Privacy Policy

1. Data we collect

When you request a quote we collect the information you provide in the form, plus a small amount of technical context:

• Identity & contact: name, email address, phone number.
• Project details: postcode, property type, roof type and orientation, monthly electricity bill, and which products you are interested in (panels, battery, EV charger, heat pump, EMS).
• Consent record: that you ticked the consent box, plus a timestamp.
• Technical context: referrer URL, UTM parameters from advertising campaigns, language, and a coarse user-agent string.

2. Why we use it (purposes & legal basis)

• Deliver your quote and contact you about it - performance of a contract / pre-contractual steps you requested (GDPR art. 6(1)(b)).
• Operate, secure and improve the site - our legitimate interest in running our business (art. 6(1)(f)).
• Statistics, advertising, and conversion measurement - your consent given via the cookie banner (art. 6(1)(a) and the Danish Cookie Order).
• Comply with legal obligations such as accounting - legal obligation (art. 6(1)(c)).

3. Recipients (processors)

We share data with carefully selected service providers acting as our processors under written agreements:

• Pipedrive OÜ (CRM / Lead Inbox) - to manage your enquiry.
• Resend (transactional email) - to send your confirmation.
• Lovable Cloud / Supabase - hosting and database.
• Google (Analytics 4, Tag Manager, Ads) - only with your consent.
• Meta Platforms (Pixel) - only with your consent.

4. International transfers

Some processors are located outside the EU/EEA (e.g. Google in the US, Pipedrive in Estonia/US). Transfers are protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. Retention

• Lead data: kept for up to 24 months after your last contact with us, then deleted or anonymised.
• Accounting records (if you become a customer): 5 years from the end of the financial year (Danish Bookkeeping Act).
• Consent log: kept for the lifetime of the consent + 12 months for evidence.

6. Your rights

Under GDPR you have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. You can withdraw consent at any time via the "Manage cookies" link in the footer or by emailing us. To exercise any right, write to info@ecoray.dk. You can lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

7. Security

We use TLS in transit, encrypted databases, role-based access control, and audit logging. Access to lead data is limited to staff who need it to serve you.

8. Contact

Questions? info@ecoray.dk · +45 89 87 89 32