Privacy Policy

1. Who we are

Bay Bright Solar (“we”, “us”, “our”) is responsible for the personal information collected through this website. In data protection terms we are the “data controller”. We are based at 7 Bryn Eirias Close, Colwyn Bay, Conwy, LL29 8AB.

To ask a question about your data, or to use any of the rights in section 8, use our contact page or write to us at the address above.

2. What we collect

We collect personal data when you send it to us, and a small amount of technical data when you use the site.

• The eligibility check: your first and last name, email address, phone number, postcode, and the name of your business or organisation. You tick a box to agree that we may contact you by phone, text and email about your enquiry.
• The contact form: your name, phone number, email address and whatever you write in your message. We use these to reply to you.
• The callback form: your name and phone number. We use these to call you back.
• Your answers about the site: the kind of site it is, whether it has a three-phase electricity supply, how much roof or land could take panels, your rough monthly electricity bill band, whether you can get 12 months of usage data, and whether you own or rent the building. These describe a business site, but they can still identify you, particularly if you are a sole trader or a farmer.
• Where your enquiry came from: when you first arrive, your browser keeps a note of the page you landed on, the website that sent you, and any campaign tags or advertising click identifiers in the link. We send these with your enquiry so that we know which page led to it. The note is held in your browser for that visit only. It is not used to follow you around other websites.
• Your first name, kept in your browser for that visit only, so the thank-you page can greet you.
• Anything you tell us later, by phone, email or video call: for example your electricity usage data, bills, the site address and the building owner’s details.
• Visit data: information about how the site is used, such as pages visited, the website that referred you, country, device type and how quickly pages load. Vercel collects this in aggregate without cookies. Google Analytics collects more, but only if you choose “Accept all” on the cookie banner.

We do not ask for special category data through this website. That means information about health, race or ethnic origin, religion, politics, trade union membership, genetic or biometric data, or sex life. We do not take payment details through this website.

3. How we use your data, and why we are allowed to

• To reply to your enquiry and check eligibility. We call you back, look at your roof on satellite images, and work out whether a funded solar system suits your site. We rely on our legitimate interest in answering a business enquiry that you started.
• To prepare and carry out your proposal. This includes sharing your details with the partners in section 4. We rely on our legitimate interest in doing what you asked us to do.
• To contact you by text. We do this because you agreed on the form. You can reply STOP to any text, or tell us, and we will stop.
• To understand which pages bring enquiries. The note described in section 2 and the visit data let us see which pages work and which do not. For Vercel’s cookieless measurements we rely on our legitimate interest in running and improving the site. For Google Analytics we rely on your consent, given through the cookie banner.
• To show where we are. The map above the footer loads from Google. We rely on our legitimate interest in showing visitors where we are based.

You can withdraw consent for Google Analytics at any time by clearing your browser’s stored data. Withdrawing it does not affect anything done before.

4. Who we share your data with

We arrange funded solar through partners, so we may share an enquiry with them where they need it to carry out the proposal you asked for. They are:

• Our funding partner, a UK company that pays for the system and designs the proposal. It also runs a soft credit check on the business, which does not mark the credit file.
• Our installation partner, who fits the system.
• The grid operator for your area, who must approve the connection. We give them the site address and the meter number (called the MPAN).

We share what each of them needs for that job and no more. Beyond them, your details go only to the services that run this website, listed in section 5, and to anyone the law requires us to tell.

5. Services that run this website

• Web3Forms: carries the eligibility, contact and callback forms from your browser to us by email. The form details, including the attribution note in section 2, pass through it. See the Web3Forms privacy policy.
• Vercel: hosts this website and may log standard server data, such as your IP address and the time of each request. Vercel Analytics and Vercel Speed Insights measure visits and page speed in aggregate, without cookies. When an enquiry is sent, Vercel Analytics is told that one was sent and which page first brought you to the site, but not who you are. See the Vercel privacy policy.
• Google Analytics: measures how the site is used. It runs only after you choose “Accept all”. If you choose “Necessary only”, it does not load. See the Google privacy policy.
• Google Maps: the map above the footer is an embedded Google map. It loads with the page, so Google receives your IP address and browser details and may set its own cookies, whatever you chose on the banner. See the Google privacy policy.
• YouTube: our films play on this site in YouTube’s player when you click them. Nothing from YouTube loads until then. After that, YouTube’s own policy applies.

Some of these providers are based outside the UK, so your details may be handled outside the UK. Each provider’s policy explains how it protects them.

6. Cookies and browser storage

The cookie banner asks you to choose “Accept all” or “Necessary only”. This is what the site stores in your browser.

To change your mind, clear this site’s stored data in your browser. The banner will then ask again. Most browsers also let you block cookies from the Google map.

7. How long we keep your data

We keep enquiries only as long as we need them for the reasons above.

8. Your rights

Under UK GDPR you have the right to:

• Be told how we use your data, which is what this page is for
• Access the personal data we hold about you
• Correct anything that is wrong
• Erase your data, in the cases the law allows
• Restrict how we use it
• Object to us using it on the basis of legitimate interest
• Take it with you, where it applies, as data portability
• Withdraw consent at any time, where we rely on it

To use any of these, contact us as shown in section 1. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint. We would like the chance to put things right first, so please contact us if you can.

9. Changes to this policy

If we change how we use your data, we will update this page and the date at the top.