Skip to content

0% VAT on solar & battery installations until March 2027Learn more

Green Hat Renewables

Privacy Policy

How Green Hat Renewables collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

Last updated: 1 January 2026

1. Data Controller

Green Hat Renewables is the data controller responsible for your personal data. Our contact details are:

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: full name, title
  • Contact data: email address, telephone number, postal address, postcode
  • Property data: property type, roof orientation, energy usage, EPC rating, and other information relevant to providing an accurate quotation
  • Financial data: payment details necessary to process transactions
  • Technical data: IP address, browser type and version, time zone, operating system, and platform when you visit our website
  • Usage data: information about how you use our website
  • Communication data: records of correspondence between you and Green Hat Renewables

3. How We Use Your Data

We use your personal data for the following purposes:

  • To provide you with a quotation for our services
  • To carry out site surveys and assessments
  • To fulfil our contractual obligations, including installation, commissioning, and aftercare
  • To register your installation with MCS, Ofgem, your DNO, or other relevant bodies
  • To process payments and manage your account
  • To communicate with you about your project, including updates and scheduling
  • To comply with legal and regulatory obligations
  • To improve our website and services
  • To send you marketing communications where you have opted in to receive them

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the UK GDPR:

  • Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., providing a quotation, carrying out an installation).
  • Legal obligation: Processing is necessary for compliance with a legal obligation (e.g., MCS registration, building regulations, tax requirements).
  • Legitimate interests: Processing is necessary for our legitimate interests, such as improving our services and maintaining our business records, provided these interests do not override your rights.
  • Consent: Where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Quotation data for enquiries that do not proceed: 12 months from the date of the quotation
  • Contract and installation records: for the duration of any warranty period, or a minimum of 10 years, to comply with MCS requirements and building regulations
  • Financial records: 7 years in line with HMRC requirements
  • Marketing consent records: until you withdraw your consent
  • Website analytics data: 26 months

6. Data Sharing

We may share your personal data with the following categories of third parties where necessary:

  • MCS (Microgeneration Certification Scheme) for installation registration and compliance
  • Ofgem for Smart Export Guarantee and Boiler Upgrade Scheme applications
  • Your local Distribution Network Operator (DNO) for grid connection applications
  • Product manufacturers for warranty registration
  • RECC (Renewable Energy Consumer Code) in connection with complaints or compliance
  • Our accountants and professional advisers where required by law
  • Payment processors for handling transactions securely

We do not sell your personal data to any third party. We do not transfer your data outside the United Kingdom unless required to do so by a product manufacturer's warranty registration, in which case appropriate safeguards will be in place.

7. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data.
  • Right to erasure: You have the right to request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
  • Right to data portability: You have the right to request transfer of your personal data to another party in a structured, commonly used format.
  • Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@greenhatrenewables.co.uk. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

  • Strictly necessary cookies: Required for the website to function correctly. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with our website so we can improve it. These are only set with your consent.
  • Marketing cookies: Used to track visitors across websites to display relevant advertisements. These are only set with your consent.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure storage systems, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

You also have the right to make a complaint to the Information Commissioner's Office if you believe your data protection rights have been breached:

This privacy policy applies to Green Hat Renewables and all services provided by us. For information about our terms of service, please see our Terms and Conditions.