Privacy Policy
Effective Date: March 2026
Last Reviewed: March 2026
1. Introduction
Sustainable Energy Engineering Limited ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, protect and share personal data when you:
- Visit our website
- Request a quotation
- Engage us for installation or servicing
- Communicate with us
- Subscribe to marketing communications
- Interact with us as a supplier, contractor or commercial partner
We comply with:
- UK General Data Protection Regulation (UK GDPR)
- EU General Data Protection Regulation (where applicable)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations 2003 (PECR)
2. Data Controller
Sustainable Energy Engineering Limited
Unit 11 Whitworth Road
Armstrong Industrial Estate
Washington
NE37 1PP
United Kingdom
Company Number: 05942135
VAT Number: 939 5459 70
Email: info@susenergy.co.uk
Telephone: 0191 340 7001
We are the Data Controller for the purposes of UK GDPR.
3. Categories of Personal Data We Collect
3.1 Identity Data
- Name
- Title
- Date of birth (if required for finance)
3.2 Contact Data
- Billing and installation address
- Email address
- Telephone numbers
3.3 Technical Data
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Website interaction data
3.4 Energy & Property Data
- Electricity usage data
- Roof dimensions and orientation
- Property photographs
- Drone imagery (where surveys are conducted)
- Meter and grid connection data
3.5 Financial Data
- Payment details (processed securely via payment providers)
- Finance application information (where applicable)
3.6 Marketing & Communications Data
- Marketing preferences
- Communication records
4. Lawful Bases for Processing
We process personal data under the following lawful bases:- Contract: To provide quotations, installations, servicing and warranty support.
- Legitimate Interests: Business administration, fraud prevention, system improvement and customer relationship management.
- Consent: Marketing communications and non-essential cookies.
- Legal Obligation: Regulatory, tax, MCS, HIES and safety compliance.
5. How We Use Your Personal Data
We use personal data to:- Design, supply and install solar PV and battery systems
- Conduct surveys including drone assessments
- Register installations with MCS and warranty providers
- Provide ongoing servicing and monitoring
- Process payments
- Respond to enquiries
- Send marketing communications (where permitted)
- Improve website performance and analytics
- Comply with legal and regulatory obligations
6. Data Sharing
We may share data with:- MCS and certification bodies
- HIES and other consumer protection schemes
- Finance providers
- Warranty manufacturers
- Approved subcontractors
- Cloud hosting providers
- CRM and IT service providers
- Analytics providers
- Legal and regulatory authorities
7. International Transfers
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards including:- UK International Data Transfer Agreements (IDTA)
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the UK Government
8. Data Security
We implement appropriate technical and organisational measures including:- SSL encryption
- Secure hosting environments
- Access controls and role-based permissions
- Password protection
- Regular software updates
- Staff data protection training
9. Data Retention
We retain personal data only as long as necessary:- Installation and warranty records: minimum 6 years
- Financial records: 6 years (HMRC compliance)
- MCS documentation: as required by certification bodies
- Marketing data: until consent withdrawn
10. Data Breaches
In the event of a personal data breach:- We will assess risk promptly
- Notify the ICO within 72 hours where required
- Notify affected individuals where legally required
11. Your Rights
You have the right to:- Access your data
- Rectify inaccurate data
- Request erasure
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
12. Automated Decision Making
We do not use automated decision-making that produces legal or similarly significant effects without human involvement.13. Marketing Communications
We comply with PECR. Marketing communications are sent only:- With your explicit consent
- Under soft opt-in rules for existing customers
14. Cookies
We use cookies in accordance with PECR and UK GDPR. Categories may include:- Strictly necessary cookies
- Analytics cookies
- Marketing cookies
15. Complaints
If you are dissatisfied, you may contact:Information Commissioner’s Office (ICO)
www.ico.org.uk
Telephone: 0303 123 1113