Last updated: 13 November 2026
1. About This Notice
This notice explains how SRM Solar Limited collects and uses personal information about the people we deal with when we design, supply, install and look after solar PV and battery storage systems, and about people who use our website.
It applies to:
- homeowners and other customers who ask us for a quotation or contract with us directly;
- buyers and occupiers of new homes where we installed the system for the developer;
- staff and representatives of developers, contractors, suppliers and other businesses we work with; and
- people who contact us through our website, by email or by phone.
Our employees, workers and contractors are covered by a separate notice (D30 – Privacy Notice).
Who We Are
SRM Solar Limited (company number 14591273), Unit 9, Silkwood Park, Fryers Way, Ossett, West Yorkshire, WF5 9TJ, is the data controller for the personal information described in this notice. We are registered with the Information Commissioner’s Office (ICO), registration number 00013795262.
Our Data Protection Lead is Steve Dunks. You can contact us by email at help@srmsolar.co.uk, by phone on 0330 043 1264, or by post at the address above.
2. The Information We Collect
Customers and Homebuyers
- Name, address, telephone number and email address, and those of anyone you ask us to deal with on your behalf.
- Information about your property: roof, loft and structure, the existing electrical installation, meter and supply details (including your MPAN), shading and access, and photographs and drawings taken during survey, installation and aftercare visits.
- Information you give us to design the system, such as electricity bills, annual usage, your tariff and how you use energy.
- Contract records: quotations, signed acceptances and forms, consents (for example to remote monitoring or marketing), variations, invoices and payments. We do not take or store payment card details.
- System records: equipment make, model and serial numbers, commissioning and test results, settings, certificates and registrations.
- Monitoring data, where you agree to it: generation, consumption, battery and export data from your system’s monitoring platform.
- Records of calls, emails, visits, faults, complaints and disputes.
We do not ask for special category information such as health details. If you choose to tell us something about your health or circumstances, we will only record it with your agreement and only use it to plan and carry out our work safely.
Business Contacts
Name, job title, employer, work email address and telephone number, and records of our dealings with you.
Website Users
- When you use our enquiry form: your name, email address, phone number (optional), the service you are interested in, your message, the date and time of submission, and your IP address (used to protect the form against spam).
- Our website does not use cookies. See section 10.
3. Where We Get Your Information
- From you – when you enquire, and during survey, quotation, installation, handover and aftercare.
- From the developer or main contractor, where we install a system in a new home.
- From the system and its manufacturer’s monitoring platform, where you have agreed to installer access.
- From organisations involved in the installation, such as the Distribution Network Operator (DNO), MCS, NAPIT and equipment manufacturers.
- From a previous owner of the property, where system records or a guarantee pass to a new owner.
4. How We Use Your Information
We only use personal information where the law allows us to.
| Purpose | Lawful basis |
|---|
| Responding to enquiries and preparing quotations | Steps you ask us to take before entering a contract; legitimate interests |
| Survey, design, supply, installation, commissioning and handover | Performance of our contract with you |
| Notifying Building Regulations work (NAPIT) and notifying or applying to the DNO for connection | Legal obligation |
| Registering the installation with MCS and issuing your MCS certificate | Performance of our contract; legitimate interests |
| Arranging MCS financial protection for domestic customers | Performance of our contract; legitimate interests |
| Registering manufacturer warranties and dealing with warranty claims | Performance of our contract; legitimate interests |
| Guarantee, aftercare, fault diagnosis and call-out visits | Performance of our contract; legitimate interests |
| Remote access to your system’s monitoring platform | Your consent, which you can withdraw at any time |
| Invoicing, accounts, VAT and tax records | Legal obligation; performance of our contract |
| Complaints, disputes and alternative dispute resolution (RECC and MCS) | Legal obligation; legitimate interests |
| Insurance, legal advice and dealing with or defending claims | Legitimate interests |
| Quality audits and scheme surveillance by NAPIT and MCS | Legitimate interests |
| Product safety notices and recalls | Legitimate interests; legal obligation where it applies |
| Sending you information about our products and services | Your consent – you can opt out at any time |
| Protecting our website and systems from spam and misuse | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and are satisfied they are not overridden. We do not make decisions about you based solely on automated processing.
