Privacy Policy
Version 2026-11-03.3
This policy explains how Sunseam® (“we”) handles personal data. Sunseam connects commercial solar installers with building owners and surfaces ranked rooftop-solar opportunities.
Who we are
Sunseam® is operated by Quantech Analytics Ltd (company number 15031177, registered in England & Wales), trading as Sunseam, the data controller.
Data-protection contact: hello@sunseam.co.uk.
Registered as a data controller with the UK Information Commissioner's Office (ICO), registration reference ZC180615. For data-protection queries, contact hello@sunseam.co.uk.
What we collect
- Account: email address and authentication identifiers.
- Installers: company details, contact name/role, regions covered, and the optional profile/research answers you provide.
- Site owners: company and site details, decision-maker contact details, and your consent record (text, version, timestamp).
- Savings calculator, saved business case: if you ask us to email you your business case, your email address, the building details you entered (postcode, building type and size), the region, the estimate, any electricity price, export rate or installed cost you entered in place of our default assumptions, the link identifier for your case, and your consent record (your answer to the consent box, the privacy notice version and the date).
- Savings calculator, buildings outside our scope: if you leave your email for us to take a look at a building the calculator cannot assess, your email address, the postcode, building type and address you entered, and the reason the calculator could not assess it.
- Installer businesses we contact: business contact details from public registers (see “If we contacted you about Sunseam” below).
- Acceptance records: that you agreed to our Terms and this Policy, with the version and timestamp.
- Usage: roofs you shortlist, their status, and your notes.
- Property data: non-personal commercial-building records (see below).
Lawful bases
- Contract, to provide the tool to installers and site owners.
- Contract, if you send us an enquiry, we may keep your contact details in our customer relationship management system (HubSpot) to manage your enquiry and the introductions you request.
- Consent, site owners explicitly consent before we share their details with matched local installers. You can withdraw at any time.
- Consent, if you ask the savings calculator to email you your business case: we store the case with your email address, including any figures you entered, and email you a link to it. With your consent we may also send occasional relevant updates. You can withdraw at any time by contacting us.
- Legitimate interests, if you leave your email about a building the calculator cannot assess: we keep your details to look at that building and reply to you.
- Legitimate interests, operating, securing and improving the service, and contacting installer businesses about Sunseam (see “If we contacted you about Sunseam” below).
Property & building data
We combine official UK public data with our own intelligence to assess commercial buildings. Ranking figures (system size, electricity spend, solar saving, grid headroom) are estimates, not guarantees, and are labelled as such throughout the product. Map locations may be approximate (postcode area). We do not publish invented ownership information; ownership is shown only where it has been researched from an authoritative source.
Sharing
Site-owner contact details are shared with matched local installers only after your explicit consent. We use a small number of sub-processors to run the service, listed below. Anyone with your business-case link can view the case, including the figures you entered, without signing in.
Sub-processors
| Processor | Role | Location | Status |
|---|---|---|---|
| Supabase | Database, authentication and hosting of personal data | EU/UK (London region) | DPA in place |
| Vercel | Application hosting, edge network and content delivery (processes request metadata, incl. IP address) | USA / global edge (Standard Contractual Clauses) | DPA in place |
| Stripe | Payment processing and subscription billing (name, email, billing and card details) | USA / Ireland (Standard Contractual Clauses) | DPA in place |
| Resend | Transactional and notification email delivery (email address, message content) | USA (Standard Contractual Clauses) | DPA in place |
| Sentry | Error monitoring and diagnostics (may capture IP address and technical context in error reports) | USA (Standard Contractual Clauses) | DPA in place |
| HubSpot | Customer relationship management (business contact details of installers we contact and of people who send us an enquiry, and our records of that correspondence) | EU (HubSpot's EU data hosting) | DPA accepted |
| lemlist | Prospecting and email outreach to installer businesses (business email address, first name, company details, message content and replies) | EU-hosted databases; its own sub-processors may transfer data outside the EU (adequacy decisions or Standard Contractual Clauses) | DPA accepted |
This list is kept current; new processors are added here before they begin handling personal data.
If we contacted you about Sunseam
If you run or work for a solar installation business and we emailed you about Sunseam, Quantech Analytics Ltd (trading as Sunseam) is the controller of your details. You can contact us at hello@sunseam.co.uk.
What we hold: your business email address; your first name, where it can be read from that email address; your company's name, website, telephone number, town and region; its MCS certificate number; its Companies House number and date of incorporation; and a record of the emails we send you and any reply you send.
Where it comes from: the MCS installer register (the public Find an Installer directory) and the public Companies House register. We may also review your company's own public website and published materials to judge whether Sunseam is relevant to your business, and keep a short note of that assessment.
Why we use it: to tell installer businesses about Sunseam, a service relevant to their work, and to handle any conversation that follows. Our lawful basis is legitimate interests: our interest in offering that service to the businesses it is relevant to.
Who receives it: our processors HubSpot (where we keep our records of businesses we contact) and lemlist (which sends our outreach emails), and the hosting providers listed above. lemlist hosts its databases in the EU, and its own sub-processors may transfer data outside the EU under adequacy decisions or Standard Contractual Clauses. HubSpot holds our records in its EU data hosting.
How long we keep it: we keep your details for 24 months from our last contact with you, and then delete them. If you object or ask us not to contact you, we keep only your email address and the date you asked, on a suppression list, so that we never contact you again.
You can object at any time, and we will stop: reply to any of our emails saying so, or write to hello@sunseam.co.uk. You also have the rights set out under Your rights below, and you can complain to the Information Commissioner's Office (ico.org.uk).
Retention
We keep account and usage data while your account is active. Consent and acceptance records are retained as an audit of what was agreed. Deleting your account removes their account reference but retains the email address recorded with them. Non-personal building data is retained in line with the licences under which we hold it. Details of installer businesses we contact are kept as set out under “If we contacted you about Sunseam” above. Records from the savings calculator are kept so that your link keeps working and we can reply to you, until you ask us to delete them. Deleting the saved calculator records means a fresh server request for your link no longer returns your case; an open or cached page may still show it. We keep a recovery copy for up to seven days and retain any suppression record needed to prevent further emails. Deletion does not recall sent emails or copies you saved, or individually erase copies in provider records and backups.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Use your account page to export or delete your data, or contact us. You may also complain to the ICO.
Cookies
We use only essential cookies required for sign-in and security. We do not use advertising or third-party tracking cookies. See the cookie notice shown on your first visit.
Data location
Our database and storage are hosted in the UK/EU (London region). Some of the sub-processors listed above process personal data outside the UK and EU, mainly in the USA; the table shows where each one does, and those transfers are made under Standard Contractual Clauses. HubSpot holds our records in its EU data hosting. lemlist hosts its databases in the EU, and its own sub-processors may transfer data outside the EU under adequacy decisions or Standard Contractual Clauses.
Sunseam® is a registered trade mark of Quantech Analytics Ltd (UK00004406106).