PRIVACY POLICY

Last updated: 20 July 2025

PRIVACY POLICY

Last updated: 20 July 2025

1. Plain‑English summary (the short version)

We collect the details you type into our enquiry form so we can introduce you to a suitably qualified solar‑panel installer in or near Edinburgh. We share your enquiry only with that installer, keep a limited record for a short time, and never sell or publish your information. You can tell us to stop, correct, or erase your data whenever you like. The legal detail below explains exactly what we collect, why, and how you can exercise your rights.

2. Who we are

ReachAI Ltd ("ReachAI", "we", "us", "our") operates the website Solar Panels Edinburgh at www.solarpanelsedinburgh.pro.

  • Company number: 15123686

  • Registered office: 3 Paddock Close, Worcester Park, England, KT4 7LY

  • Email for privacy queries: [email protected]

We are the controller of the personal data you provide on this Site. Once your details are passed to an installer, that installer becomes an independent controller of any further communications.

We are not required to appoint a statutory Data Protection Officer under Article 37 UK GDPR.

3. What personal data we collect

When you submit our enquiry form we collect:

  • Full name

  • Email address

  • Phone number

  • Home postcode

  • Street address

  • Property ownership status

  • Property type

  • Marketing‑consent disclaimer

We also store (server‑side) your IP address and the date/time of submission for security and audit purposes.

We do not intentionally collect any special‑category data (e.g. health information) or data about children; the service is aimed at UK residents aged 18 or over.

4. How we use your data and our lawful basis

Purpose

Lawful basis

Explanation

Forwarding your enquiry and contact details to a single vetted solar installer so they can give you a quote

Consent – Article 6(1)(a) UK GDPR

You provide your consent after reading the disclaimer before pressing the submit button on the lead form, granting us permission to share your details for that specific purpose.

Retaining a minimal record of each lead for fraud‑prevention, dispute handling and internal audit

Legitimate interests – Article 6(1)(f) UK GDPR

We have a legitimate interest in demonstrating service quality, preventing duplicate or fraudulent submissions and responding to any complaints. We balance this interest against your rights by keeping the data for a strictly limited period (see Section 7).

Server logs and essential cookies necessary to make the Site work

Legitimate interests – Article 6(1)(f)

It is in our interest – and yours – that the Site operates securely and efficiently.

We do not use your data for our own marketing, profiling or automated decision‑making.

5. Who we share your data with

We share your information with:

  • One local solar‑panel installer that meets our vetting criteria (Certified, public liability insurance, positive customer feedback).

  • Processors who provide infrastructure and support services to ReachAI:
    - GoHighLevel – CRM, web hosting and form processing

All processors act under our instructions and are bound by a written contract under Article 28 UK GDPR.

We will never sell your personal data nor disclose it to any other third party unless we are legally obliged to do so.

6. International transfers

Your data is stored and processed on GoHighLevel’s servers located in the United States. Transfers outside the UK/EEA are protected by:

  • the International Data Transfer Addendum (UK Addendum) to the EU Standard Contractual Clauses (SCCs); and

  • a completed Transfer Risk Assessment showing that the data receives an equivalent level of protection.

7. How long we keep your data

We keep:

  • the full lead details for 12 months after we pass them to the installer; and then

  • an anonymised record (postcode district + timestamp) for statistical reporting.

8. Cookies and similar technology

We use strictly necessary cookies only:

Cookie name

Purpose

Expiry

spb_session

Maintains session state while you complete the form

End of session

cf_clearance

Cloudflare security / bot‑challenge token

30 minutes

No analytics, advertising or third‑party tracking cookies are set.

9. How we protect your data

We take appropriate technical and organisational measures, including:

  • SSL/TLS encryption in transit

  • AES‑256 encryption at rest on all production databases

  • Daily encrypted backups stored in AWS global infrastructure

10. Your rights

Under the UK GDPR you can:

  • Request a copy of the personal data we hold about you (right of access)

  • Ask us to correct inaccurate data (right to rectification)

  • Ask us to delete your data (right to erasure)

  • Object to or restrict our processing (rights to object & restriction)

  • Receive your data in a portable format (right to data portability)

To exercise any of these rights, email [email protected]. We will respond within one calendar month.

11. Automated decision‑making and profiling

We do not use your personal data for automated decision‑making or profiling within the meaning of Article 22 UK GDPR.

12. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  • ico.org.uk/make-a-complaint

13. Changes to this policy

We may update this privacy notice from time to time to reflect changes in the law or our practices. Any material changes will be sign‑posted on the Site. The “Last updated” date at the top tells you when we last revised the notice.

1. Plain‑English summary (the short version)

We collect the details you type into our enquiry form so we can introduce you to a suitably qualified solar‑panel installer in or near Edinburgh. We share your enquiry only with that installer, keep a limited record for a short time, and never sell or publish your information. You can tell us to stop, correct, or erase your data whenever you like. The legal detail below explains exactly what we collect, why, and how you can exercise your rights.

