Privacy policy.

1. Who we are

Geko Energy Ltd(“Geko Energy”, “we”, “us”, “our”) is the data controller for the personal data collected through this website and our quote and installation process.

• Registered company: Geko Energy Ltd, a company registered in England and Wales, company number 15986005.
• Registered office: Alpha House, Terrace Street, Oldham, OL4 1HG, United Kingdom.
• Contact for data queries: info@geko.energy or 07469 828229.

Note: our registration with the Information Commissioner's Office is being completed. We process personal data in line with UK GDPR and the Data Protection Act 2018 regardless of registration status. This page will be updated with our ICO reference number once issued.

2. What personal data we collect

We collect personal data in two ways:

• From you directly — when you submit a quote request, contact form, referral, opt-out request, or call us. This typically includes your name, email address, phone number, property postcode and address, property type, current energy usage indicators, service interest, and anything you choose to tell us about your install.
• Automatically— when you visit the site, via cookies and analytics tools. This is limited to anonymous usage data unless you've explicitly accepted analytics cookies (see our cookie policy).

3. Lawful basis for processing

We rely on the following lawful bases under UK GDPR:

• Consent — for marketing communications, analytics/marketing cookies, and referral submissions. You can withdraw consent at any time via our opt-out page or by emailing optout@geko.energy.
• Legitimate interest — for responding to your quote enquiry, providing service-related communications, preventing fraud, and improving our website.
• Contract — once you become a Geko customer, for fulfilling your install and aftercare.
• Legal obligation — for retaining install records as required by MCS, IAA, NAPIT and HMRC.

4. How we use your data

We use your personal data to:

• Respond to your quote or contact request.
• Arrange a video consultation or site survey.
• Design, install, register and support your solar / battery / EV charging system.
• Send order updates and aftercare communications.
• Send occasional marketing emails — only if you've opted in, and you can unsubscribe instantly from any email or via our opt-out page.
• Improve our website and services (anonymous analytics).

5. Who we share it with

We never sell your data. We share limited personal data only with trusted third parties strictly necessary to deliver our service:

• Resend — sending transactional and consultation emails on our behalf.
• Supabase — storing your enquiry, project and opt-out records (EU/UK data centres).
• Vercel — hosting our website infrastructure.
• Your DNO (Distribution Network Operator) — grid connection (G98/G99) and SEG export registration.
• MCS / IAA / NAPIT — install certification, guarantee registration and scheme audit.
• Component manufacturers (e.g. Tesla, GivEnergy, JA Solar) — where required for product warranty registration.
• Our finance partner(s) — only if you apply for finance, and only with your explicit consent.

We do not transfer your personal data outside the UK or EU without appropriate safeguards in place (e.g. UK adequacy decisions or Standard Contractual Clauses).

6. How long we keep it

• Quote enquiries that don't proceed — 12 months from your last contact, then deleted.
• Customer install records — retained for the life of the warranty plus 7 years (HMRC and MCS requirements).
• Marketing list opt-ins — held until you unsubscribe.
• Opt-out / suppression records— held indefinitely so we don't contact you again.

7. Marketing communications and opt-out

If you're receiving marketing from us and want it to stop, or you've never been a customer and want us never to contact you, you have three options:

• Use the unsubscribe link in any marketing email — instant.
• Visit our opt-out page — add your email, phone number or postcode to our suppression list.
• Email optout@geko.energy — we'll add you to the suppression list within 1 working day and confirm by email.

Once you're on our suppression list, our lead forms will refuse to enrol you (even if someone tries to submit your details via a referral) and our team is alerted if you ever appear again.

8. Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Request deletion (where no legal retention applies).
• Object to or restrict processing.
• Receive your data in a portable format.
• Withdraw consent at any time for consent-based processing.
• Not be subject to a decision based solely on automated processing (we don't make any).

To exercise any of these rights, email info@geko.energy. We aim to respond within 30 days. We may need to verify your identity before releasing information.

9. Complaints

If you're unhappy with how we've handled your personal data, please contact us first so we can put it right (see our complaints policy). You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Cookies and tracking

Cookies that identify you personally are treated as personal data under UK GDPR. See our cookie policy for the full list, your rights, and how to control them.

11. Changes to this policy

We may update this policy occasionally. Material changes will be notified to customers by email. The version date at the top of this page indicates the most recent revision.