Privacy Policy

D & R Energy Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This policy sets out how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller: D & R Energy Ltd, Company No. 13903578
Registered Address: A&W Buildings, Newfoundland Way, Portishead, Somerset, BS20 7DF
Email: sales@drenergyltd.co.uk
Website: https://drenergyltd.co.uk

1. What Data We Collect

We may collect and process the following personal data:

• Identity data: your name, title, and address
• Contact data: your email address, telephone number, and postal address
• Property data: details about your property relevant to solar panel installation, including roof type, orientation, and energy usage
• Financial data: payment details necessary to process transactions for our services
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform when you visit our website
• Usage data: information about how you use our website and services
• Communication data: records of correspondence if you contact us, including emails, phone calls, and contact form submissions

2. How We Use Your Data

We use your personal data for the following purposes:

• To provide quotations for solar panel, battery storage, and EV charger installations
• To carry out our obligations arising from contracts entered into between you and us
• To process payments and manage your account
• To communicate with you about your installation, including scheduling surveys and installation dates
• To register your installation with the MCS (Microgeneration Certification Scheme) and relevant DNO (Distribution Network Operator)
• To provide after-sales support and warranty services
• To improve our website, products, and services
• To comply with legal and regulatory obligations

3. Legal Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

• Contract: processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., providing a quotation)
• Legitimate interests: processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your rights
• Legal obligation: processing is necessary for compliance with a legal obligation (e.g., MCS registration, building regulations, tax records)
• Consent: where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications

4. Data Sharing

We may share your personal data with the following categories of third parties where necessary:

• MCS (Microgeneration Certification Scheme): to register your installation as required by our certification
• Distribution Network Operators (DNOs): to apply for grid connection on your behalf
• Product manufacturers: to register product warranties
• Payment processors: to process secure payments
• Scaffolding and subcontractors: where required for your installation, limited to the information needed to carry out the work
• HMRC and regulatory authorities: where required by law
• Professional advisors: including accountants and legal advisors where necessary

We do not sell your personal data to any third parties. We do not transfer your data outside the United Kingdom unless necessary, and where we do, we ensure appropriate safeguards are in place.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Quotation enquiries: if you do not proceed, we retain your data for up to 24 months, after which it is securely deleted
• Customer records: for the duration of any warranty period (typically 10-25 years for solar panels) plus 6 years to comply with legal obligations
• Financial records: 7 years as required by HMRC
• MCS installation records: retained as required by MCS certification requirements
• Website analytics data: up to 26 months

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you can request a copy of the personal data we hold about you
• Right to rectification: you can ask us to correct any inaccurate or incomplete data
• Right to erasure: you can request that we delete your personal data in certain circumstances
• Right to restrict processing: you can ask us to limit how we use your data
• Right to data portability: you can request that we transfer your data to another organisation in a structured, commonly used format
• Right to object: you can object to our processing of your data where we rely on legitimate interests
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time

To exercise any of these rights, please contact us at sales@drenergyltd.co.uk. We will respond to your request within one month.

7. Cookies

Our website uses cookies. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookie Policy.

8. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure data storage, encrypted communications, and restricted access to personal data on a need-to-know basis.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first at sales@drenergyltd.co.uk.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.