5. Who We Share Your Information With
We only share what is needed for the purpose, and we do not sell personal information.
Organisations Involved in Your Installation
- MCS – to register your installation, issue your MCS certificate and deal with any complaint.
- NAPIT – our certification body and competent person scheme, which notifies your local authority building control and audits our installations.
- Your Distribution Network Operator (in most of our area, Northern Powergrid) – grid connection notifications and applications.
- The Insurance & Warranty Agency (IWA) and the insurer named on your certificate – for domestic customers, MCS financial protection.
- The Renewable Energy Consumer Code (RECC) – complaints, dispute resolution and compliance monitoring.
- Equipment manufacturers and distributors – warranty registration and claims, and product safety notices.
- Developers and main contractors – on new-build sites, handover information for systems installed.
Service Providers Acting on Our Behalf
- Microsoft (Microsoft 365) – email, documents and file storage. Microsoft Privacy Statement.
- Adobe (Acrobat Sign) – electronic signature of quotations and forms.
- Cloudflare (Turnstile) – spam protection on our website enquiry form. Cloudflare Privacy Policy.
- Our hosting and cloud storage providers – hosting of our website and CRM system, and secure backup storage, all in the UK.
- Purple River – accountancy services.
- Howden (our insurance broker) and our insurers – where needed for insurance and claims.
- Professional advisers, such as solicitors.
These providers may only use your information on our instructions and must keep it secure.
Others
- HMRC, regulators, the police, courts and other public bodies where the law requires it.
- A buyer of, or successor to, our business if it is sold or restructured, on a confidential basis.
- A new owner of your property, where system records or guarantees pass with it. We share system records only, not your contact details.
Some manufacturers’ monitoring platforms may process information outside the UK. Where this happens we rely on UK adequacy regulations (including the UK–US Data Bridge) or other safeguards approved under UK law.
6. How Long We Keep Your Information
| Information | How long we keep it |
|---|
| Enquiries that do not lead to a quotation or contract | Up to 2 years after our last contact |
| Quotations, contracts, installation, commissioning, certification and guarantee records | At least 6 years, and longer while a guarantee or warranty is in force |
| Performance estimates and the information they are based on | 10 years |
| Accounting and tax records | 6 years from the end of the financial year they relate to |
| Complaints and disputes | 6 years after the matter is closed |
| Remote monitoring access | Until you withdraw your consent or we no longer support the system |
| Marketing preferences | Until you opt out. We keep a record of the opt-out so that we do not contact you again. |
7. Keeping Your Information Secure
We use appropriate technical and organisational measures to protect personal information, including individual log-ins secured with FIDO passkeys and two-factor authentication, access restricted to staff who need it, and regular backups held in separate locations. Customer and job records are held in our own purpose-built CRM system, hosted by a cloud hosting provider in the UK.
If there is a personal data breach, we will report it to the ICO within 72 hours where required, and tell you without undue delay if it is likely to put you at high risk.
8. Your Rights
Under data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your information where there is no good reason for us to keep it;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing;
- ask us to transfer information you gave us to another organisation; and
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, contact our Data Protection Lead at help@srmsolar.co.uk. We will respond within one month, or tell you within that month if we need up to two more months because the request is complex.
9. Complaints
If you are unhappy with how we have handled your personal information, please contact us first at help@srmsolar.co.uk. We will acknowledge your complaint within 30 days and respond without undue delay.
You also have the right to complain to the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
- Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Our Website
- Our website does not use cookies. Fonts and other assets are served from our own server. If we introduce cookies in future, we will update this notice and ask for your consent before setting any that are not strictly necessary.
- Our website shows live electricity grid data from the Carbon Intensity API (carbonintensity.org.uk), provided by the National Energy System Operator. Your browser connects to that service directly, which may log your IP address as part of normal server logging. We do not send it any personal information.
- Our website links to other sites, such as Ofgem, Facebook and LinkedIn. They have their own privacy policies and we are not responsible for how they handle personal information.
11. Changes to This Notice
We may update this notice from time to time and will change the “last updated” date when we do. If we make a significant change that affects how we use your information, we will tell you.
