Privacy Policy

A legal disclaimer

We take your privacy very seriously.

Please read this privacy notice carefully as it contains important information about who we are and how and why we collect, store, use and share your personal information. It also explains your rights in relation to your personal information and how to contact us or the Information Commissioner’s Office (“ICO”) if you have a question or a complaint.

Our use of your personal information is governed by the UK General Data Protection Regulation (“UK GDPR”) and the UK Data Protection Act 2018 and other privacy laws which apply in the United Kingdom (the “Data Protection Laws”). Where we decide how and why your personal information is processed, we are the “Controller” of that personal information and are responsible for complying with the Data Protection Laws.

Key terms

Here are some of the key terms used in this notice: We, us, our2Rays Solar Ltd
Personal information
Any information relating to an identified or identifiable individual
Special category personal information
Personal information revealing racial or ethnic origin, political opinions, religious beliefs, philosophical beliefs or trade union membership
Genetic or biometric data processed to uniquely identify an individual
Data concerning health, sex life or sexual orientation

How to contact us

If you have any questions about this privacy notice or the information we hold about you, please contact us by post, email or telephone using the details below.

Our Contact Details

enquiries@2rays.co.uk

0121 485 0023

Changes to this privacy notice

This privacy notice was published on 28th February 2025 and last updated on 28th February 2025.

We may change this privacy notice from time to time – when we do we will inform you via our website or email.

Personal information we collect about you

We may collect, use, store and transfer personal information about you which we have grouped together as follows:

Identity Data: including your first and last name, any previous names, username or similar identifier, marital status, title, date of birth, location (if you choose to give that to us) and gender (if you choose to give that to us);
Contact Data: including email address, billing address, delivery address and telephone number and company details;
Financial Data includes bank account and payment card details;
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us;
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website;
Profile Data includes your username and password, purchases or orders made by you, your personal and professional interests, your professional online presence (e.g., LinkedIn), information from accounts you link to us (e.g., Facebook), preferences, feedback and responses to surveys, competitions and promotions;
Usage Data includes information about how you interact with and use our website, products and services; and
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Some of this personal information is required to provide our products and services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing our products and services to you.

How and why we use your personal information

The Data Protection Laws require us to have a legal basis for collecting and using your personal information. We rely on one or more of the following legal bases:

To comply with our legal and regulatory obligations: We may use your personal information where it is necessary for compliance with a legal obligation that we are subject to;
For the performance of our contract with you or to take steps at your request before entering into a contract: Where we need to perform the contract we are about to enter into or have entered into with you;
For our legitimate interests or those of a third party: We may use your personal information where it is necessary to pursue our legitimate interests, for example to conduct our business, to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal information for our legitimate interests. Where we process your personal data for our legitimate interests, we do not use your personal information for activities where our interests are overridden by the impact on you; or
Where you have given consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

The below explains what we process your personal information for and our reasons for doing so

What we use your personal information for:

Type of Data
Legal Basis
To provide our products and services to you
Identity
Contact
Financial
Transaction
Marking and Communications
For the performance of our contract with you or to take steps at your request before entering into a contract
To prevent and detect fraud
Identity
Contact
Technical
For our legitimate interests or those of a third party, i.e. to minimise fraud that could be damaging for us and for you
Conducting checks to identify our customers and verify their identity
Screening for financial and other sanctions or embargoes
Other processing necessary to comply with professional, legal and regulatory obligations that apply to our business, e.g. under health and safety regulation or rules issued by our professional regulator
Identity
Contract
Financial
To comply with our legal and regulatory obligations
Gathering and providing information required by or relating to audits, enquiries or investigations by regulatory bodies
Identity
Contact
Transaction
Technical
Profile
Usage
To comply with our legal and regulatory obligations
Ensuring business policies are adhered to, e.g. policies covering security and internet use
Identity
Technical
Usage
For our legitimate interests or those of a third party, i.e. to make sure we are following our own internal procedures so we can deliver the best service to you
Operational reasons, such as improving efficiency, training and quality control
Technical
Usage
For our legitimate interests or those of a third party, i.e. to take steps to improve our processes and service delivery at a competitive price
Preventing unauthorised access and modifications to systems
Identity
Technical
Usage
For our legitimate interests or those of a third party, i.e. to prevent and detect criminal activity that could be damaging for us and for you
To comply with our legal and regulatory obligations
Updating customer records
Identity
Contact
Transaction
Technical
Profile
Usage
Marketing and Communication
For the performance of our contract with you or to take steps at your request before entering into a contract
To comply with our legal and regulatory obligations
For our legitimate interests or those of a third party, e.g. making sure that we can keep in touch with our customers about existing orders and new products
Statutory returns
Identity
Contact
Financial
Transaction
Profile
To comply with our legal and regulatory obligations
Ensuring safe working practices, staff administration and assessments
Identity
Contact
Technical
Usage
To comply with our legal and regulatory obligations
For our legitimate interests or those of a third party, e.g. to make sure we are following our own internal procedures and working efficiently so we can deliver the best service to you
Marketing our services and those of selected third parties where we have consent to existing and former customers
Identity
Contact
Technical
Usage
Profile
Marketing and Communications
For our legitimate interests, i.e. to promote our business to existing and former customers
Consent
Credit reference checks via external credit reference agencies
Identity
Contact
Financial
For our legitimate interests or those of a third party, i.e. to ensure our customers are likely to be able to pay for our products and services
External audits and quality checks, e.g. for ISO or Investors in People accreditation and the audit of our accounts
Transaction
Technical
Usage
For our legitimate interests or a those of a third party, i.e. to maintain our accreditations so we can demonstrate we operate at the highest standards
To comply with our legal and regulatory obligations

