Privacy Policy

Watt & Waves (Watt & Waves Ltd, company number 08132241) is the data controller for personal data collected through this website.

Our contact details:

• Address: Unit 1, Exeter Business Park, Station Road, Exeter, Devon, EX1 0AA
• Email: Show email
• Phone: Show phone
• Data protection contact: Show privacy email

If you have any questions about how we handle your personal data, contact us using the details above.

We collect personal data from the following sources:

2.1 Quote form (Page 5)

When you request an estimate through our website, we collect:

• Your details: Name, email address, phone number
• Your property: Address (including postcode), property type (home or workplace), number of bedrooms or floor area, power supply type (for workplaces)
• Your preferences: Goals and priorities (e.g., reduce bills, increase resilience), preferred system size, panel location (pitched roof, flat roof, or ground-mounted), interest in battery storage and EV charging, installation timeline
• Your role: Whether you are a homeowner, landlord, tenant, or potential buyer
• Security and validation data: Cloudflare Turnstile token, technical anti-abuse metadata, and passive phone-validation result where available

2.2 Survey form (Page 7)

If you complete our online survey tool to help prepare a detailed quote, we additionally collect:

• Roof details: Orientation, pitch, shading information, outline drawings (pin-drop location data and drawn boundaries)
• Property photos: Photos of your roof, consumer unit, proposed battery location, and proposed EV charger location
• Technical details: Consumer unit location, distances between equipment locations
• Energy usage: Electricity bill band, current tariff information

2.3 Results page (Page 6) and estimate interactions

When you view and interact with your estimate, we record:

• Your selections: System options chosen (solar size, battery, EV charger), package total
• Your actions: Whether you saved your estimate, booked a survey, requested a callback, or started the online survey
• Communication preferences: How you prefer to be contacted (phone, email, text/SMS, WhatsApp)

2.4 Website usage

When you visit our website, we automatically collect:

• Technical data: IP address, browser type and version, operating system, device type, screen resolution
• Usage data: Pages visited, time spent on each page, referral source (how you found us), links clicked
• Cookie data: As described in our Cookie Policy

Some technical and security data is processed as part of running and protecting the website. Analytics cookie data is only processed where you have given consent through our cookie preferences panel.

2.5 Communications

If you contact us directly, we may collect:

• Email correspondence: The content of emails you send to and receive from us
• Phone records: A record that a call took place, its duration, and any notes taken during the call

2.6 Third-party sources

We may obtain data from external sources to improve the accuracy and integrity of your estimate:

• EPC data: Your property's Energy Performance Certificate rating, obtained via the publicly available EPC register API
• Address data: Address lookup and validation data from our address verification provider
• Phone validation data: Passive validation data from our phone-validation provider where a phone number is supplied

Under UK data protection law, we must have a lawful basis for processing your personal data. The table below explains what we use your data for and the legal basis we rely on.

What "legitimate interests" means: Where we rely on legitimate interests, we have carried out a balancing test to ensure our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests — see section 8.

3.1 Do You Have to Provide Your Data?

Some data is required for us to provide the service you have asked for. Other data is optional.

We use your personal data for the following specific purposes:

1. Preparing and delivering your estimate — We use your property details, preferences, and system choices to generate a tailored estimate showing recommended system sizes, indicative pricing, and expected savings.

2. Contacting you about your enquiry — We use your name, email, and phone number to follow up on your estimate, answer questions, and arrange next steps (such as a site survey or callback).

3. Matching you with a partner installer — Watt & Waves operates as a service that connects homeowners with qualified, accredited installer partners. We share relevant details of your enquiry with the installer partner best placed to serve your area and requirements. See section 5 for full details.

4. Improving our service — We use anonymised and aggregated website usage data to understand how visitors use our website, identify areas for improvement, and monitor the performance of our service.

Where analytics cookies are used, we only collect this data where you have consented through our cookie preferences panel.

1. Fraud prevention and security — We use Cloudflare Turnstile to verify that form submissions come from real people, not automated bots. Where you provide a phone number, we may also run a passive validation check to reduce duplicate, incomplete, or fraudulent submissions without requiring a separate verification step.

2. Record-keeping and compliance — We keep records of enquiries, estimates, and communications to comply with tax, consumer protection, and other legal obligations.

We share your personal data with the following categories of recipients:

5.1 Partner installer companies

Watt & Waves operates as a white-label service that connects homeowners with qualified installer partners. When you submit an enquiry, we share your name, contact details, property address, and system preferences with the partner installer allocated to your area.

The partner installer becomes a separate data controller for the personal data we share with them. They will contact you directly to progress your enquiry, conduct a site survey, and provide a formal quote. Their own privacy policy will apply to the data they hold about you.

We only share your data with installers who are:

• MCS-certified (Microgeneration Certification Scheme)
• Vetted and approved by Watt & Waves
• Bound by a data sharing agreement that requires them to protect your data

5.2 Cloud service providers

5.3 Analytics and tracking providers

These providers only receive data if you consent to analytics and/or marketing cookies. See our Cookie Policy for details.

5.4 Calendar and booking providers

If you book a survey or callback through our website, your booking details (name, contact details, preferred date/time) are shared with our calendar integration provider to schedule the appointment.

5.5 Address, phone validation, and EPC data providers

We use third-party services to look up your address from your postcode, run passive phone validation checks where a phone number is supplied, and retrieve your property's EPC rating from the public register.

