Privacy Policy
Last updated: 5 November 2026
Everyday Solar (everydaysolar.co.uk) respects your privacy. This policy explains what data we collect, how we use it, and the choices you have.
What we collect
We do not require accounts, and we do not ask for personal information to read the site. The data we process is limited to:
- Analytics data - we use Google Analytics 4 to understand which pages are read and how visitors find the site. This collects pseudonymous usage data such as pages visited, approximate location (country/city level), device type, and referral source. IP addresses are not logged by us and are truncated by Google.
- Server logs - our hosting provider (Cloudflare) processes standard technical request data (IP address, user agent) to serve and secure the site.
- Contact form - if you contact us, we receive your name, email address and message and use them only in connection with your message. Messages are delivered by Amazon Web Services (Amazon SES, Europe (Ireland) region), and the form is protected from bots by Cloudflare Turnstile.
Cookies and consent
Analytics cookies are off by default. We use a consent banner compliant with UK GDPR and PECR: analytics only runs if you choose to allow it. We do not use advertising cookies. Strictly necessary storage, which makes the site work as you asked, does not require consent.
These are the cookies and similar storage technologies the site uses:
| Name | Type | Purpose | Set by | How long it lasts |
|---|---|---|---|---|
csg_consent_v1 |
Browser local storage | Remembers your cookie choice (analytics allowed or not), so the banner does not ask again on every page. Strictly necessary. | Everyday Solar (first party) | Until you change your choice or clear your browser storage |
r2-theme |
Browser local storage | Remembers whether you picked the light or dark theme. Set only if you use the theme toggle. Strictly necessary. | Everyday Solar (first party) | Until you change it or clear your browser storage |
csg_compare_cta_v1 |
Browser local storage | Remembers that you closed the comparison bar on comparison pages, so it stays closed. Set only if you close it. Strictly necessary. | Everyday Solar (first party) | Until you clear your browser storage |
_ga |
Cookie | Google Analytics 4: distinguishes one visitor from another so we can count visits and pages read. Set only if you allow analytics. | Google (Google Analytics 4) | 2 years |
_ga_<container-id> |
Cookie | Google Analytics 4: keeps the state of your current visit (session) for the same counts. Set only if you allow analytics. | Google (Google Analytics 4) | 2 years |
| Cloudflare Turnstile | Script and frame from challenges.cloudflare.com | Checks that a contact-form submission comes from a person rather than a bot, by reading technical signals from your browser. Loaded only on the contact form, never for tracking or advertising. Strictly necessary for the form's security. | Cloudflare (third party) | Sets no cookie on everydaysolar.co.uk; the one-time token it issues expires after 5 minutes |
Local storage is kept on your own device and is never sent to us. You can clear it, and any cookies, at any time in your browser's settings.
You can change your consent choice at any time via the cookie settings link in the footer. If you withdraw consent, analytics stops; to remove _ga cookies already set, clear this site's cookies in your browser.
Affiliate links
Some links on this site are affiliate links. If you click one, the retailer may set cookies on their own site to attribute any purchase to us. Those cookies are governed by the retailer's own privacy policy. See our affiliate disclosure for more.
How we use data
We use aggregated analytics to understand what content is useful and to improve the site. We do not sell personal data, build individual profiles, or send marketing.
Lawful bases for processing
UK GDPR requires us to tell you the purpose of each kind of processing and the lawful basis we rely on for it:
- Analytics (Google Analytics 4) - purpose: understanding which pages are read and improving the site. Lawful basis: consent (Article 6(1)(a)), given through the consent banner. Analytics does not run unless you allow it, and you can withdraw consent at any time via the cookie settings link in the footer, without affecting processing that took place before withdrawal.
- Server logs and security (Cloudflare, including Turnstile on the contact form) - purpose: delivering pages, keeping the site secure and protecting it and the contact form from abuse, bots and attacks. Lawful basis: legitimate interests (Article 6(1)(f)) - our legitimate interest is operating a reliable, secure website and preventing spam and malicious traffic.
