Privacy Policy

1. Company Information

SurgePV Technologies Ltd
Apartment 15, Sugar House Lane,
Sugar House Island, Stratford,
London, E15 2ZQ, United Kingdom

Contact: [email protected]

2. Data We Collect

We collect the following types of information:

• Account Data: Name, business email, login credentials (email/password, Google or Microsoft login).
• Project Data: Solar designs, images, consumption profiles, files (CSV, PDFs, other documents).
• Usage Data: Device information, IP address, browser type, site interactions, analytics.
• Form Data: Information submitted via demo request, contact forms, or newsletter sign-ups.
• Marketing Data: Consent records, campaign engagement.

3. How We Use Data

We use your data to:

• Provide, maintain, and improve the SurgePV Service.
• Generate and manage solar designs, reports, proposals, and collaboration features.
• Communicate with you about your account, billing, or support.
• Send marketing communications (only with explicit consent and double opt-in).
• Conduct analytics and product improvements.
• Comply with legal obligations.

4. Legal Basis for Processing (GDPR)

We rely on the following lawful bases:

• Contract: To deliver the Service you signed up for.
• Consent: For marketing emails, cookies, and newsletter subscriptions.
• Legitimate Interest: Analytics, product improvement, and fraud prevention.
• Legal Obligation: When required by applicable law.

5. Sharing of Data

We may share data with trusted third-party service providers, including:

• Cloud hosting providers (for storage and processing).
• Analytics platforms (e.g., Google Analytics).
• Payment processors (e.g., Stripe, Adyen).
• Customer relationship management (CRM) platforms (for lead and client management).
• Marketing platforms (e.g., for newsletters, outreach, ad retargeting).

We do not sell your personal data.

6. International Data Transfers

Data is hosted on Google Cloud Platform (GCP) in India and may be accessed globally. For EU users, data transfers outside the EEA are covered by Standard Contractual Clauses (SCCs) to ensure GDPR compliance.

7. Data Retention

• We retain personal data as long as your account remains active.
• Project data may be retained up to 2 years after account closure, unless deletion is requested earlier.
• Marketing data is retained until you withdraw consent.

8. Your Rights (GDPR)

EU users have the right to:

• Access their data.
• Request correction or deletion.
• Restrict or object to processing.
• Withdraw consent for marketing at any time.
• Request data portability.

To exercise your rights, contact [email protected].

9. Cookies & Tracking

• We use cookies for essential functionality, analytics, and (with consent) advertising.
• Our cookie banner provides Accept All / Reject All / Manage Preferences.
• Until consent is given, no non-essential cookies (e.g., analytics, retargeting) are set.

10. Marketing Communications

• Marketing emails are only sent if you tick the consent box and confirm via double opt-in email.
• Each email includes an unsubscribe link.
• Unsubscribing does not affect transactional or service-related communications.

11. Data Security

We implement appropriate technical and organizational measures to protect data, including encryption, access controls, and secure hosting on GCP.

12. Children's Privacy

The Service is intended for business use only and is not directed at individuals under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy to reflect product or legal changes. Updates will be posted on our website with a revised "Last Updated" date.

14. Contact

For questions about this Privacy Policy or your data rights: