Privacy policy

Section 1

Who we are

The Solar League is published by [Entity name] (company number [company number]), whose registered office is at [registered office address]. We are the data controller for the personal data described here. We are registered with the Information Commissioner's Office under reference [ICO number].

For any question about this policy or your data, contact us at data@thesolarleague.uk.

Section 2

The data we hold

• Public register and company data. We compile information from public sources, including Distribution Network Operator connection registers, MCS, REPD, HM Land Registry and Companies House. Some of this, such as the names of persons with significant control recorded at Companies House, is personal data.
• Contact data. Where we invite an organisation to review its entry, we hold a business contact name and email address, sourced from public listings or provided to us.
• Verification data. If you review or correct an entry, we record what was changed, when, and the name, role and email of the person who made the change.
• Website data. We use privacy-respecting analytics [analytics tool to confirm]. We do not use advertising cookies.

Section 3

Why we use it, and our lawful basis

• Legitimate interests. To compile and publish a public-interest record of commercial rooftop solar and to attribute it accurately to the organisations responsible. We have assessed that this is proportionate and does not override individuals' rights. You can ask us for our legitimate interest assessment.
• Consent. For any newsletter or marketing email, which you can withdraw at any time.

Section 4

What we publish

We publish figures at the level of the organisation: counts, total capacity and rankings. We do not publish the underlying registry rows, the addresses of individual buildings, or any map linking a specific installation to a specific owner.

Section 5

Who we share it with

We use service providers for hosting and email delivery, who process data on our behalf under contract. We do not sell personal data.

Section 6

How long we keep it

We keep register-derived data for as long as the League is maintained, and contact data until you ask us to remove it. [Confirm retention periods.]

Section 7

Your rights

You have the right to access your personal data, and to ask us to correct it, erase it, restrict or object to its use, or provide it in a portable form. You also have the right to complain to the Information Commissioner's Office at ico.org.uk. To exercise any of these rights, contact data@thesolarleague.uk.

Section 8

International transfers

Where a service provider is located outside the UK, we rely on appropriate safeguards for any transfer of personal data. [Confirm providers and safeguards.]

Section 9

Changes to this policy

We will post any changes to this policy here and update the date shown above.