Privacy Policy

Senergy Solar Cayman Ltd. ("Senergy", "we", "us") designs, supplies, and installs solar and battery systems in the Cayman Islands. This policy explains what personal data we collect through senergysolar.ky and in the course of our work, why we collect it, how long we keep it, and the rights you have under the Cayman Islands Data Protection Act (2021 Revision) (the "DPA").

Senergy Solar Cayman Ltd. is the data controller for the personal data described here.

Who we are and how to contact us

Senergy Solar Cayman Ltd. 372a Shamrock Road, Prospect Park, Patricks Island, Grand Cayman, Cayman Islands

For any question about this policy, or to exercise your rights under the DPA:

• Email: info@senergysolar.ky
• Phone: +1 345-947-3091

Scope

This policy covers senergysolar.ky, our quote and site-review process, and the personal data we handle while designing, installing, and supporting a system. It does not cover other websites we link to, which have their own policies.

The personal data we collect

When you request a quote or site review

Through the form on our website we ask for:

• Your name
• Your email address
• Your phone number
• The type of property (home, condo or strata, business, development)
• An approximate range for your monthly CUC bill
• The best time of day to call you
• What you want solar to help with first
• Which equipment you are interested in, if you have a preference
• Anything you choose to write in the free-text notes field

At this stage we ask for a bill range, not your CUC account number and not a copy of your bill. If a review goes ahead, we may later ask you to send a copy of a recent CUC statement so we can size a system accurately. We will tell you why we need it at the time, and you can decline.

When you contact us directly

If you email, call, or message us, we keep the contact details you use and a record of the correspondence so we can deal with your enquiry and refer back to it later.

If you become a customer

To design and install a system we collect information about the property and the work, which may include roof and structural details, electrical details, energy usage, photographs of the property taken during survey and installation, system design and equipment records, information needed for CUC programme applications and planning permits, and invoicing and payment records.

Automatically, when you visit our website

Our hosting provider records standard technical information such as IP address, browser type, the pages requested, and the time of the request. This is used to keep the site available and secure.

We also use analytics and advertising technologies that collect information about how you use the site. These are described in Cookies, analytics, and advertising below, and the ones that are not strictly necessary run only where you have agreed to them.

Why we use it, and our lawful bases

The DPA requires us to have a lawful basis for each use of your personal data. Ours are:

What we use it for	Lawful basis
Responding to your enquiry and preparing a quote	Steps taken at your request before entering into a contract
Designing, installing, and commissioning a system	Performance of a contract with you
CUC CORE and DER applications, planning permits, inspections	Performance of a contract; compliance with a legal obligation
Invoicing, payments, and accounts	Performance of a contract; compliance with a legal obligation
Warranty registration, servicing, and after-sales support	Performance of a contract; our legitimate interests
Keeping our website and systems secure	Our legitimate interests in running a safe service
Website analytics and session insights	Your consent
Advertising, retargeting, and measuring our ad campaigns	Your consent
Acknowledging your enquiry by email	Steps taken at your request before entering into a contract
Sending marketing or educational emails	Your consent, which you can withdraw at any time
Meeting tax, accounting, and regulatory duties	Compliance with a legal obligation

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we will stop if you tell us the processing is causing you unwarranted damage or distress.

What we do not do

• We do not sell or rent your personal data to anyone.
• We do not pass your contact details to third parties for those third parties' own marketing.
• We do not make decisions about you by automated means alone.
• We do not share the contents of your quote enquiry, your CUC bill, or your property details with advertising networks.

Who we share it with

We share personal data only where it is needed to do the work or where the law requires it:

• Caribbean Utilities Company (CUC) — for CORE, DER, and grid interconnection applications relating to your property
• Department of Planning and other Cayman authorities — for permits and inspections
• Equipment manufacturers and suppliers — for warranty registration and warranty claims
• Subcontractors — such as electrical or roofing trades working on your installation, who are required to keep your information confidential
• Professional advisers — accountants, insurers, and lawyers, where relevant
• Where we are legally required to — for example in response to a lawful request from a regulator or court

Service providers

We use a small number of established providers to run the business and this website. They process personal data on our instructions, or as independent controllers where their own terms say so:

Provider	What they do for us	Where they process data
Brevo	Stores our contact records and sends quote notifications and any marketing email you have opted into	European Union
Netlify	Hosts this website and keeps server logs	United States and global content delivery network
Google Workspace	Provides our company email	United States and globally
Google Analytics	Measures how the website is used	United States and globally
Microsoft Clarity	Produces heatmaps and session recordings so we can see where the site is confusing	United States and globally
Meta Platforms	Advertising, audience building, and measuring ad performance via the Meta Pixel	United States and globally

Cookies, analytics, and advertising

Cookies and similar technologies are small files and identifiers stored on your device. We group ours as follows.

