Privacy Policy
Version 2026-07-13
This policy explains how Sunseam™ (“we”) handles personal data. Sunseam connects commercial solar installers with building owners and surfaces ranked rooftop-solar opportunities.
Who we are
Sunseam™ is operated by Quantech Analytics Ltd (company number 15031177, registered in England & Wales), trading as Sunseam, the data controller.
Data-protection contact: hello@sunseam.co.uk.
Registered as a data controller with the UK Information Commissioner's Office (ICO), registration reference ZC180615. For data-protection queries, contact hello@sunseam.co.uk.
What we collect
- Account: email address and authentication identifiers.
- Installers: company details, contact name/role, regions covered, and the optional profile/research answers you provide.
- Site owners: company and site details, decision-maker contact details, and your consent record (text, version, timestamp).
- Acceptance records: that you agreed to our Terms and this Policy, with the version and timestamp.
- Usage: roofs you shortlist, their status, and your notes.
- Property data: non-personal commercial-building records (see below).
Lawful bases
- Contract, to provide the tool to installers and site owners.
- Consent, site owners explicitly consent before we share their details with matched local installers. You can withdraw at any time.
- Legitimate interests, operating, securing and improving the service.
Property & building data
We combine official UK public data with our own intelligence to assess commercial buildings. Ranking figures (system size, electricity spend, solar saving, grid headroom) are estimates, not guarantees, and are labelled as such throughout the product. Map locations may be approximate (postcode area). We do not publish invented ownership information; ownership is shown only where it has been researched from an authoritative source.
Sharing
Site-owner contact details are shared with matched local installers only after your explicit consent. We use a small number of sub-processors to run the service, listed below.
Sub-processors
| Processor | Role | Location | Status |
|---|---|---|---|
| Supabase | Database, authentication and hosting of personal data | EU/UK (London region) | DPA in place |
| Vercel | Application hosting, edge network and content delivery (processes request metadata, incl. IP address) | USA / global edge (Standard Contractual Clauses) | DPA in place |
| Stripe | Payment processing and subscription billing (name, email, billing and card details) | USA / Ireland (Standard Contractual Clauses) | DPA in place |
| Resend | Transactional and notification email delivery (email address, message content) | USA (Standard Contractual Clauses) | DPA in place |
| Sentry | Error monitoring and diagnostics (may capture IP address and technical context in error reports) | USA (Standard Contractual Clauses) | DPA in place |
This list is kept current; new processors are added here before they begin handling personal data.
Retention
We keep account and usage data while your account is active. Consent and acceptance records are retained as an audit of what was agreed, and anonymised if you delete your account. Non-personal building data is retained in line with the licences under which we hold it.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Use your account page to export or delete your data, or contact us. You may also complain to the ICO.
Cookies
We use only essential cookies required for sign-in and security. We do not use advertising or third-party tracking cookies. See the cookie notice shown on your first visit.
Data location
Our database and storage are hosted in the UK/EU (London region). We do not currently transfer personal data outside the UK/EU; if that changes we will update this policy and put appropriate safeguards in place.
Sunseam™ is a trademark of Quantech Analytics Ltd (UK trade mark application UK00004406106 pending).