Privacy policy

1. Who we are

This website is operated by RVTC LTD, trading as STS Solar Tech Support ("we", "us", "our"). We are a company registered in England and Wales, company number 16980210. Our registered office is 139 Barnsley Road, Cudworth, Barnsley, S72 8UT, United Kingdom.

STS Solar Tech Support provides independent solar diagnostic, repair and technical-support services for solar PV and battery storage systems across the United Kingdom.

For any privacy-related question, contact us at [email protected].

2. Information we collect

When you submit a form on this website, request a remote diagnostic, book a callout, or otherwise contact us, we collect the personal data you provide. This typically includes:

• Your name
• Email address
• Phone number
• Postcode or site address (for callout enquiries)
• Information about your solar system — brand, age, fault symptoms, monitoring screenshots, photos
• The content of any free-text messages you send us
• Any additional information you choose to provide

We do not collect bank-account, card-payment, or special-category personal data through this website. Payments are processed via separate invoice / payment-link flows where standard PCI-DSS card-handling applies.

We also collect a small amount of technical data — IP address, browser type, referring page — via standard server logs and privacy-respecting analytics. This is used to understand how the site is performing, not to identify individuals.

3. How we use your information

We use the personal data you give us to:

• Respond to your enquiry and provide the diagnostic or support you have asked for
• Arrange site visits, remote diagnostic sessions, or repair work
• Send written reports, quotes and follow-up materials specific to your enquiry
• Maintain a record of customer enquiries and the work we have done (required for warranty, insurance and complaints purposes)
• Comply with our legal obligations (HMRC, electrical-safety regulations, RIDDOR where applicable)
• Improve the website, our services, and the content we publish

We never sell or rent your personal data. The only advertising-related use of your data is the Meta (Facebook) Pixel described in section 5, which operates only if you accept advertising cookies via our cookie banner.

4. Legal basis for processing

Under the UK GDPR and Data Protection Act 2018, we rely on the following lawful bases:

• Contract — where you have asked us to provide a service, we process your data to perform that contract (e.g. to book a callout, run a diagnostic, send a quote).
• Legitimate interests — where you have contacted us without a service yet being agreed, we rely on our legitimate interest in responding to enquiries. This basis is balanced against your rights.
• Legal obligation — to comply with tax, regulatory and safety record-keeping requirements.
• Consent — for optional marketing email (only if you tick the marketing opt-in on a form), and for advertising cookies and the Meta (Facebook) Pixel (only if you accept them via our cookie banner). You can withdraw consent at any time.

5. Forms, third-party processors and where your data goes

Forms on this website are submitted to Formspree, our form-handling provider. Formspree forwards each submission to our email and stores a copy on its servers (US/EU); we have a data-processing agreement in place. Formspree's processing is governed by their own privacy policy.

We use Cloudflare Turnstile as a privacy-preserving alternative to CAPTCHA to filter form spam. Turnstile assesses traffic patterns rather than identifying users individually.

This site is hosted on Cloudflare Pages. Cloudflare processes IP addresses and request logs in its role as our hosting and CDN provider.

If you accept advertising cookies via our cookie banner, we use the Meta (Facebook) Pixel to measure how our adverts perform and which pages visitors view. The Pixel sets cookies and may send Meta limited, hashed identifiers — such as a hashed email address or phone number taken from a form you submit — so activity can be matched to our ad campaigns (known as “advanced matching”). Meta processes this data as an independent controller under the Meta Privacy Policy. If you decline, the Pixel does not load and no advertising cookies are set — only functional cookies (e.g. your consent choice) and privacy-respecting analytics are used. You can change your choice at any time by clearing this site’s cookies.

6. How long we keep your data

We keep personal data only as long as we need it for the purpose for which it was collected:

• Enquiry-only contacts (no service agreed) — up to 24 months, then deleted.
• Customer records (where we have done work) — 7 years from the last service date, to meet HMRC requirements and to satisfy insurance / warranty record-keeping. After that, records are deleted or anonymised.
• Marketing-opt-in contacts — until you unsubscribe or after 24 months of no engagement.
• Server / analytics logs — typically 90 days at the hosting layer.

7. Data security

We take reasonable technical and organisational measures to protect personal data, including encrypted transmission (HTTPS everywhere on this site), restricted access to customer records, and the use of reputable third-party processors with data-processing agreements in place.

No system is completely secure. If a personal-data breach occurs that is likely to risk your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, notify you directly.

8. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have data deleted where one of the legal grounds for erasure applies
• Restrict or object to our processing
• Receive a portable copy of your data
• Withdraw consent at any time (where consent is the lawful basis)
• Complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint

To exercise any of these rights, email [email protected] and we will respond within one month.

9. External links

This website contains links to third-party websites — manufacturer documentation, the DNO portal, Google Business Profile, and so on. We are not responsible for the privacy practices or content of external sites. Read their privacy policies before submitting personal data to them.

10. Children's privacy

This website is intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided personal data to us, contact us and we will delete it.

11. Changes to this policy

We review this policy at least annually and update it when our practices change. The current version is always published at this URL with the date of the last update.

12. Contact us

For any question or request about your personal data:

• Email: [email protected]
• Phone: 07944 877 329
• Post: 139 Barnsley Road, Cudworth, Barnsley, S72 8UT, United Kingdom

If you are not satisfied with our response, you can complain to the Information Commissioner's Office: ico.org.uk.