Privacy Policy
Last updated: July 2026
Who we are
Y Solar ("we", "us", "our") operates the website ysolar.co.uk. We are a lead-generation service that connects homeowners with MCS-certified solar installers. Our data-protection contact email is [email protected].
Personal data we collect
When you submit an enquiry through our contact form we collect:
- Full name
- Email address
- Phone number (optional)
- Postcode
- Free-text message describing your project
We do not collect special-category data (e.g. health, ethnicity) or data relating to children.
How we use your data
| Purpose | Lawful basis |
|---|---|
| Respond to your enquiry and provide a quote or further information | Legitimate interest (Art. 6(1)(f) UK GDPR) |
| Pass your contact details to matched MCS-certified installer partners — only after you give explicit, opt-in consent | Consent (Art. 6(1)(a) UK GDPR) |
| Improve our website and service (aggregated, anonymised analytics) | Legitimate interest |
We will never sell your data or use it for unrelated marketing.
Third-party sharing
Your personal data is shared only with the installer partner(s) you are matched with, and only after you have ticked the consent box on the form. Those partners act as independent data controllers for any subsequent processing. We do not share data with advertising networks, social-media platforms, or other third parties.
Data retention
- Enquiry records: retained for 12 months after last contact, then securely deleted.
- Consent records: retained for 24 months to demonstrate compliance, then deleted.
- Anonymised analytics data: retained indefinitely in aggregate form.
Cookies & analytics
Our site uses only essential cookies (session ID, CSRF token) and Google Analytics 4 with IP anonymisation enabled. No advertising or tracking cookies are set. You can disable non-essential cookies via your browser settings; the contact form will still function.
Your UK GDPR rights
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erasure ("right to be forgotten") where processing relies on consent or legitimate interest
- Restrict processing in certain circumstances
- Data portability for data you provided based on consent
- Object to processing based on legitimate interest
- Withdraw consent at any time for installer sharing (without affecting prior lawful processing)
To exercise any right, email [email protected]. We will respond within one calendar month.
Security
We implement appropriate technical and organisational measures (TLS encryption, access controls, regular vulnerability scans) to protect your data against unauthorised access, loss, or alteration.
Changes to this policy
Any material changes will be posted on this page with a revised "Last updated" date. Continued use of the site after changes constitutes acceptance.
Contact us
Data-protection queries: [email protected]
No telephone number is operated for data-protection matters.
Y Solar is a company registered in England & Wales (company no. 00000000).