Skip to content

Privacy Policy v2

Last updated: September 3, 2025

This Privacy Policy explains how Kilowatts.uk, operated by Vangarda Build Limited (company number 15406908), collects, uses, and protects your personal data.

Who we are

Kilowatts.uk is an online platform for renewable energy and electrical services. Vangarda Build Limited trading as Kilowatts.uk is the data controller.

Information we collect

For public users

  • Non-solar projects: name, email, phone, project description, maximum budget, postcode. Guests can submit a project with a consent checkbox; at that point, an account is created and you are logged in automatically so you don’t need to register first.
  • Solar comparisons (staged collection):
    • Guest phase: postcode and address from Google Places (if enabled). No personal identifiers yet.
    • Identified phase: once you provide contact details, we also collect roof details (tile type, colour, orientation, storey height, pitch, shading factor) and optional energy usage (annual kWh, night usage %, tariff rates).
  • Registration: name, email, username, password.
  • Cookies: only essential first-party cookies (session ID, GuestID, JWT, timezone, consent logs). No analytics, advertising, or tracking cookies. See our Cookie Policy.

For companies

  • Public company and director information from Companies House and Google Places APIs.
  • Quote details entered into the system, such as number of panels, system size, and generation estimates.
  • Optional payment method details for how quotes are structured.

Guest mode and consent logging

Before you log in or provide personal data, we treat you as a guest using a pseudonymous GuestID. When you tick a consent box, we log a timestamped entry with the current policy version. If you later provide contact details, we link that consent to your account. See our GDPR Compliance page for details.

How we use your information

  • To provide our services, including comparisons and project matching.
  • To connect users with vetted companies, only when their services match your request.
  • To send necessary service emails (activation, password reset, project updates).
  • To improve the platform through aggregated internal metrics.
  • With consent, to send marketing emails from our own servers.

Who we share data with

We do not sell your data. Project and contact details are only shared with subscribed providers when their services match your request. We may also share data when required by law or to protect our rights.

Legal bases for processing

  • Contract: to process requests and deliver comparisons, quotes, and projects.
  • Legitimate interests: to operate a secure, functional website (essential cookies, GuestID, rate limiting, fraud prevention).
  • Consent: for policy acceptance, optional marketing, and for enabling Google Maps/Places on comparison pages.

Retention of data

  • Project and quote data: kept until complete, then up to 6 years for legal/contractual purposes.
  • User accounts: inactive accounts may be deleted after 24 months.
  • Consent logs: retained as long as legally required.
  • Data may be deleted sooner if you request it.

Security

We use Cloudflare protection, HTTPS, hashed and salted passwords, rate limiting, and one-time access forms. Personal data is restricted to authorised staff only.

International transfers

Our servers are hosted in the United States with safeguards that meet UK GDPR requirements. If you enable Google Maps/Places on comparison pages, Google may process data on its own infrastructure, which may involve international transfers under Google’s terms.

Your rights

  • Right to access: request a copy of your data.
  • Right to rectification: correct inaccurate data.
  • Right to erasure: request deletion of your data.
  • Right to restrict processing: limit how data is used.
  • Right to data portability: receive data in a machine-readable format.
  • Right to object: stop certain processing such as marketing.
  • Right to withdraw consent at any time.

Children

Our service is not directed at children. We do not knowingly collect personal data from under-13s.

Changes to this policy

We may update this Privacy Policy. Updates will be posted here with a new “last updated” date.

Contact us

Regulator

You can also complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/