5.6 Professional advisers

We may share your data with our accountants, lawyers, and insurers where necessary for business administration, legal advice, or insurance purposes.

5.7 Law enforcement and regulators

We will share your data with law enforcement agencies, regulators, or other authorities if we are legally required to do so, or if we reasonably believe disclosure is necessary to prevent fraud, protect our rights, or comply with a legal obligation.

We never sell your data

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

Some of the third-party services we use may process your data outside the United Kingdom.

Where your data is transferred outside the UK, we ensure it is protected by one of the following safeguards:

• UK adequacy regulations — The UK government has confirmed that the country or territory provides an adequate level of data protection.
• International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses — Contractual safeguards approved by the ICO.
• UK Extension to the EU-US Data Privacy Framework — For transfers to certified US organisations.

If you would like more information about the safeguards we use, please contact us.

We do not keep your data for longer than we need to. The table below sets out our retention periods.

When the retention period expires, we securely delete or anonymise your data. Anonymised data (which cannot identify you) may be retained indefinitely for statistical and business analysis purposes.

Under UK data protection law, you have the following rights over your personal data. These rights apply to all the personal data we hold about you, regardless of how we collected it.

8.1 Right of access (Subject Access Request)

You can ask for a copy of the personal data we hold about you. We respond within one month, free of charge. If your request is complex or repeated, we may extend by up to two months and will tell you within the first month.

8.2 Right to rectification

If your data is inaccurate or incomplete, you can ask us to correct it. We will do so within one month.

8.3 Right to erasure ("right to be forgotten")

You can ask us to delete your personal data. We will do so unless we have a legal obligation to keep it (for example, financial records required by HMRC) or we need it for the establishment, exercise, or defence of legal claims.

8.4 Right to restrict processing

You can ask us to temporarily stop processing your data in certain cases, for example while we verify accuracy or consider an objection.

8.5 Right to data portability

Where we process your data based on your consent or to fulfil a contract, and the processing is carried out by automated means, you can ask us to provide your data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider.

8.6 Right to object

You can object where we rely on legitimate interests. We will stop unless we have compelling grounds that override your rights, or we need the data for legal claims.

Direct marketing: You have an absolute right to object to the use of your data for direct marketing at any time. If you object, we will stop immediately. You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any email, or by contacting us.

8.7 Rights related to automated decision-making

See section 9 below for details on how we use automation and your rights in relation to it.

How to exercise your rights

To exercise any of these rights, contact us at:

• Email: Show privacy email
• Post: Data Protection, Unit 1, Exeter Business Park, Station Road, Exeter, Devon, EX1 0AA

We may ask you to verify your identity before acting on your request. We respond within one month.

What automation do we use?

When you complete our quote form, our website automatically generates an estimate based on the information you provide. The estimate includes a recommended system size, indicative pricing, expected energy generation, and estimated savings.

How does it work?

The estimate is calculated using a rules-based system that considers:

• Your property type and size (number of bedrooms or floor area)
• The system size you selected (or our recommendation if you chose "not sure")
• Whether you are interested in battery storage and/or an EV charger
• Your installation location (pitched roof, flat roof, or ground-mounted)
• General regional data for energy generation in Exeter and Devon

The system matches these inputs against a pricing and performance lookup table to produce an indicative estimate.

Is this a binding decision?

No. The automated estimate is an indicative starting point only. It is not a binding offer, a formal quote, or a decision that determines whether you can access our services. Everyone who completes the form receives an estimate.

A formal, binding quote is only issued after a human-led site survey, where one of our surveyors (or a partner installer's surveyor) visits your property, assesses the installation in person, and prepares a detailed design and fixed-price quote. The final price may differ from the online estimate.

Your rights

We do not consider the automated estimate to be a solely automated decision that produces legal effects (or similarly significant effects) under Article 22 UK GDPR. This is because the estimate is indicative only and any binding quote is produced after human review. We are committed to transparency:

• You can ask how your estimate was calculated — Contact us and we will explain the inputs and logic used.
• You can request human review — If you believe your estimate is inaccurate or does not reflect your circumstances, contact us and a member of our team will review it manually.
• You can contest the output — You are not bound by the estimate in any way. You can adjust your selections on the results page or request a site survey for a precise quote.

If you are unhappy with how we have handled your personal data, please contact us so we can put things right.

Step 1: Contact us

Please contact our data protection contact first:

• Email: Show privacy email
• Phone: Show phone
• Post: Data Protection, Unit 1, Exeter Business Park, Station Road, Exeter, Devon, EX1 0AA

We will acknowledge your complaint within 5 working days and aim to resolve it within 20 working days.

Step 2: Complain to the ICO

If you are not satisfied with our response, or if you prefer to complain directly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

The ICO recommends that you raise concerns with us first before contacting them, but you are not required to do so.

We may update this privacy policy to reflect changes in our practices, legal requirements, or regulatory guidance. For material changes, we will:

• Update the "last updated" date at the top of this page
• Where appropriate, notify you by email or by a prominent notice on our website

The current version will always be available at /privacy-policy.

Last updated: [To be set on publication]

If you have any questions about this privacy policy or how we handle your personal data, contact us:

• Email: Show privacy email
• Phone: Show phone
• Post: Data Protection, Watt & Waves (Watt & Waves Ltd), Unit 1, Exeter Business Park, Station Road, Exeter, Devon, EX1 0AA