- Replying to contact messages (Amazon SES) - purpose: receiving and answering a message you send us. Lawful basis: legitimate interests (Article 6(1)(f)) - our legitimate interest is responding to enquiries readers choose to send us, and keeping a record of that correspondence.
- Strictly necessary storage (your consent choice and theme preference) - purpose: making the site work as you asked. These are stored on your own device and are exempt from consent under PECR.
Where we rely on legitimate interests, you have the right to object to that processing (see Your right to object below).
Data sharing
Data is processed by the third-party services named above (Google, Cloudflare, Amazon Web Services) under their own privacy policies and our configuration choices. We do not share data with anyone else except where required by law.
International transfers
Some of the services named above process data outside the UK. Google (Google Analytics 4) and Cloudflare (hosting, security and Turnstile) may process data in the United States and other countries where they operate. Amazon Web Services delivers contact-form messages from its Europe (Ireland) region, and AWS may also process data in the United States.
Where data is transferred outside the UK, it is protected by one of these safeguards:
- Adequacy - transfers to the European Economic Area, including Ireland, rely on the UK's adequacy regulations for the EEA.
- UK-US data bridge - Google, Cloudflare and Amazon Web Services are certified under the UK Extension to the EU-US Data Privacy Framework, so transfers to them in the United States rely on the UK-US data bridge.
- IDTA / Addendum - where a transfer is not covered by adequacy or the data bridge, the provider's data processing terms apply the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more information about these safeguards using the contact details below.
How long we keep data
- Analytics data (Google Analytics 4) - Google keeps user-level and event-level analytics data for no more than 14 months, the longest a standard Google Analytics property allows, and then deletes it automatically. After that, only aggregated reports remain, which do not identify you.
- Server logs (Cloudflare) - we do not store or export request logs ourselves. Cloudflare processes request details (IP address, request URL, timestamp, user agent) to deliver the site and protect it, including through Turnstile on the contact form. Any security data Cloudflare keeps on its own systems is kept only for as long as that security purpose and its legal obligations require, and then deleted, as its privacy policy sets out.
- Contact messages - the site itself stores no copy of what you send through the contact form. Amazon SES delivers your message to our email inbox, where it is kept for as long as we need it to reply to you and handle any follow-up correspondence about it.
Your rights
Under UK GDPR you have the right to access, correct, or request deletion of personal data we hold about you, and to restrict processing. Apart from messages you send us, we hold no directly identifying personal data about readers, most requests are best directed at the third-party processors above; we will help where we can.
Your right to object
You have the right to object, at any time, to our processing of your personal data where we rely on legitimate interests (Article 21 UK GDPR). That covers the server logs and security processing by Cloudflare, including Turnstile on the contact form, and our handling of contact messages through Amazon SES. If you object, we will stop that processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.
To object, use the contact form or email [email protected] and tell us which processing you object to. We do not use your data for direct marketing. Analytics runs only with your consent, which you can withdraw at any time via the cookie settings link in the footer.
How to complain to us
If you are unhappy with how we have used or looked after your personal data, you can complain to us directly. Use the contact form or email [email protected], say that your message is a data protection complaint, and tell us what happened and what you would like us to do.
When we receive a complaint, we will:
- acknowledge it within 30 days of receiving it;
- look into it without undue delay, which may include asking you for more information we need to investigate;
- tell you the outcome of our investigation and anything we have done to put things right.
Your right to complain to the regulator
If you are unhappy with how we have handled your personal data, you have the right to complain to the UK data protection regulator, the Information Commission (which replaced the Information Commissioner's Office). You can contact it through its make a complaint page or by calling its helpline on 0303 123 1113. We would welcome the chance to put things right first, so please consider using the complaints procedure above before you go to the regulator.
Contact
For privacy questions, use the contact form or email [email protected].
Changes
We will update this page when our data practices change and revise the date at the top.