GDPR Compliance

Last updated: 18 June 2026

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

This page explains how we comply with GDPR principles and what rights you have regarding your personal information.

Lawful Basis for Processing

We process your personal data under the following lawful bases:

• Consent: When you submit an inquiry form, you provide explicit consent for us to process your information to respond to your request.
• Legitimate Interest: We have a legitimate interest in analyzing website usage patterns to improve our services, provided this does not override your rights.

Data Minimization

We collect only the personal information necessary to fulfill your inquiry. Our forms request minimal data: name, email address, service selection, and optional additional details.

We do not collect sensitive personal data or information beyond what is relevant to providing solar installation services.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of all personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing based on legitimate interests.
• Rights Related to Automated Decision Making: We do not use automated decision-making or profiling.

Exercising Your Rights

To exercise any of your GDPR rights, send a request to info@valley-puma.com. Include sufficient information to identify yourself and specify which right you wish to exercise.

We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you if this occurs.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data appropriately.

Data Retention

We retain personal information submitted through inquiry forms for two years from the date of submission. This allows us to reference previous inquiries if you contact us again.

For active clients with completed installations, we retain records for seven years to fulfill warranty obligations and legal requirements.

International Data Transfers

We do not transfer personal data outside the United Kingdom or European Economic Area. All data storage and processing occurs within UK-based infrastructure.

Data Breach Procedures

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ICO within 72 hours of becoming aware of the breach.

Contact

For questions about GDPR compliance or to exercise your data protection rights, contact info@valley-puma.com.