Privacy Policy

[COMPANY NAME] (“we”, “us”, “our”) operates [SITE NAME/DOMAIN], a free tool for UK homeowners to estimate the cost and savings of solar panels, batteries, EV charging, heat pumps and air conditioning, along with a paid “Deep Dive” report add-on.

We are the data controller for the personal data described in this policy.

Contact: [EMAIL ADDRESS]
Registered address: [ADDRESS]
Company number: [IF APPLICABLE]

• Account data: your email address, used solely to sign you in via a one-time “magic link” (we do not store or ask for a password).
• Property and usage data you provide: postcode/address, roof details, energy tariff rates, consumption figures, and the module selections you make. This is used to calculate your results and, if you choose to save a result, is stored against your account.
• Roof lookup data: if you use the roof lookup, your postcode is first converted to map coordinates (see postcodes.io in Section 5). Only those coordinates (never your postcode or address itself) are sent to Google's Solar API to retrieve roof and solar generation data. If you use the interactive map to point at your own roof, Google Maps also receives your IP address and the map area you're viewing, loaded directly in your browser. See Section 5 for exactly what each service receives.
• Payment data: if you purchase a Deep Dive report, payment is processed entirely by Stripe. We do not receive or store your card details. We retain a record of the transaction (amount, date, associated saved result) for accounting and tax purposes.
• Analytics data (only if you accept analytics cookies): we use Google Analytics to see how the site is used: pages viewed, device and browser type, and approximate location. It only runs if you accept analytics cookies on the cookie banner. See our Cookie policy.

• To provide the calculator and generate your results
• To let you save results to your account and view them later
• To process Deep Dive report purchases and deliver the report
• To send you transactional emails (magic link sign-in, purchase receipts/invoices). We do not send marketing emails unless you separately opt in.
• To monitor and improve the service

• Contract: processing needed to provide the service you've asked for (calculating results, managing your account, fulfilling a purchase)
• Consent: the magic-link sign-in itself, and any future marketing communications
• Legitimate interest: basic technical/security logging necessary to keep the service running safely

We use the following third-party services (sub-processors) to operate the site:

• Supabase

  Purpose: Account authentication (including sending your sign-in link), database (saved results, purchases)

  Data involved: Email, saved property/usage data, purchase records

• Stripe

  Purpose: Payment processing and receipts/invoices

  Data involved: Payment details (handled entirely by Stripe, not us)

• postcodes.io

  Purpose: Converts the postcode you enter into map coordinates, when you use the postcode roof lookup

  Data involved: Postcode

• Google (Solar API)

  Purpose: Roof/solar data lookup, when you use the postcode search

  Data involved: The map coordinates derived from your postcode (not the postcode itself)

• Google Maps

  Purpose: Displays the interactive satellite map when you use the roof lookup, loaded directly in your browser

  Data involved: Your IP address and the map area you're viewing

• Netlify

  Purpose: Hosts the site

  Data involved: Your IP address, in standard server logs

• Google Analytics

  Purpose: Measures how the site is used, only if you accept analytics cookies

  Data involved: Pages viewed, device and browser type, approximate location

We also use Resend, an email delivery service, but only for internal alerts to our own team. It does not process your personal data.

We do not sell your personal data. We do not share it with third parties for their own marketing purposes.

Some of the services above (including Google) may process data outside the UK/EEA. Where this happens, we rely on [transfer mechanism to be confirmed for each provider].

• Account and saved results: retained until you delete your account or ask us to delete them
• Purchase records: retained for [6 years / as required by UK tax law] for accounting purposes, even if you delete your account
• Roof lookup imagery: Deep Dive report images are generated on demand and not retained, per Google's Solar API terms.
• Roof lookup results: cached in server memory for up to 30 days against the specific location looked up (the postcode's centre, or the exact point you tapped on the map), and cleared whenever the site is redeployed. This is separate from the report image above and is not linked to your account unless you save a result.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”) by emailing us. We don't yet offer self-service account deletion, so this is handled manually, subject to our legitimate need to retain purchase records for tax purposes. We'll action deletion requests within one month, as required by UK GDPR.
• Request a portable copy of your data
• Object to certain processing
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we've mishandled your data

To exercise any of these rights, contact [EMAIL ADDRESS].

We only set Google Analytics cookies if you accept them on the cookie banner, and we don't use advertising cookies. Otherwise we only store what the site needs to work: your calculator answers in your browser, and sign-in cookies if you sign in. See our Cookie policy for exactly what's stored and for how long.

This service is not directed at children, and we do not knowingly collect data from anyone under 18.

We take reasonable technical measures to protect your data, including encryption in transit and database-level access controls restricting data to its owner. No method of transmission or storage is 100% secure.

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above.

Questions about this policy: [EMAIL ADDRESS]