Privacy Policy

Solar Advisor is operated by Block7 Consulting OPC. This policy explains how we collect, use, store, and protect your personal information in compliance with the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

1. What We Collect

When you complete our solar feasibility assessment, we collect:

• Contact information: full name, email address, phone number
• Location: city, province, barangay
• Property details: roof type, material, age, stories, shading, orientation
• Energy consumption: utility provider, monthly bill or kWh, appliance list
• Financial information: income bracket, home ownership, budget, payment preference
• Electric bill photo: optional, uploaded by you for verification

We also collect technical data (IP address, browser type) through server logs for security purposes. We do not use tracking cookies or third-party analytics.

2. Why We Collect It

We process your personal information based on your consent (RA 10173, Section 12a):

• Feasibility assessment: to calculate your solar score, system size, cost, and savings
• Lead matching: to connect you with solar installers and financing providers
• Communication: to follow up on your assessment

We will not use your data for purposes beyond what you consented to without asking again.

3. Who We Share With

• Solar installation partners: vetted installers in your service area
• Financing partners: banks and lending companies, only if you indicated interest

We share only what is necessary for the partner to contact you. We do not sell your data to data brokers, advertisers, or unrelated third parties.

Important: Once your information has been shared with a partner based on your consent, that partner becomes independently responsible for the data they received. If you later request correction or erasure of your data from Solar Advisor, we will process your request for our own records and inform you which partners received your data. You will need to contact those partners separately to request changes to the data they hold.

4. How Long We Keep It

• Active leads (qualified, converted): retained for the business relationship
• Inactive leads (new, contacted, rejected): purged after 365 days of no activity
• Audit logs: retained for 3 years for compliance
• Bill photos: deleted when the associated lead is purged

5. How We Protect It

• Data is stored on a server with encrypted storage and restricted access, and transmitted over TLS
• Session data is signed with HMAC-SHA256 and cannot be tampered with
• All connections use HTTPS with HSTS enforcement
• Admin access is protected with authentication and rate limiting
• Access to personal data is logged in an audit trail
• Bill photos are access-controlled and never publicly accessible

6. Your Rights Under RA 10173

You have the following rights as a data subject:

• Right to be informed: this policy and the consent notice in Step 4
• Right to access: request a copy of all personal data we hold about you
• Right to correction: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data
• Right to object: object to the processing of your data
• Right to data portability: receive your data in a structured format
• Right to file a complaint: contact the NPC (privacy.gov.ph)

To exercise these rights, use our Data Subject Request Form. We will respond within 30 days.

Please note that correction and erasure requests apply only to data held by Solar Advisor. If your data has already been shared with installation or financing partners, we will inform you which partners were involved so you can contact them directly.

7. Data Protection Officer

For privacy concerns, contact our DPO:

• Email: hello@solar-advisor.com
• Company: Block7 Consulting OPC

8. Breach Notification

In the event of a personal data breach likely to cause harm, we will:

• Notify the National Privacy Commission within 72 hours of discovery
• Notify affected data subjects within 72 hours if sensitive information is involved

9. Changes to This Policy

We may update this policy. Changes will be posted here with an updated date. Material changes will update the consent version in the assessment form.

10. Governing Law

This policy is governed by the laws of the Republic of the Philippines, specifically RA 10173 and its IRR.