Privacy Policy

Scope of This Privacy Policy

This privacy policy applies between you, the User of this Website, and HDM Solar, the owner and provider of this Website. HDM Solar takes the privacy of your information very seriously. This policy governs our collection, use, and protection of any and all Data provided by you or collected through your use of the Website, in compliance with the UK General Data Protection Regulation (UK GDPR).

This privacy policy should be read in conjunction with our Terms and Conditions and, where applicable, our Cookie Policy.

  1. Definitions and Interpretations

In this privacy policy:

  • Data: Collectively all information that you submit to HDM Solar via the Website. This includes, where applicable, the definitions provided in the Data Protection Laws.
  • Data Protection Laws: Any applicable law relating to the processing of personal Data, including but not limited to the UK GDPR and any national implementing or supplementary regulations.
  • HDM Solar, we, or us: HDM Solar of Unit 40 Kingfisher Way, Dinnington, Sheffield, S25 3AF.
  • User, you: Any third party that accesses the Website and is not employed by HDM Solar or otherwise engaged to provide services to HDM Solar.
  • Website: The website www.hdmsolar.co.uk, including any sub-domains, unless expressly excluded by their own terms and conditions.

Interpretation:

  • The singular includes the plural and vice versa.
  • References to clauses or sections are to those within this policy.
  • “Including” means “including without limitation”.
  • References to statutes include amendments and replacements.

2. Scope

This privacy policy applies only to the actions of HDM Solar and Users in relation to this Website. It does not extend to third-party websites accessible through this Website.

For the purposes of applicable Data Protection Laws, HDM Solar is the data controller. This means that HDM Solar determines the purpose for which, and the manner in which, your data is processed.

3. How We Collect Data

We collect Data in the following ways:

  • Data you give to us: e.g. when contacting us via forms, email, post, phone, or applying for credit.
  • Data collected automatically: including IP address, browser type, access times, and pages visited, to improve Website performance.

4. Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

  • Consent – when you have given explicit permission.
  • Contract – to perform or prepare to enter into a contract with you.
  • Legal obligation – where processing is necessary to comply with legal requirements.
  • Legitimate interests – to carry out business operations and fraud prevention, provided your rights do not override these interests.

5. Use of Cookies

We use cookies to track usage and improve Website functionality. You can control cookie preferences via your browser. For more details, refer to our separate Cookie Policy.

6. Children’s Data

We do not knowingly collect data from children under 13. If we become aware of such collection without parental consent, we will delete the data promptly.

7. Credit Checks and Identity Verification

When businesses apply for credit with HDM Solar, we may collect and process:

  • ID documents of company directors (e.g., passport, driving licence)
  • Business registration details (e.g., company number, registered office)
  • Credit history, obtained via a third-party credit reference agency

Purpose:

  • To verify director identities via public records (e.g., Companies House)
  • To confirm authorised representatives are making credit requests
  • To assess creditworthiness and prevent fraudulent applications

Lawful bases:

  • Legitimate interests – responsible lending and fraud prevention
  • Legal obligation – regulatory compliance
  • Contractual necessity – pre-contractual evaluation of credit

Data sharing:

  • Credit reference agencies
  • Public registries (e.g., Companies House)
  • All third parties are bound by UK GDPR-compliant data protection obligations

Retention & security:

  • ID documents are stored securely and access-controlled
  • Retained only as long as necessary for the credit assessment
  • Permanently deleted or anonymised post-retention

8. Third-Party Processors

We may share your Data with trusted service providers to:

  • Host and manage the Website
  • Process communications and enquiries
  • Perform analytics and credit assessments
  • Support marketing and client communications

All processors act only on our instructions and are contractually bound to protect your Data.

9. International Transfers

If we transfer your Data outside the UK, we ensure:

  • The destination has an adequacy decision from the UK Government; or
  • Standard Contractual Clauses (SCCs) are in place to safeguard your rights.

10. Data Security

We implement technical and organisational safeguards including:

  • Password-protected access to systems
  • Secure servers and encrypted communications
  • Internal policies to detect and respond to data breaches

If you suspect misuse or breach of your Data, contact nat@hdmsolar.co.uk.
For personal data security advice, visit www.getsafeonline.org.

11. Data Retention

We retain Data only as long as needed to fulfil the purposes in this policy or legal obligations. Backup copies may be retained for tax, compliance, or dispute purposes.

12. Your Rights

You have the following rights regarding your personal Data:

  • Access – obtain copies of your personal Data
  • Rectification – correct inaccurate Data
  • Erasure – request deletion of your Data
  • Restriction – limit how we process your Data
  • Data Portability – receive your Data in a usable format
  • Object – to processing based on legitimate interest

You may also withdraw consent at any time (if consent is the legal basis for processing).
To exercise your rights or make a complaint, contact: admin@hdmsolar.co.uk
If you remain dissatisfied, you can contact the UK Information Commissioner’s Office (ICO): https://ico.org.uk

13. Links to Other Websites

Our Website may include links to third-party websites. We are not responsible for the content or data handling of external sites. Please review their privacy policies separately.

14. Business Ownership and Data Transfers

If HDM Solar undergoes a business change (e.g., sale, merger), relevant personal data may be transferred to the new owner under the terms of this privacy policy. We will ensure appropriate safeguards are in place.
We may also disclose data to a prospective purchase of our business or any part of it.
In the above instances, we will take the necessary steps to ensure your privacy is protected.

15. General Provisions

  • You may not transfer your rights under this policy to another person or party.
  • We may transfer our rights if we reasonably believe your rights will not be affected.
  • If any clause is deemed unlawful, the remaining provisions remain valid.
  • This policy is governed by the laws of England and Wales, and all disputes are subject to the exclusive jurisdiction of English and Welsh courts.

16. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page and apply from the date of posting.

17. Contact Information

If you have questions or concerns, contact us at

Email: nat@hdmsolar.co.uk

Phone: 0800 0016 802

Postal Address: HDM Solar Unit 40 Kingfisher Way, Sheffield, S25 3AF