Strictly necessary

Needed for the site to work and stay secure. These run without consent because the site cannot function properly without them.

Analytics and session insight

Google Analytics tells us which pages are visited, how people arrive, and which content is useful. Microsoft Clarity produces heatmaps and records sessions — that is, a replay of mouse movement, clicks, scrolling, and page navigation — so we can see where the site is confusing or broken.

Clarity is configured to mask text entered into form fields, so what you type into the quote form should not appear in a recording. We use these recordings to improve the website, never to identify or profile an individual.

Advertising

When we are running advertising, we use the Meta Pixel to measure how those campaigns perform and to show ads to people who have shown interest in solar. It loads only if you have accepted this category, and only while a campaign is active. This can include building audiences based on pages you have visited on this site, and matching you to a Meta account. Meta acts as an independent controller for some of this activity under its own terms.

Your choices

Analytics and advertising technologies load only where you have consented. You can change or withdraw your choice at any time using the cookie settings on this site, and you can also:

• Opt out of Google Analytics across all sites using Google's browser opt-out add-on
• Manage how Meta uses your data for advertising in your Meta ad preferences
• Read Microsoft's privacy statement for how Clarity data is handled
• Use your browser settings to block or delete cookies, though this may affect how the site works

Withdrawing consent does not affect anything we did lawfully before you withdrew it, and does not stop us responding to a quote request you have already sent.

International transfers

Several of the providers above process data outside the Cayman Islands, principally in the United States and the European Union. The DPA allows this where the destination ensures an adequate level of protection, or where appropriate safeguards are in place. We rely on our providers' contractual data protection commitments, including standard contractual clauses where they apply, and we choose providers that publish a clear data protection position.

How long we keep it

Record	How long
Enquiries that do not lead to a project	24 months from your last contact with us, then deleted or anonymised
Customer system records — design, equipment, installation	For the life of the system warranty and a reasonable period afterwards, because we may need them for warranty claims, servicing, and CUC queries years after installation
Invoicing, payment, and accounting records	For the period required by Cayman Islands tax and companies legislation
Marketing contacts	Until you unsubscribe or ask us to delete you
Website server logs	A short period only, as set by our hosting provider
Analytics, session recordings, and advertising identifiers	For the retention period set by each provider, which is generally between two and twenty-six months

When a retention period ends we delete the data or anonymise it so it can no longer identify you.

Security

We use HTTPS across the website, limit access to customer information to people who need it, and use reputable providers with their own security programmes. No system is completely secure, and we cannot guarantee that data sent over the internet is entirely safe from interception, but we take the protection of your information seriously and will tell you if a breach affects you and the law requires us to.

Your rights under the Data Protection Act

Under the Cayman Islands Data Protection Act (2021 Revision) you have the right to:

• be informed about how we use your personal data — this policy is part of how we do that
• access the personal data we hold about you
• have inaccurate data corrected
• require us to stop processing that is likely to cause you unwarranted damage or distress
• require us to stop processing your data for direct marketing
• require correction, blocking, erasure, or destruction of data in certain circumstances
• not be subject to a decision based solely on automated processing — we do not make decisions this way

To exercise any of these rights, email info@senergysolar.ky. We may need to confirm your identity before we act, so that we do not disclose someone else's information by mistake. We will respond within the timeframe the DPA allows, and there is normally no charge.

Marketing

We only send marketing or educational email to people who have asked for it. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by replying or emailing us.

Unsubscribing from marketing does not stop necessary messages about a quote, an installation, a warranty claim, or an invoice. Those are part of providing the service you asked for.

Children

This website is intended for property owners and decision-makers. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy as the business or the law changes. The date at the top of the page shows when it was last revised. If we make a material change to how we use personal data, we will make that clear rather than relying on a silent update.

Complaints

If you are unhappy with how we have handled your personal data, please contact us first at info@senergysolar.ky — most issues are quickest to resolve directly.

You also have the right to complain to the supervisory authority for data protection in the Cayman Islands:

Office of the Ombudsman (Cayman Islands) ombudsman.ky