How we use your personal information
Last updated: August 2026
1. Who we are
Company: Nimbus Solar Ltd
Company number: 14221201
Address: Blantyre, Beachley Road, Tutshill, Chepstow NP16 7DJ
Email: hello@nimbus-solar.co.uk
Phone: 01291 409014
Website: nimbus-solar.co.uk
Nimbus Solar Ltd (“we”, “us”, “our”) is a solar PV installation company. We are registered with the Microgeneration Certification Scheme (MCS) and are members of the Renewable Energy Consumer Code (RECC).
For the purposes of data protection law, we are the data controller for the personal information we collect and use. This means we are responsible for how your personal information is handled.
2. What this Privacy Policy covers
This Privacy Policy explains how we use personal information when you:
- visit or use our website;
- contact us or submit an enquiry;
- ask us for a quote;
- arrange a survey;
- enter into a contract with us;
- have a solar PV system, battery, inverter or related equipment installed; or
- contact us about servicing, aftercare, warranty support or complaints.
3. Information we collect
We may collect and use the following information:
- Your name, address, email address and telephone number.
- Information you provide through our website enquiry forms.
- Details about your property, roof, meter position, consumer unit, access routes and proposed equipment locations.
- Survey notes, measurements, design information and installation records.
- Photographs of relevant parts of your property, including roof areas, elevations, access routes, meter positions, consumer unit locations, scaffold areas, equipment locations and completed works.
- Quotation, contract, payment and invoice records.
- DNO grid connection information.
- MCS registration and certification information.
- Commissioning records, test certificates and handover documents.
- Warranty, servicing, maintenance and aftercare records.
- Emails, messages, call notes and other communications between you and us.
- Finance application information where you choose to apply for finance through a third-party finance provider.
- Technical and usage information generated when you use our website, where collected by our website, hosting, security, cookie or analytics services, such as your IP address, browser or device information, cookie identifiers and browsing activity.
We only collect information that is reasonably needed for the purposes for which it is being used.
4. Using our website
When you use nimbus-solar.co.uk, we may collect personal information that you provide directly to us through our website, including through our enquiry forms.
We use information submitted through our website to respond to your enquiry, assess your requirements, check your property or roof space where relevant, prepare or discuss a quotation, and take steps at your request before entering into a contract.
The lawful basis for this processing will normally be taking steps at your request before entering into a contract or performing a contract with you.
Our website may also generate or collect technical information when you visit it, such as your IP address, browser or device information, cookie identifiers and information about how the website is used.
This information may be processed by our website hosting, security, cookie-management, analytics or similar service providers where those services are enabled.
Cookies and similar technologies
Our website uses cookies and similar technologies.
Our website provides cookie consent controls for categories including Functional, Preferences, Statistics and Marketing.
Cookies that are strictly necessary for the operation of the website may operate without consent where permitted by law.
Where consent is required, we will ask for your permission before using non-essential cookies or similar technologies.
You can accept, refuse or manage your cookie choices through the cookie controls on our website. You can also change your choices later using the consent-management option available on the website.
Some website features or content may be supplied by third parties. Where third-party content, services or links are used, those organisations may process information under their own privacy notices.
5. Property photographs
We may take photographs of relevant parts of your property where needed for quoting, surveying, system design, scaffolding, installation, certification, quality checks, warranty support, aftercare or evidence of completed works.
We only take and keep photographs that are reasonably needed for these purposes.
Where possible, we limit photographs to the relevant work areas and avoid capturing people, personal documents, unrelated rooms or neighbouring property unless this is necessary for the work.
We will not use photographs of your property for marketing, case studies, social media or website content unless you have given us your permission.
6. How we use your information
We may use your personal information for the following purposes:
Enquiries and quotations
We use your name, address, contact details and property details to respond to enquiries and prepare quotations.
Lawful basis: Contract / steps taken before entering into a contract.
Surveys and system design
We use survey notes, photographs and roof/access information to carry out surveys and design your system.
Lawful basis: Contract / steps taken before entering into a contract.
Scaffolding, deliveries and installation
We may use contact details, access information and relevant photographs to arrange scaffolding, deliveries and installation work.
Lawful basis: Contract.
Installation and commissioning
We use installation and commissioning records to install, test and commission your system.
Lawful basis: Contract.
DNO and MCS registration
We use relevant contact details, property details and system design information to notify the Distribution Network Operator (DNO) and register installations with MCS where required.
Lawful basis: Contract and/or legal obligation.
Handover, warranties and aftercare
We use handover documents and warranty and service records to provide warranties, servicing and aftercare.
Lawful basis: Contract.
Payments and accounting
We use payment records and invoicing details to manage payments, invoices and accounting records.
Lawful basis: Contract and legal obligation.
Complaints and legal matters
We use contact details, contract details and complaint records to handle complaints, disputes, insurance matters and legal claims.
Lawful basis: Legitimate interests and/or legal obligation.
Regulatory and scheme requirements
We may use contact details, contract information and certification information to meet MCS, RECC and other regulatory or scheme requirements.
Lawful basis: Legal obligation and/or legitimate interests.
Finance applications
Where you choose this option, we may use your contact details, property information and relevant finance application information to refer you to, or help you apply with, a third-party finance provider.
