Privacy Policy

1. Introduction

Oak Frame Solar is the trading name of NESTI LTD (Company No. 11163863). We are committed to protecting your privacy and ensuring you have a positive experience on our website.

This privacy policy explains how we collect, use, store, and protect your personal information when you use our website, fill out enquiry forms, or use our solar configurator tool.

2. Information We Collect

We collect personal information from you when you voluntarily provide it through our website. This includes:

• Contact information: Name, email address, and phone number
• Location data: Postcode to help us provide location-specific quotes
• Project details: Information about your solar project, property type, and energy requirements provided through our enquiry forms or configurator
• Usage data: Information about how you use our website (collected via Google Analytics)

We do not intentionally collect sensitive personal information such as health data or financial information, except where necessary to provide quotes or deliver services you request.

3. How We Use Your Information

We use your personal information for the following purposes:

• Responding to enquiries: To process your enquiry and provide you with information about our services
• Sending quotes: To create and deliver solar quotes tailored to your project
• Communications: To send you transactional emails such as enquiry confirmations and quote summaries
• Service improvement: To understand how our website and services are used so we can make improvements
• Customer support: To respond to any questions or issues you raise

We will only use your information for the purposes outlined in this policy unless we have your explicit consent to do otherwise.

4. Legal Basis for Processing

Under UK GDPR, we process your personal information based on one of the following legal bases:

• Legitimate interest: We have a legitimate business interest to respond to enquiries, provide quotes, and improve our services
• Consent: Where you have explicitly agreed to receive communications from us
• Contract performance: Where processing is necessary to fulfil a contract you have entered into with us

5. Email Communications

We use Resend to deliver transactional emails to you. This includes enquiry confirmations, quote summaries, and other service-related communications.

Resend is an email delivery service that helps us ensure our emails reach you reliably. Your email address is shared with Resend solely for the purpose of email delivery. Resend commits to protecting your data and complies with UK GDPR and other data protection regulations.

You can manage your email preferences at any time by contacting us at enquiries@oakframesolar.co.uk.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. However, we may share your information with the following partners:

• Resend: For transactional email delivery only
• Netlify: Our website hosting provider, which may process technical data
• Google Analytics: We use Google Analytics to understand how visitors use our website. This data is anonymised and does not identify you personally

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

7. Data Retention

We retain enquiry data for two years from the date of your enquiry or our last communication with you. This allows us to maintain a record of our interactions and provide follow-up support if needed.

After two years, your personal information will be securely deleted. If you request deletion of your data before this period expires, we will honour your request subject to our legal obligations.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal information:

• Right of access: You can request a copy of all personal information we hold about you
• Right to rectification: You can ask us to correct inaccurate or incomplete information
• Right to erasure: You can request deletion of your data (subject to legal obligations)
• Right to restrict processing: You can ask us to limit how we use your information
• Right to data portability: You can request your data in a portable format
• Right to object: You can object to certain types of processing, including direct marketing

To exercise any of these rights, please contact us at enquiries@oakframesolar.co.uk. We will respond to your request within 30 days.

9. Cookies

Our website uses cookies to enhance your browsing experience and analyse website traffic.

Types of Cookies

• Essential cookies: These are necessary for the website to function properly and cannot be disabled
• Analytics cookies: We use Google Analytics to understand how visitors use our website. These cookies help us improve our services

We do not use cookies for advertising or marketing purposes. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

10. Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal information:

• SSL encryption: Our website uses SSL encryption to protect data in transit
• Secure form handling: All form submissions are processed securely
• Access controls: We limit access to personal information to authorised personnel only
• Regular security reviews: We regularly review our security practices to identify and address vulnerabilities

While we implement strong security measures, no system is completely risk-free. We cannot guarantee absolute security, but we are committed to protecting your data.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by updating the "Last updated" date at the top of this page.

Your continued use of our website following any changes indicates your acceptance of the updated privacy policy.

12. Contact Us

If you have any questions about this privacy policy, your data, or how we handle your information, please contact us:

If you believe we have breached your privacy rights or you are unhappy with how we have handled your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent authority for data protection.