Privacy Policy

1. Who We Are

Squirrel Energy Ltd is a solar and battery storage installation company registered in England and Wales. We operate under two entities:

• Squirrel Energy Group Ltd — Registered in England & Wales · No. 08349449
• Squirrel Energy Services Ltd — Registered in England & Wales · No. 12918250

Registered Office: Group First House, Mead Way, Padiham, Lancashire BB12 7NG.

In this policy "Squirrel Energy", "we", "us" and "our" refers to both entities acting as joint data controllers.

If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. What Data We Collect

We may collect and process the following personal data:

• Contact information — name, email address, telephone number, and postal address.
• Property information — roof type, property size, energy usage, and details relevant to a solar or battery storage survey.
• Financial information — where you enquire about finance options, we may collect information needed to refer you to a finance provider. We do not store payment card details.
• Communications — records of emails, calls, or messages you send us.
• Website usage data — IP address, browser type, pages visited, and time spent on our site (collected via cookies and analytics tools).

3. How We Use Your Data

We use your personal data to:

• Respond to enquiries and provide quotes or surveys.
• Carry out installation work and aftercare services.
• Process warranty registrations and MCS certification paperwork.
• Send you relevant information about our services where you have consented or where we have a legitimate interest.
• Comply with legal and regulatory obligations (including MCS scheme requirements).
• Improve our website and marketing communications.

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

• Contract — processing necessary to fulfil a contract with you (e.g. carrying out an installation).
• Legitimate interests — responding to enquiries, improving our services, and direct marketing to existing customers.
• Consent — where you have opted in to marketing communications or the use of non-essential cookies.
• Legal obligation — where we are required to process data to comply with the law.

5. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy. As a guide:

• Enquiry records — up to 2 years if no contract is entered into.
• Customer and installation records — up to 10 years to support warranty claims and MCS obligations.
• Financial records — 6 years in line with HMRC requirements.

6. Who We Share Your Data With

We do not sell your personal data. We may share it with:

• MCS (Microgeneration Certification Scheme) — required for all certified installations.
• Finance providers — where you request information about finance options.
• Equipment manufacturers — for warranty registration purposes.
• IT and software providers — who process data on our behalf under data processing agreements.
• Professional advisers — accountants, solicitors, and insurers where necessary.

All third parties are required to handle your data securely and in accordance with UK GDPR.

7. Cookies

Our website uses cookies to improve your browsing experience and to help us understand how visitors use the site. You can manage your cookie preferences at any time via the cookie banner on our site. For more detail on the cookies we use, please see our Cookie Policy (available on request).

8. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your data where there is no compelling reason for us to continue processing it.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Access to personal data is restricted to staff who need it to carry out their duties.

10. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page, with the date of the most recent revision shown at the top.