Privacy & Cookie Policy | Comera Energy

This policy explains how we collect, process, use, share and protect personal data when you visit this website or get in touch about our services, and your rights under UK data protection law.

It provides details of the nature of the personal data collected by us, together with the purposes of the processing. It also indicates your rights in relation to the data processed and who to contact for further information or requests. In this privacy notice your “personal data” is sometimes referred to as your “information.”

If you go on to become a customer, we will give you any additional privacy information relevant to the design, installation and support work we carry out for you.

Who we are

Data controller: Comera Power Limited, a company registered in England and Wales (company number 07923661), trading as Comera Energy.

Registered office: Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP.

ICO registration: ZA476674.

Data protection contact: privacy@comeragroup.co.uk

Having assessed our processing, we are not required to appoint a statutory Data Protection Officer; the contact above handles all data protection matters. This policy is governed by UK data protection law, principally the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) for cookies (small text files stored in a user's browser) and marketing.

What data we collect

Enquiry and contact data you give us through a form on this site: your name, email address, phone number and postcode where you provide them, your organisation and site postcode for business enquiries, the nature of your enquiry, your message, and whether you opt in to marketing.

Estimate data: if you use the instant estimate tool and ask us to email the result, we record the figures it produced — system size, indicative price range, payback and estimated saving — so we can send them to you and sanity-check them for your address.

Communications: the content of any emails or messages you send us.

Technical and usage data: IP address, device and browser type, pages visited and referring pages — collected through cookies and analytics, and only with your consent for non-essential cookies (see Cookies below).

Please don't include sensitive personal information in a form message — this website is not intended to collect special category data and no responsibility will be taken for any such information sent by you using the website.

How we use your data and our lawful bases

Respond to your enquiry, prepare an estimate or arrange a survey — taking steps at your request before entering a contract (Art. 6(1)(b)), and our legitimate interests in responding to enquiries (Art. 6(1)(f)).
Send you the solar buyer's guide you asked for, and follow it up once — your request, and our legitimate interests (Art. 6(1)(f)).
Manage our relationship with you and keep business records — legitimate interests; legal obligation.
Send you marketing (occasional solar tips and offers) — consent (Art. 6(1)(a)), only if you opt in; you can withdraw at any time.
Measure, manage, improve and enable navigation of the website — consent, for non-essential analytics cookies.
Design, install and support your system, and meet our legal and regulatory duties (if you become a customer) — contract; legal obligation.

We will only send you marketing if you have opted in, and every marketing email includes an unsubscribe link. We do not sell your data or share it with third parties for their own marketing.

Cookies and similar technologies

When you first visit this site we show a cookie banner that lets you accept or reject non-essential cookies. Non-essential cookies are not set until you consent, and you can change your choice at any time using the Cookie settings link at the bottom of any page. If you withdraw consent we stop analytics and delete the analytics cookies already set.

Strictly necessary — a record of your cookie choice, stored in your browser, so we don't ask again. No consent needed; it is required for the service.
Analytics / performance — Google Analytics (GA4), to measure how the site is used so we can improve it. It sets two cookies, _ga and _ga_<property>, which distinguish one visitor from another and expire after two years. Consent required, and nothing loads until you accept. If you withdraw consent via Cookie settings, analytics is switched off and those cookies are deleted. You can also block or delete cookies through your browser settings, though some parts of the site may not work properly without strictly necessary cookies.

We do not use marketing or advertising cookies on this site.

Who we share your data with

We do not sell your data. We share it only as follows:

Within the Comera group — where your enquiry is better answered by another group company, it is passed to them, and used only to respond to you.
Fasthosts (UK) — website hosting.
Zoho Corporation — ZeptoMail (EU) — sends transactional emails, such as the confirmation and estimate you receive after making an enquiry.
Zoho Corporation — Zoho CRM & Zoho Campaigns — manages enquiries and leads and, if you opt in, sends our marketing.
Google — Google Analytics, used only with your consent.

Our service providers act under contracts that require them to protect your data and use it only on our instructions. We may also disclose data where required by law, by a regulator, or to establish, exercise or defend legal claims. If you go on to have a system installed, the data sharing relevant to that work is covered in your contract documents.

International transfers

Some of our providers process data outside the UK. Where they do, an appropriate safeguard is in place:

Fasthosts — hosting — United Kingdom — no overseas transfer.
Zoho (ZeptoMail) — transactional email — European Union — UK adequacy regulations for the EEA.
Zoho (CRM / Campaigns) — CRM and marketing — international — International Data Transfer Agreement (IDTA) / UK Addendum to the EU Standard Contractual Clauses.
Google — analytics — United States / global — UK Extension to the EU–US Data Privacy Framework and/or the IDTA.

Details of the specific safeguards are available on request from our data protection contact.

How long we keep your data

Enquiries that don't become customers: up to 24 months from your last contact with us, then deleted.
Marketing contacts: until you unsubscribe or withdraw consent (we also review our list periodically).
Website analytics: up to 14 months.
Customer records (if we install a system for you): for the period required by the installation, its guarantees and certification, and by law.

We keep personal data no longer than necessary for the purpose it was collected, unless the law requires us to keep it for longer.

How we protect your data

We use technical and organisational measures proportionate to the data we hold: encryption in transit (HTTPS/TLS), reputable service providers, access limited to those who need it, education and training for relevant staff so they are aware of our data protection obligations when processing personal data, physical security measures, and protections on our forms against spam and abuse.

The transmission of data over the internet (including by email) is never completely secure. We endeavour to protect personal data, but we cannot guarantee the security of data transmitted to us or by us. We take reasonable steps to safeguard your information.

Your rights

Under UK GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, to be informed about our collection and processing of it, and to data portability. You also have rights in relation to automated decision making and profiling. Where we rely on consent, you can withdraw it at any time — including your cookie choice, via the Cookie settings control in the footer of every page. To exercise any right, contact us using the details above. We will respond within one month, and there is normally no charge.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. If you remain dissatisfied, or feel the matter was not resolved by us, you also have the right to complain to the UK supervisory authority: the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113, address The Office of the Information Commissioner, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page and applies to your use of the site.

Third party requests

If you are submitting a personal data request on behalf of someone other than yourself, please contact us using the details in this policy and include proof that you are authorised to make the request. This may be a written authorisation signed by the person you are acting on behalf of, or a valid power of attorney.

Contact us

Comera Energy (Comera Power Limited)
Origin Workspace, 40 Berkeley Square, Bristol, BS8 1HP
0117 971 8121 · privacy@comeragroup.co.uk