Privacy Policy

1. Introduction

Schiofluav Solar ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

This policy applies to all information collected by Schiofluav Solar through our website at schiofluav.com, our services, and any related communications.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Property Information: Property address, property type, roof details, energy usage
• Financial Information: Energy bill amounts, budget preferences (no payment details stored)
• Communication Preferences: Preferred contact methods, marketing preferences
• Service Information: Solar system details, maintenance records, service history

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Technical Information: IP address, browser type, operating system, device information
• Usage Information: Pages visited, time spent on pages, click-through rates
• Cookie Information: As described in our Cookie Policy

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Providing solar consultation and assessment services
• Preparing and delivering personalized quotes
• Installing and maintaining solar energy systems
• Providing customer support and technical assistance
• Processing warranty claims and service requests

3.2 Communication

• Responding to your inquiries and requests
• Sending service-related communications
• Providing updates on your solar installation project
• Sending newsletters and educational content (with consent)

3.3 Business Operations

• Improving our services and website functionality
• Conducting market research and analysis
• Ensuring compliance with legal and regulatory requirements
• Protecting our business interests and preventing fraud

4. Legal Basis for Processing

Under UK GDPR, we process your personal information based on the following legal grounds:

• Consent: When you explicitly consent to processing (e.g., marketing communications)
• Contract: When processing is necessary for performing our services
• Legitimate Interests: When we have legitimate business interests that don't override your rights
• Legal Obligation: When required by law or regulation

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Website hosting and maintenance
• Email marketing and communication services
• Payment processing (where applicable)
• Customer relationship management
• Professional services (legal, accounting)

5.2 Business Partners

We may share information with:

• Solar equipment manufacturers for warranty purposes
• Certified subcontractors involved in installations
• Energy suppliers for Smart Export Guarantee applications

5.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal obligations
• Protect our rights and interests
• Ensure safety and security
• Prevent fraud or illegal activities

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Customer Records: Retained for 7 years after service completion
• Marketing Information: Until you withdraw consent or unsubscribe
• Website Analytics: Typically 26 months
• Legal Documentation: As required by applicable law

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection
• Regular backup and disaster recovery procedures

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

8.1 Right of Access

You can request confirmation of whether we process your personal data and access to that data.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure

You can request deletion of your personal data in certain circumstances.

8.4 Right to Restrict Processing

You can request limitation of processing in specific situations.

8.5 Right to Data Portability

You can request transfer of your data to another service provider.

8.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

You can withdraw consent at any time where processing is based on consent.

9. Exercising Your Rights

To exercise any of your rights, please contact us using the information provided in Section 13. We will respond to your request within one month of receipt.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. For detailed information about our use of cookies, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for significant changes (where appropriate)

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. International Data Transfers

We primarily process data within the UK. If we need to transfer your data outside the UK, we will ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

15. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

16. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will provide notice of such transfer and any changes to this Privacy Policy.