# Privacy Policy

#  Privacy Policy v3

**Last updated:** December 14, 2025

 This Privacy Policy explains how Kilowatts.uk, operated by Vangarda Build Limited (company number 15406908), collects, uses, and protects personal data under UK GDPR.

##  Who we are

 Vangarda Build Limited trading as Kilowatts.uk is the data controller.

##  Information we collect

###  Public users and guests

- **Contact details:** name, email address, phone number, and postal address when provided.
- **Location data:** postcode, address, coordinates, and mapping data used for modelling and comparisons.
- **Roof and property data (solar tools):** roof orientation, pitch, shading, construction type, height, and surface characteristics.
- **Energy information:** tariff rates, standing charges, usage estimates, time-of-use details, and MPAN where supplied.
- **Quote and configuration data:** selected products, system bundles, pricing structures, notes, and revisions.
- **Generated documents:** PDFs, proposals, attachments, invoices, and confirmation records.
- **Email verification:** confirmation codes, timestamps, and access logs.
- **Guest identifiers:** pseudonymous Guest

ID and essential session cookies.
 
###  Companies and installers

- Public business and director information from Companies House and Google APIs.
- Quote submissions, pricing models, and communication records.
 
##  Automated processing

 We use automated systems to generate indicative quotes, comparisons, projections, and documents. These systems support user decision-making and do not constitute fully automated decision-making with legal effect.

##  How we use your data

- To generate and store quotes and proposals.
- To communicate via email or phone regarding your enquiry.
- To connect you with relevant service providers.
- To manage projects where Kilowatts.uk acts as agent or contractor.
- To maintain platform security and audit trails.
 
##  Legal bases

- **Contract:** providing requested quotes and services.
- **Legitimate interests:** security, fraud prevention, essential functionality.
- **Consent:** policy acceptance, optional marketing, third-party services such as Google Maps.
 
##  Data sharing

 We do not sell personal data. Data is shared only with installers, subcontractors, and service partners where required to deliver requested services, or where legally required.

##  Retention

- Quotes and project records: up to 6 years.
- Inactive accounts: deleted after 24 months.
- Guest data: deleted once no longer required.
 
##  Security

 We use encryption, access controls, Cloudflare protection, and secure infrastructure to protect data.

##  International transfers

 Data may be processed outside the UK using UK GDPR-compliant safeguards.

##  Your rights

- Access, correction, deletion
- Restriction and objection
- Data portability
- Withdrawal of consent
 
##  Contact

- <privacy-concerns@kilowatts.uk>
- <deletions@kilowatts.uk>
 
##  Regulator

 UK Information Commissioner’s Office: [ https://ico.org.uk/make-a-complaint/ ](https://ico.org.uk/make-a-complaint/)