Lawful basis: Contract / steps taken before entering into a contract.
Marketing photographs, testimonials and case studies
We may use installation photographs, testimonials or details about your installation for our website, social media, marketing or case studies where you have given us permission.
Lawful basis: Consent.
Where we rely on legitimate interests, this means we have a proper business reason for using the information, provided this does not unfairly affect your rights or freedoms.
Where we rely on consent, you can withdraw your consent at any time.
7. Who we share your information with
We only share your personal information where needed for the work we are carrying out, to meet our legal or scheme obligations, or to run our business properly.
These third parties may include:
- Scaffold companies.
- Surveyors, designers, electricians, roofers and other subcontractors.
- Equipment manufacturers and suppliers.
- Delivery providers.
- The Distribution Network Operator (DNO).
- MCS and certification bodies.
- Warranty providers.
- RECC and Renewable Energy Assurance Limited (REAL).
- Finance providers where you choose to apply for finance.
- Our accountant, bookkeeper or professional advisers.
- IT, website, software, cloud storage and administrative service providers.
- Insurers, regulators, ombudsman services, courts or legal advisers where needed.
We only share the information that is needed for the relevant purpose.
Example: scaffold companies
A scaffold company may need your name, address, contact details, access information and relevant roof or access photographs so they can quote for and provide scaffolding.
They would not normally need your payment records, finance information or full contract file.
We do not sell your personal information.
8. International transfers
Some of the software, website, cloud storage or administrative services we use may process personal information outside the UK.
Where this happens, we will take the steps required by UK data protection law to protect your information, such as using appropriate contractual safeguards.
9. How long we keep your information
We keep personal information only for as long as we need it.
Our usual retention periods are:
Enquiries and quotes where no contract follows:
Up to 12 months.
Survey, contract, installation, commissioning, certification, handover and complaint records:
At least 6 years from completion.
MCS, DNO and scheme compliance records:
At least 6 years, or longer where required by the relevant scheme.
Financial and accounting records:
6 years.
Warranty, service and aftercare records:
For the warranty or service period, and longer where needed for a claim, dispute or legal requirement.
Marketing consent records:
Until consent is withdrawn, plus a short period to action the withdrawal.
When information is no longer needed, we will delete it securely or anonymise it.
10. How we protect your information
We take reasonable steps to keep your personal information secure.
Customer records, project files and photographs are stored securely. Access is limited to people who need the information for their work, such as staff, approved subcontractors or service providers.
We expect subcontractors and service providers to handle personal information responsibly and only use it for the work they are carrying out for us.
11. Marketing photographs and case studies
We may ask for your permission to use photographs, testimonials or details of your installation for marketing, website content, social media or case studies.
This is optional. Saying no will not affect the service we provide to you.
If you give permission, you can withdraw it later by contacting us.
This will not affect anything already lawfully used before your consent was withdrawn, but we will stop using the material going forward where reasonably possible.
12. RECC’s use of your information
Because we are members of RECC, we may need to provide certain customer and contract information to RECC or Renewable Energy Assurance Limited (REAL) for compliance monitoring, audits, complaint handling or Code-related checks.
RECC or REAL may use your personal information separately for those purposes.
Where required, we will provide you with RECC or REAL’s own data protection notice alongside this Privacy Policy.
13. Your rights
Under UK data protection law, you have rights over your personal information. Depending on the circumstances, these include:
- Access – you can ask for a copy of the personal information we hold about you.
- Rectification – you can ask us to correct information that is inaccurate or incomplete.
- Erasure – you can ask us to delete your information where there is no good reason for us to keep it.
- Restriction – you can ask us to restrict how we use your information in certain circumstances.
- Portability – you can ask for certain information to be provided in a structured, commonly used format.
- Objection – you can object to our use of your information where we rely on legitimate interests.
- Withdraw consent – where we rely on consent, for example for marketing photographs, you can withdraw it at any time.
- Complain to us – you can make a data protection complaint directly to us.
- Complain to the ICO – you also have the right to make a complaint to the Information Commissioner’s Office.
Some rights only apply in certain circumstances.
If you contact us about your rights, we may need to confirm your identity before responding. We will usually respond within one month.
14. Data protection complaints
If you believe we have not handled your personal information correctly, you can make a data protection complaint directly to us.
How to complain to us
Email: hello@nimbus-solar.co.uk
Please use the subject line “Data Protection Complaint” so we can identify and respond to your complaint promptly.
Post:
Nimbus Solar Ltd
Blantyre
Beachley Road
Tutshill
Chepstow
NP16 7DJ
You can also make a complaint to us in any other clear way, including by telephone or in person.
We will acknowledge your complaint within 30 days of receiving it. We will then investigate it without undue delay, keep you informed where appropriate and tell you the outcome.
If we need to confirm your identity or check that someone is authorised to act on your behalf, we will ask for the information we reasonably need.
15. Complaining to the ICO
If you are not satisfied with how we have handled your complaint, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Information Commissioner’s Office (ICO)
Helpline: 0303 123 1113
Website: ico.org.uk
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, website, services or legal requirements.
The latest version will be published on our website.
Nimbus Solar Ltd
Company number: 14221201
Email: hello@nimbus-solar.co.uk
Phone: 01291 409014