Privacy Policy
Last updated: July 2026
Who we are
SolarByPostcode is an independent website. For the purposes of UK and EU data-protection law, we are the data controller of any personal information collected via this site.
What information we collect
We collect minimal data to operate this website and respond to requests:
- Contact emails — If you email us directly, we receive your name, email address, and message contents.
- Quote sanity check requests — If you submit the quote-check form, we collect the postcode area you provide, broad electricity-use band, roof direction, battery interest, buying timeframe, email address, optional phone number, optional notes, consent record, and basic source fields such as referrer and UTM tags.
- Solar assistant use — OpenAI receives the question you submit, up to ten recent conversation messages, and limited postcode-area, page and calculator context so it can generate a reply. SolarByPostcode stores coarse operational metadata such as the time, postcode area, page type and error code. We do not normally retain the words you type, the reply, or the anonymous chat session ID. Raw conversation logging can be enabled temporarily for troubleshooting or improvement and, when enabled, is deleted within 90 days. Please do not include names, contact details, a full postcode or other sensitive information in assistant messages.
- First-party analytics — We log aggregate site events such as page views, postcode searches, calculator interactions, quote-check clicks, quote-check submissions and partner-link clicks. These events do not include IP addresses, full postcodes, chat text, or persistent user IDs.
- Anonymous visit grouping — We use a browser
sessionStoragevalue to group events inside a browser tab/session. This is not a cookie, is not a persistent returning-user ID, and is used only to understand journeys through the site. - Technical data — Our web hosting provider (Cloudflare Pages) may log IP addresses and basic server information for security and performance purposes.
We do not use advertising pixels or third-party analytics tools that collect personal information for marketing.
Note: Cloudflare may set strictly-necessary security cookies (e.g., bot-mitigation). These do not track you and are not used for advertising.
What we don’t collect
Unlike many websites, we do not collect:
- Full home addresses through the quote-check form
- Full postcodes in analytics events
- Browsing behaviour linked to persistent user profiles
- Marketing pixels or third-party advertising trackers
- Chat text in analytics events
Why we process your data (lawful bases)
We process the limited data we collect on the basis of legitimate interests to:
- Respond to enquiries sent via email
- Maintain website security and performance
- Understand aggregate traffic patterns to improve the site
- Provide, secure and improve the solar assistant while limiting retained conversation data
- Measure whether quote-check requests are useful to visitors
Where you submit a quote-check request and tick the consent box, we process your contact details on the basis of consent so that we can reply and, where relevant, introduce you to a selected solar partner.
Where applicable, we may also process data to comply with legal obligations (e.g., responding to lawful requests).
Who we share data with
We do not sell or rent your personal data. The processing that may occur is:
- Web hosting provider (Cloudflare Pages) — Stores website files, functions and database data, and may log server data for security purposes.
- AI service provider (OpenAI) — Receives your assistant question, limited recent conversation history, and relevant page or calculator context to generate the response.
- Selected solar partners — If you submit a quote-check request and we believe an introduction may be useful, we may share the details you provided with a relevant solar partner. We do this only where the form consent covers that introduction.
International transfers
Our providers may process data on servers located outside the UK/EEA. When this happens, we rely on appropriate safeguards (such as standard contractual clauses) to protect your information to UK/EU standards.
When you request quotes
If you click our Blue Ape Renewables “Get quote” links, you will be directed to our partner site. At that point, you leave SolarByPostcode, and any information you provide is governed by their privacy policy, not ours.
We may receive a referral fee if you request quotes through partner links.
If you use our own quote sanity check form, your details are submitted to SolarByPostcode first. We may reply directly or, where relevant, introduce you to a selected solar partner under the consent you provide on the form.
How long we keep data
- Email correspondence: kept only as long as necessary to respond to your enquiry (typically 30–90 days), unless we need to retain it for legal reasons.
- Quote sanity check requests: kept only as long as needed to respond, assess whether the service is useful, or handle partner introductions (typically 90–180 days), unless we need to retain it for legal reasons.
- Solar assistant data: coarse operational metadata is kept for up to 90 days. Raw question text, replies and anonymous session IDs are not normally stored; if temporary content logging is enabled, that content is also deleted within 90 days.
- Server logs: automatically deleted according to our hosting provider’s standard retention policies.
- Aggregate analytics events: kept for site-performance and funnel analysis, without IP addresses, full postcodes, chat text, or persistent user IDs.
Your rights
Under UK and EU data-protection law (GDPR and UK GDPR), you have the right to:
- Request access to any personal data we hold about you
- Request correction or deletion of your data
- Object to processing of your data
- Request restriction of processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Cookies and session storage
This website does not use analytics cookies or advertising cookies. Because we don’t use cookies for analytics or advertising, we don’t show a cookie banner.
We use sessionStorage for an anonymous visit ID so that our own analytics can group page views and actions within a browser tab/session. This does not identify you as a returning person and is cleared according to your browser’s session behaviour.
Note: Cloudflare may set strictly-necessary security cookies that do not track you and cannot be opted out of.
Security
We use reputable, security-focused hosting and industry-standard technical measures (e.g., HTTPS, access controls) to protect your data. No method of transmission or storage is 100% secure, but we work to keep risks low and proportionate.
Children’s data
Our site is aimed at a general audience and is not directed at children. We do not knowingly collect personal data from children.
Policy updates
We may update this policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top will be revised accordingly. Material changes will be noted clearly.
Questions about privacy?
Email [email protected]