Privacy Policy

Personal information you provide to us:

• Name, email address, and phone number

• Physical address and property details

• Communication records and preferences

• Payment and billing information

Information we collect automatically:

• Website usage data (pages visited, time spent)

• Technical data (IP address, browser type, device type)

• Location data (based on IP address)

• Cookies and similar tracking technologies

We use your information to:

• Provide solar, HVAC, and renewable energy quotes and assessments

• Communicate with you about your project and installation

• Schedule surveys, consultations, and installations

• Send service updates, maintenance reminders, and newsletters

• Improve our services, products, and website functionality

• Comply with legal and regulatory obligations

• Investigate and prevent fraud or security issues

We do not sell or rent your personal data to third parties.

• We may share your information with:

• Trusted engineers, contractors, and installation teams

• Equipment suppliers and manufacturers

• MCS (Microgeneration Certification Scheme) and HIES (Heat Institute Energy Service) for certification

• Payment processors (PCI DSS compliant)

• Regulatory bodies when required by UK law

• Professional advisors (accountants, solicitors) as needed

We implement comprehensive security measures:

• Technical safeguards: SSL encryption, secure servers, firewalls

• Organizational measures: access controls, staff training, confidentiality agreements

• UK-based servers to comply with data protection laws

• Limited access restricted to authorized employees only

• Regular security reviews and vulnerability assessments

• We maintain industry-standard security practices to protect your data

You have the following rights:

• Right of access: request a copy of your personal data

• Right to rectification: correct inaccurate data

• Right to erasure: request deletion of your data

• Right to restrict processing: limit how we use your data

• Right to data portability: receive your data in a portable format

• Right to object: object to certain types of processing

• Right to withdraw consent: withdraw consent at any time

• To exercise any of these rights, contact us using the details below

We retain personal data for the following periods:

• Quote requests: 2 years (unless you become a customer)

• Customer records: 7 years (for accounting and legal purposes)

• Marketing communications: until you unsubscribe

• Website analytics: 26 months

• Financial records: 7 years (per UK tax requirements)

• After retention periods, we securely delete or anonymize your data

If you have questions about our privacy practices or wish to exercise your rights, contact us:

• Email: info@crgdirect.co.uk

• Phone: +44 330 133 2497

• Address: CRG Direct Ltd, Hayling Island, Hampshire

• We will respond to your inquiries within 30 days