2. Who we are

ReachAI Ltd ("ReachAI", "we", "us", "our") operates the website Solar Panels Edinburgh at www.solarpanelsedinburgh.pro.

  • Company number: 15123686

  • Registered office: 3 Paddock Close, Worcester Park, England, KT4 7LY

  • Email for privacy queries: [email protected]

We are the controller of the personal data you provide on this Site. Once your details are passed to an installer, that installer becomes an independent controller of any further communications.

We are not required to appoint a statutory Data Protection Officer under Article 37 UK GDPR.

3. What personal data we collect

When you submit our enquiry form we collect:

  • Full name

  • Email address

  • Phone number

  • Home postcode

  • Street address

  • Property ownership status

  • Property type

  • Marketing‑consent disclaimer

We also store (server‑side) your IP address and the date/time of submission for security and audit purposes.

We do not intentionally collect any special‑category data (e.g. health information) or data about children; the service is aimed at UK residents aged 18 or over.

4. How we use your data and our lawful basis

Number 1

Purpose - Forwarding your enquiry and contact details to a single vetted solar installer so they can give you a quote

Consent – Article 6(1)(a) UK GDPR

Explanation – You provide your consent after reading the disclaimer before pressing the submit button on the lead form, granting us permission to share your details for that specific purpose.

Number 2

Purpose - Retaining a minimal record of each lead for fraud‑prevention, dispute handling and internal audit

Consent – Article 6(1)(f) UK GDPR

Explanation – We have a legitimate interest in demonstrating service quality, preventing duplicate or fraudulent submissions and responding to any complaints. We balance this interest against your rights by keeping the data for a strictly limited period (see Section 7).

Number 3

Purpose - Server logs and essential cookies necessary to make the Site work

Consent – Article 6(1)(f)

Explanation – It is in our interest – and yours – that the Site operates securely and efficiently.

We do not use your data for our own marketing, profiling or automated decision‑making.

5. Who we share your data with

We share your information with:

  • One local solar‑panel installer that meets our vetting criteria (Certified, public liability insurance, positive customer feedback).

  • Processors who provide infrastructure and support services to ReachAI:
    - GoHighLevel – CRM, web hosting and form processing

All processors act under our instructions and are bound by a written contract under Article 28 UK GDPR.

We will never sell your personal data nor disclose it to any other third party unless we are legally obliged to do so.

6. International transfers

Your data is stored and processed on GoHighLevel’s servers located in the United States. Transfers outside the UK/EEA are protected by:

  • the International Data Transfer Addendum (UK Addendum) to the EU Standard Contractual Clauses (SCCs); and

  • a completed Transfer Risk Assessment showing that the data receives an equivalent level of protection.

7. How long we keep your data

We keep:

  • the full lead details for 12 months after we pass them to the installer; and then

  • an anonymised record (postcode district + timestamp) for statistical reporting.

8. Cookies and similar technology

We use strictly necessary cookies only:

Cookie 1

Cookie name – spb_session

Purpose – Maintains session state while you complete the form

Expiry – End of session

Cookie 2

Cookie name – cf_clearance

Purpose – Cloudflare security / bot‑challenge token

Expiry – 30 minutes

No analytics, advertising or third‑party tracking cookies are set.

9. How we protect your data

We take appropriate technical and organisational measures, including:

  • SSL/TLS encryption in transit

  • AES‑256 encryption at rest on all production databases

  • Daily encrypted backups stored in AWS global infrastructure

10. Your rights

Under the UK GDPR you can:

  • Request a copy of the personal data we hold about you (right of access)

  • Ask us to correct inaccurate data (right to rectification)

  • Ask us to delete your data (right to erasure)

  • Object to or restrict our processing (rights to object & restriction)

  • Receive your data in a portable format (right to data portability)

To exercise any of these rights, email [email protected]. We will respond within one calendar month.

11. Automated decision‑making and profiling

We do not use your personal data for automated decision‑making or profiling within the meaning of Article 22 UK GDPR.

12. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

  • Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  • ico.org.uk/make-a-complaint

13. Changes to this policy

We may update this privacy notice from time to time to reflect changes in the law or our practices. Any material changes will be sign‑posted on the Site. The “Last updated” date at the top tells you when we last revised the notice.

Solar Panels Edinburgh is operated by ReachAI Ltd. Registered in England and Wales. Company No.15123686.
View our privacy policy and terms of service for more details.

Solar Panels Edinburgh. Copyright 2025. All Rights Reserved.

Solar Panels Edinburgh is operated by ReachAI Ltd. Registered in England and Wales. Company No.15123686.
View our privacy policy and terms of service for more details.

Solar Panels Edinburgh. Copyright 2025. All Rights Reserved.