Privacy notice

1. Who we are

Commercial Solar Finance is an independent UK commercial solar finance advisory. Where we refer to "we", "us", or "our" in this notice, we mean Commercial Solar Finance acting as data controller for the personal data described below. Contact details for data-related queries are at the end of this notice.

2. The personal data we collect

When you submit the contact, quote, or finance review forms on this site we collect:

• Identity and contact data: name, business email, business phone, company name and role.
• Project data: site postcode, annual electricity consumption, building tenure, accounting year-end, and any project-specific information you choose to share with us.
• Communications data: the content of any messages you send us and our replies.
• Technical data: anonymised analytics and server log data — IP address, device type, browser, referrer, and the pages visited. We do not use these to identify individuals.

3. How we use it

We use the data you submit only to:

• Respond to your enquiry and run the discovery / modelling / lender selection process described under "How we work".
• Communicate with you during an active engagement.
• Comply with statutory record-keeping obligations once we have advised on a transaction.

We do not use the data submitted through this site for marketing, advertising, list-rental, or any commercial purpose other than responding to and progressing your enquiry. We do not pass enquiry data to manufacturers, installers, or lenders without your specific instruction.

4. Lawful basis

We rely on Article 6(1)(b) of the UK GDPR (steps necessary to enter into a contract at your request) for processing personal data submitted through enquiry forms. Where we retain transaction records after engagement we rely on Article 6(1)(c) (legal obligation, principally HMRC and money-laundering record-keeping obligations) and Article 6(1)(f) (our legitimate interest in being able to evidence the advice given on past transactions if challenged).

5. How long we keep it

If you submit an enquiry but do not progress to engagement, we delete the personal data within 12 months of the last contact. Where we have been engaged on a transaction, we retain the relevant records for seven years after the transaction concludes, in line with HMRC and AML record-keeping requirements. Anonymised analytics data is retained for up to 26 months.

6. Sharing

We share personal data only with: (a) the IT and email service providers that host this site and our internal communications (Netlify and Microsoft 365); (b) our professional advisers (accountants, lawyers) where strictly required and under confidentiality; and (c) lenders, PPA counterparties, and installers where you have specifically instructed us to do so as part of an engagement. We do not transfer personal data outside the UK / EEA except via the standard hosting and email services above, which operate under appropriate transfer safeguards.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion (subject to our statutory record-keeping obligations).
• Restrict or object to processing.
• Receive your data in a portable format.
• Complain to the Information Commissioner's Office (ico.org.uk).

8. Cookies

This site sets only the strictly necessary cookies required to load the page and remember your form-submission state during a session. We do not set advertising, marketing, or third-party analytics cookies. If we ever introduce non-essential cookies, we will publish a cookie banner with consent management.

9. Contact

For any question about this notice, your data, or to exercise your rights, write to us at the address on the contact page. We reply to data subject requests within one calendar month, in line with the statutory timeframe.