Legal
Privacy Policy
How we collect, use, store, and protect your data when you use SurgePV.
Last updated: August 8, 2026
SurgePV Technologies Ltd ("we," "our," "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the SurgePV platform, website, and related services (the "Service").
1. Company Information
SurgePV Technologies Ltd
Apartment 15, Sugar House Lane,
Sugar House Island, Stratford,
London, E15 2ZQ, United Kingdom
SurgePV is a product of SurgePV Technologies Ltd.
Contact: hello@surgepv.com
2. Data We Collect
We collect the following types of information:
- Account Data: Name, business email, login credentials (email/password, Google or Microsoft login).
- Project Data: Solar designs, images, consumption profiles, files (CSV, PDFs, other documents).
- Usage Data: Device information, IP address, browser type, site interactions, analytics.
- Form Data: Information submitted via demo request, contact forms, or newsletter sign-ups.
- Marketing Data: Consent records, campaign engagement.
3. How We Use Data
We use your data to:
- Provide, maintain, and improve the SurgePV Service.
- Generate and manage solar designs, reports, proposals, and collaboration features.
- Communicate with you about your account, billing, or support.
- Send marketing communications when you explicitly request or consent to them.
- Conduct analytics and product improvements.
- Comply with legal obligations.
4. Legal Basis for Processing (GDPR)
We rely on the following lawful bases:
- Contract: To deliver the Service you signed up for.
- Consent: For marketing emails, cookies, and newsletter subscriptions.
- Legitimate Interest: Product improvement, service security, and fraud prevention where those interests are not overridden by your rights.
- Legal Obligation: When required by applicable law.
5. Sharing of Data
We may share data with trusted third-party service providers, including:
- Cloud and website infrastructure providers, including Google Cloud Platform and Cloudflare.
- Consent-enabled analytics providers: Google Analytics, Ahrefs Analytics, and Microsoft Clarity.
- Consent-enabled advertising and visitor-identification providers: Meta and Reb2B.
- Lead processing and communications providers: Resend, Zoho Bigin, WATI, and Pabbly Connect.
- Payment processors used by the SurgePV application where applicable.
We do not sell your personal data.
6. International Data Transfers
Data is hosted on Google Cloud Platform (GCP) in India and may be accessed globally. For EU users, data transfers outside the EEA are covered by Standard Contractual Clauses (SCCs) to ensure GDPR compliance.
7. Data Retention
- We retain personal data as long as your account remains active.
- Project data may be retained up to 2 years after account closure, unless deletion is requested earlier.
- Marketing data is retained until you withdraw consent.
8. Your Rights (GDPR)
EU users have the right to:
- Access their data.
- Request correction or deletion.
- Restrict or object to processing.
- Withdraw consent for marketing at any time.
- Request data portability.
To exercise your rights, contact hello@surgepv.com.
9. Cookies & Tracking
- Essential storage supports security, forms, navigation, and your privacy choice. Optional analytics and marketing technologies load only after the corresponding consent.
- Our cookie banner provides Accept All / Reject All / Manage Preferences.
- Until consent is given, no non-essential cookies (e.g., analytics, retargeting) are set.
- You can reopen the controls at any time using the Cookie settings button.
10. Marketing Communications
- Marketing emails are sent when you explicitly request a subscription or otherwise consent to receive them.
- Each email includes an unsubscribe link.
- Unsubscribing does not affect transactional or service-related communications.
11. Data Security
We implement appropriate technical and organizational measures to protect data, including encryption, access controls, and secure hosting on GCP.
12. Children's Privacy
The Service is intended for business use only and is not directed at individuals under 18. We do not knowingly collect data from minors.
13. Changes to This Policy
We may update this Privacy Policy to reflect product or legal changes. Updates will be posted on our website with a revised "Last Updated" date.
14. Contact
For questions about this Privacy Policy or your data rights:
Have questions about your data?
We're happy to help. Reach out to our team for any privacy-related inquiries.
Contact Us