We have determined, acting reasonably and considering the circumstances, that we are able to rely on legitimate interests as the lawful basis on which to process your personal information in certain circumstances. Where we rely on this lawful basis, we have stated this in the table above and set out the legitimate interest being pursued.

We have reached this decision by carrying out a balancing exercise to make sure our legitimate interest does not override your privacy rights as an individual. We consider that it is reasonable for us to process your personal information for the purposes of our legitimate interests outlined above as: (a) we process your information only so far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way.

Promotional communications – Direct Marketing

During the registration process on our website when your personal information is collected, you will be asked to indicate your preferences for receiving direct marketing communications from us via email, SMS, telephone or post. If you consent to OR do not opt out of receiving the marketing, we may use your personal information to send you updates about our products AND/OR services, including exclusive offers, promotions or new products AND/OR services.

We have a legitimate interest in processing your personal information for promotional purposes (see above ‘How and why we use your personal information’).

However, where consent is needed (e.g., for third party marketing), we will ask for this consent separately and clearly.

We will always treat your personal information with the utmost respect and never sell it to other organisations for their marketing purposes.

You have the right to opt out of receiving promotional communications at any time by:

contacting us at enquiries@2rays.co.uk
using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts
updating your marketing preferences on our by emailing unsubscribe

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.

We may share personal information where necessary with the parties set out below in accordance with the legal basis table above:

companies within our group;
our professional advisors and auditors (including without limitation tax, legal or other corporate advisors who provide professional services to us);
other third party suppliers, business partners and sub-contractors for business administration, support, processing, services, or IT purposes;
other third party suppliers for marketing purposes (including without limitation providers of customer relationship management systems;
third parties that you approve (including without limitation, social media sites and third party payment providers);
if we are part of a merger or acquisition or joint venture, the purchasers of our business or assets or our joint venture partner;
credit bureaus and other financial institutions;
credit reference agencies;
identification verification agencies;
our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, the police, law enforcement agencies and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters; and
HMRC or other tax bodies or agencies to comply with our legal and regulatory obligations.

We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers

We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a re-structuring. Usually, information will be anonymised but this may not always be possible. The recipient of the information will be bound by confidentiality obligations.

Keeping your personal information secure

We have appropriate security measures to prevent personal information from being accidentally lost, or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

Where your personal information is held

We may transfer your personal information to third parties based outside the United Kingdom.

If we transfer personal information to countries outside of the United Kingdom, we may rely on: (a) a lawful exception to the rules relating to overseas data transfers (for example, you have given your explicit consent or it is necessary to make the transfer to fulfil our contract with you); (b) a decision from the Secretary of State (or other mechanism permitted under the Data Protection Laws) determining that the country provides an adequate level of protection to the Data Protection Laws; or (c) appropriate safeguards in respect of transfers of personal data to a country outside of United Kingdom (for example, by requiring the recipient of the personal data in the other country to agree to the standard contractual clauses or international data transfer agreement approved under the Data Protection Laws).

Please contact our Data Privacy Team for a list of countries and organisations your personal data is transferred to and/or for further information on the measures undertaken to safeguard your data.

How long your personal information will be kept

We will keep your personal information while you for as long as is necessary:

to provide goods and services to you;
to respond to any questions, complaints or claims made by you or on your behalf;
to keep records required by law.

We will not retain your personal information for longer than necessary for the purposes set out in this privacy notice below. Different retention periods apply for different types of personal information.

When it is no longer necessary to retain your personal information, we will delete or anonymise it.

Your rights

You have the following rights, which you can exercise free of charge:

Access

The right to be provided with a copy of your personal information (the right of access)

Rectification

The right to require us to correct any mistakes in your personal information

To be forgotten

The right to require us to delete your personal information – in certain situations

Restriction of processing

The right to require us to restrict processing of your personal information – in certain circumstances, e.g. if you contest the accuracy of the data

Data portability

The right to receive the personal information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party – in certain situations

To object

The right to object:

at any time to your personal information being processed for direct marketing (including profiling);
in certain other situations to our continued processing of your personal information, e.g. processing carried out for the purpose of our legitimate interests.

Not to be subject to automated individual decision-making

The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.

Withdraw consent

You can withdraw your consent although this does not impact the processing up to the point of withdrawal.

For further information on each of those rights, including the circumstances in which they apply, please contact us using the 'How to contact us' section at the beginning of this notice.

How to complain

We hope that we can resolve any query or concern you may raise about our use of your personal information. If you do have any concerns about how we use your personal information, please get in touch using the contact details in the 'How to contact us' section at the beginning of this notice.