Privacy Policy

01Who we are

This website, www.rainbowsolar.in, is operated by Rainbow Solar ("Rainbow Solar", "we", "us", "our"), a rooftop solar design, installation and maintenance company based in Chennai, Tamil Nadu. [Registered company name, CIN / GSTIN].

For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Rainbow Solar is the Data Fiduciary for the personal data described in this policy, and you are the Data Principal.

02Scope of this policy

This policy applies to personal data we collect when you:

• visit or browse our website, including the solar calculator, blog and project map;
• book a free consultation, request a quote or fill in any enquiry form;
• plan a site visit and share details about your roof, property and electricity usage;
• contact us by phone, SMS, WhatsApp, email or social media;
• purchase, finance, install or receive service for a solar system from us.

Please read it together with our Terms & Conditions. By using our website or services, you agree to the practices described here.

03Data we collect

Information you give us

Information collected automatically

• Usage data: pages viewed, buttons clicked, forms started or submitted, calculator inputs and the time spent on the site.
• Campaign data: how you reached us, such as UTM parameters and ad click IDs (for example gclid, fbclid, msclkid).
• Device data: browser type, device type, operating system, screen size, approximate location derived from IP address, and referring website.

04How we use your data

• Consultations & quotes: to call you back, understand your needs, size a system and prepare an accurate quotation and savings estimate.
• Site surveys: to schedule and carry out a site visit at your chosen address and time.
• Installation & service: to design, install, commission, monitor and maintain your solar system, and to honour warranties.
• Approvals & subsidy: to file net-metering, DISCOM and PM Surya Ghar subsidy applications on your behalf.
• Payments & financing: to issue invoices, record payments and, at your request, connect you with banks or NBFCs for solar loans/EMI.
• Improving our services: to measure which pages, campaigns and ads work, fix problems, and improve the website and customer experience.
• Updates & offers: to share relevant information about solar products, government schemes and offers, which you can opt out of at any time.
• Legal & safety: to comply with law, tax and accounting rules, prevent fraud or spam, and protect our rights.

We do not sell or rent your personal data to anyone.

05Consent & communication

When you submit a form on our website, you consent to Rainbow Solar contacting you by phone call, SMS, WhatsApp or email about your enquiry, even if your number is registered on the National Do Not Call (DND) registry. This consent is given under the TRAI Telecom Commercial Communications Customer Preference Regulations, 2018.

You may withdraw consent at any time by replying "STOP" on WhatsApp/SMS, asking our team on a call, or emailing us (see Contact). Withdrawal does not affect processing already carried out, and we may still contact you about an active order, installation, warranty or legal obligation.

06Who we share data with

We share personal data only as needed for the purposes above, with:

• Our team and installation partners: engineers, installers and service technicians working on your project.
• Government bodies & utilities: your DISCOM (e.g. TNPDCL/TANGEDCO), MNRE and the PM Surya Ghar National Portal, for net-metering and subsidy processing.
• Banks, NBFCs & payment providers: only when you ask for financing or make a payment.
• Equipment manufacturers: to register and claim product warranties for panels, inverters and batteries.
• Technology service providers: secure cloud database hosting (Supabase), our customer-relationship (CRM) system, website hosting, and messaging platforms such as WhatsApp.
• Analytics & advertising partners: such as Google (Analytics, Tag Manager, Ads) and Meta (Facebook/Instagram), when these tools are enabled, to measure and improve our campaigns.
• Authorities: where required by law, court order or to protect rights, safety and property.

Service providers process your data on our instructions and must protect it. Some providers may store data on servers outside India; where this happens, we rely on the safeguards permitted under the DPDP Act and applicable rules.

07Cookies, storage & tracking

Our website uses cookies and similar browser storage technologies:

• Essential storage: after you book a consultation we save a small record in your browser (for up to 90 days) so you can access the rest of the site without filling in the form again, and temporary session data to carry your booking and calculator results between pages.
• Campaign attribution: we remember how you arrived (UTM and ad click IDs) for your visit so we can tell which campaigns are useful.
• Analytics & advertising cookies: set by Google and Meta when those tools are enabled, to count visits and measure ad conversions.

You can clear or block cookies and site data in your browser settings. Blocking essential storage may mean you need to fill in the consultation form again. The "Not you? Start over" option, where shown, also clears your saved booking from that browser.

08Payment & financing data

Payments for solar systems are made directly by bank transfer, UPI, cheque or through a financing partner, never through a form on this website. We keep records of amounts, dates and payment references for accounting and GST compliance. When you choose an EMI or loan, the bank or NBFC collects and processes your financial and KYC information under its own privacy policy.

09Subsidy & DISCOM applications

To apply for net-metering or the PM Surya Ghar: Muft Bijli Yojana subsidy, we may upload your name, contact details, electricity consumer number, address, bank account details and installation photos to the government portal and your DISCOM. These bodies process that data under their own policies and the applicable law. Subsidy amounts are credited by the government directly to your bank account.

10Data retention

• Enquiries that do not become orders: kept for up to 24 months from our last contact, then deleted or anonymised, unless you ask us to delete them sooner.
• Customers: kept for the life of your system's warranties and service obligations (which can run for 25 years or more), plus any period required by tax, accounting or other laws.
• Analytics data: kept in aggregated or pseudonymised form according to the retention settings of the tool concerned.

11How we protect your data

We use reasonable security practices in line with the Information Technology Act, 2000 and related rules, including encrypted (HTTPS) connections, access controls so only authorised staff can view lead data, database-level security rules, and spam protection on our forms. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you and the Data Protection Board of India of a personal data breach where the law requires.

12Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is used;
• Correct, complete or update inaccurate or incomplete data;
• Erase your data when it is no longer needed, subject to legal retention requirements;
• Withdraw consent to marketing or other consent-based processing;
• Nominate another person to exercise your rights in case of death or incapacity;
• Raise a grievance with us, and, if unresolved, with the Data Protection Board of India.

To exercise any right, contact us using the details below. We may need to verify your identity before acting on a request and aim to respond within 30 days.

13Children's privacy

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted their details, please contact us and we will delete them.

14Testimonials & project map

With your permission, we may display your name, area, system size and photos of your installation in testimonials, case studies or on our project map. We never publish phone numbers, EB numbers or full street addresses. You can ask us to remove your details from the website at any time.

15Third-party links

Our website links to third-party sites and services such as WhatsApp, social media, government portals and map providers. Their privacy practices are governed by their own policies, and we are not responsible for them.

16Changes to this policy

We may update this policy from time to time to reflect changes in law or our practices. The "Last updated" date at the top shows when it was last revised. Significant changes will be highlighted on this page.

17Grievance Officer & contact

For any privacy question, request or complaint, please contact our Grievance Officer:

We will acknowledge your request within 48 hours and aim to resolve it within 30 days.