Privacy notice
Last updated: 7 September 2026
Who controls your information
Sonic Studio Ltd, trading as Sussex Solar Quotes, is the controller of the personal information collected through this service. Company number 15877834. Registered office: 37a Ventnor Villas, Hove, United Kingdom, BN3 3DA. Contact: hello@sussexsolarquotes.com.
Information we collect
We collect the information entered into the registration form: name, email address, postcode, property ownership, property type, project interest, roof type, approximate electricity spend, preferred timing, contact preference and preferred contact time. A phone number is required if you choose phone or either contact method; it is optional for email-only enquiries.
We also record a unique submission reference, submission time, source page, referral and advertising attribution information included in the page address, the version of the wording you accepted, your privacy acknowledgement, and operational statuses used to review and manage the enquiry. Netlify may also record limited technical information, such as IP address and browser information, to receive and protect the submission.
Why we use it and our lawful basis
We use the information to hold and review your registration, understand likely project suitability, contact you about the requested service, prevent misuse or duplicate requests, measure which parts of the website generate useful enquiries, keep a necessary audit trail and administer the service.
We rely on legitimate interests in responding to requested registrations, improving and securing the service, and keeping proportionate business records. We balance those interests against your rights and limit our use to what you would reasonably expect from your request. We do not treat a registration as permission to send unrelated electronic marketing.
Sharing and installer introductions
When you continue from the postcode step, your browser sends the postcode to Postcodes.io, operated by Ideal Postcodes, to check that it exists and identify its administrative area. That service also receives your IP address as part of the connection. We do not send it your name, email, phone number or other form answers. We record the lookup outcome and district with your registration. A lookup does not verify that you live at or own the property. If the lookup is unavailable, we can accept the registration for manual area review.
Our service providers process information for us where needed to host the website, receive forms, store lead records and send operational messages. These currently include Netlify, Airtable and Google email services. Their processing and storage may involve countries outside the UK. Where required, we rely on appropriate contractual or other legal safeguards.
Installer sharing is not currently active. Registering does not authorise an unnamed installer to contact you. If we identify a possible match, we will tell you the installer’s identity and request the permission needed before releasing your contact details. Any installer receiving information would act as a separate controller under its own privacy notice.
We may also disclose information where required by law, to protect legal rights, or in connection with a business reorganisation subject to appropriate safeguards.
How long we keep it
We review unmatched registrations after 60 days. We normally delete an unmatched or inactive registration from Airtable and Netlify at the first daily check after 90 days from submission.
The 90-day deletion does not apply while we are in an active conversation with you, where you have agreed to a specific installer introduction, where you have asked us to retain the request for a stated reason, or where a longer period is reasonably required by law or for a legal claim. Active enquiries are reviewed when the conversation ends. Records needed to manage an agreed introduction, resolve a complaint, meet accounting requirements or establish or defend legal claims may be retained for up to six years, but we will keep only what is reasonably necessary.
If you object to contact, we may retain a minimal suppression record for as long as needed to respect that objection. When deletion runs, we may keep a minimal log containing the submission reference, deletion date, systems covered and outcome. The deletion log does not contain the original contact details or form answers. Completed deletion logs are removed after 12 months. We keep unresolved failure records until the problem has been dealt with.
Deletion uses the enquiry status, recorded activity and retention exceptions. Records with an active status, recorded follow-up activity, an installer introduction or an unresolved exception are kept for review.
Security
We restrict access to the systems used to receive and store requests and use access controls appropriate to a small business. No online service can guarantee absolute security. If we identify a personal data breach, we will assess and report it where the law requires.
Your rights
Depending on the circumstances, you may ask for access to, correction of, deletion of, or restriction of your personal information, or object to our use of it. You may also ask for certain information in a portable format. The right to object to processing based on legitimate interests is specifically available to you.
To exercise a right, email hello@sussexsolarquotes.com. We may need to verify your identity. You may complain to the Information Commissioner’s Office at ico.org.uk.
Cookies and local storage
We use Google Ads measurement only if you select “Accept measurement”. Until then, Google’s advertising tag is blocked. If you accept, Google receives technical information such as your IP address, browser and page details, advertising click identifiers and a randomly generated registration reference when your form is accepted. This helps us understand which adverts bring registrations. We do not send your name, email, phone number or form answers to Google through this tracking, and enhanced conversions and advertising personalisation are disabled.
You can reject measurement and still use the form. Use “Cookie settings” at the bottom of any page to change your choice. We remember that choice in your browser for up to 180 days. Google’s advertising measurement cookies can last up to 90 days. Withdrawing permission stops future measurement; it does not undo information already sent. Google may process information outside the UK under its applicable data protection arrangements. Read how Google uses information from partner sites.
The form also uses browser session storage after successful submission to display a summary and reference and help prevent the same email and postcode being submitted again in the same tab within 30 minutes. The duplicate check stores a one-way hash rather than the plain email address. That hash is personal data. This storage lasts for the tab’s session and is not used for advertising. Advertising attribution in the page address may be submitted with the form.
Changes
We may update this notice when the service, retention process or providers change. The date above shows the latest revision.