locate the relevant records. We normally respond within the time period required by law.

To exercise a right, use our Contact Us page and state that your message is a data protection request.

15. Data protection complaints

If you are unhappy with the way we have collected, used, stored, shared or otherwise handled your personal information, please raise a data protection complaint with us first so we have an opportunity to investigate and resolve it.

16. Changes to this notice

We may update this privacy notice when our services, website technologies, suppliers or legal requirements change. The current version will be published on this page and the “last updated” date at the top will be changed.