Privacy Policy

1. Introduction

Welcome to Lensolar Co. Limited ("Lensolar," "we," "us," or "our"). We are a data-driven solar energy solutions provider based in Nairobi, Kenya. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

We are committed to protecting your personal data and complying with applicable data protection laws, including the Kenya Data Protection Act (DPA) and, where applicable, the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information that you voluntarily provide to us when you:

• Request a quote or consultation: Name, email address, phone number, property address, monthly electricity bill, and energy needs.
• Contact us via forms, email, or WhatsApp: Any information you include in your message.
• Use our solar savings calculator: We may store your input to provide personalized estimates.
• Subscribe to our newsletter: Email address and preferences.

We may also automatically collect certain technical data when you visit our website, including IP address, browser type, device information, and pages visited (via cookies).

3. How We Use Your Information

Lensolar uses your personal information for the following legitimate business purposes:

• To provide you with accurate solar quotes and energy audits.
• To communicate with you about your inquiries, proposals, and project updates.
• To improve our website, services, and customer experience through analytics.
• To send you promotional content (only if you have opted in).
• To comply with legal obligations and prevent fraud.

4. Legal Basis for Processing (For GDPR/DPA Compliance)

We process your personal data based on one or more of the following legal grounds:

• Consent: When you voluntarily provide information through forms or opt-in to marketing.
• Contractual Necessity: To prepare quotes, proposals, and deliver solar installation services.
• Legitimate Interests: To improve our services, respond to inquiries, and ensure network security.
• Legal Obligation: When required by Kenyan law or regulatory authorities.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service Providers: Trusted third-party partners who assist with website hosting, analytics, or communication tools (under strict confidentiality agreements).
• Legal Requirements: If required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred with notice.

6. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for data transmission.
• Secure servers and access controls.
• Regular security audits and employee training.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. For quote requests, we typically retain data for up to 24 months. For active clients, data is retained for the duration of our relationship plus any legal warranty period.

8. Your Rights (Data Protection Rights)

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Request transfer of your data to another controller.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us at privacy@lensolar.co.ke. We will respond within 30 days as required by Kenyan law.

9. Cookies & Tracking Technologies

Our website uses cookies to enhance user experience, analyze site traffic, and personalize content. You can control cookie preferences through your browser settings. Essential cookies cannot be disabled as they are necessary for basic website functionality.

We use Google Analytics to understand how visitors interact with our site. Google Analytics may collect your IP address but does not identify you personally.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, payment platforms). We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us, and we will promptly delete it.

12. International Data Transfers

Lensolar operates primarily in Kenya. If we transfer your data to service providers located outside Kenya, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when changes were made. We encourage you to review this page periodically. Continued use of our website or services after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer (DPO) at:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya if you believe your data protection rights have been violated.