Privacy
Privacy notice.
Last updated: 4 June 2026.
Solarable is a UK roof check tool with a paid installer directory. This page explains, in plain English, what we do with your data when you use the site — and what we don't.
If anything here is unclear or you want to exercise a data-rights request (see "Your rights" below), email privacy@solarable.org.
What you give us — and why.
When you use the roof check at /, you give us your house
number/name and your UK postcode. We need both to find your home on a map and estimate
the roof direction. The lawful basis is contract performance — you've
asked us for a roof check, so we process the address to deliver it.
When you use the savings calculator at /savings, you optionally
give us your postcode. The lawful basis is legitimate interest — to
show you listed installers covering your area beneath the result.
When you submit the listing form at /for-installers, you
give us business contact details (company name, website, contact name, email, phone,
declared service area). The lawful basis is contract performance — we
need this to consider your application and, if approved, publish your listing.
When you fill in the "Get 3 quotes" form on your Solarable Report, you give us your name, email, phone number and whether you own the home, plus your address and the report itself. The lawful basis is consent: you tick a box that says exactly who will receive it. See "Quote requests" below.
That's it. We don't ask for anything else.
What we do with your data.
Three things happen with your address when you check your roof:
- Validate the postcode via Postcodes.io — a free, UK-specific public service.
- Resolve to a specific property via OS Places API — Ordnance Survey's official address service. Returns latitude/longitude and a UPRN.
- Find a building polygon at that location via OpenStreetMap, then estimate which way the main roof faces.
The result becomes a Solarable Report with a Solarable Score, the estimated direction, a confidence level, and a list of installers covering your postcode district. We display it on a private URL only you can reach.
Quote requests.
If you fill in the "Get 3 quotes" form on your report, you give us your name, email, phone number, your address and the report itself, and you tell us whether you own the home and when you're thinking of installing. We share that with up to three MCS-certified installers covering your postcode district, who pay us a fixed fee for the introduction. We never share it with more than three, we don't auction it, and we don't share it with anyone who isn't installing solar.
The lawful basis is your consent, given by ticking the box on the form. The exact wording you agreed to is stored with your request, and each installer who receives your details receives that wording too.
We keep the request for 12 months, then remove your contact details and address. To withdraw sooner, email privacy@solarable.org with your reference. We stop sharing it immediately and tell any installer who already has it to stop.
What we don't do.
- We do not sell your address or your report to anyone, except, with your explicit consent, the up to three installers you asked us to introduce you to.
- We do not pass your contact details to installers unless you ask us to via the quote form. If you click an installer's website, phone, or email link, that's a direct connection between you and them; Solarable doesn't sit in the middle.
- We do not run open-ended lead auctions. A quote request goes to at most three installers, each MCS-certified, and never to a data broker.
- We do not log your IP address, except as a one-way hash on quote requests to stop abuse.
- We do not store your full user agent or full referrer URL.
- We do not share your data with third-party advertising platforms.
How long we keep things.
| Data | Where | How long |
|---|---|---|
| Cached address lookup | Cloudflare KV | 24 hours |
| In-progress flow record | Cloudflare KV | 30 min → 24 hours |
| First-party events (anonymous) | Cloudflare D1 | 90 days |
| Mailing list (opt-in) | Resend | Until you unsubscribe |
| Quote requests (name, contact details, address, report) | Cloudflare D1 | 12 months, then contact details removed |
| Installer subscription records | Cloudflare D1 / Stripe | Active + 6 years |
No homeowner address-level data lives past 24 hours unless you've opted in to the mailing list or asked for quotes.
The mailing list.
If you sign up for product updates, we add your email address to our mailing list, held by Resend (our email provider). We send occasional updates about new features and roof-check improvements. The lawful basis is your consent, which you give by ticking the box on the signup form.
We only store your email address — nothing else, and never your roof check or address-level data. Every email has an unsubscribe link, you can opt out any time at solarable.org/unsubscribe, or just email privacy@solarable.org. We don't use the list for advertising or share it with anyone.
Cookies and analytics.
We use one strictly-necessary cookie — solarable_session — to deduplicate
event counts within a single browsing session. It contains a salted hash, not your
identity. It expires when you close the browser.
For website analytics, we use Ahrefs Web Analytics on public pages
only. Ahrefs Web Analytics is a privacy-friendly product that does not use cookies and
does not track you across sites. We don't load it on per-address routes
(/check, /report) or any private route.
We don't use Google Analytics, Meta pixel, or any third-party advertising tracker. If we ever add one, we'll add a full consent banner and revisit this section.
Per-address URLs and search engines.
The pages that show your specific address — /check and /report — are deliberately not indexed by search engines. They carry noindex, nofollow, noarchive meta tags, an X-Robots-Tag HTTP header saying the same, and they're disallowed in robots.txt. They're also served with Cache-Control: private, no-store to prevent shared caches from holding them.
We never put your address line, full street name, or property name into a URL path or canonical tag.
Your rights under UK GDPR.
You have the right to:
- Access the data we hold on you. For most homeowners this is essentially nothing: your address-level data is gone within 24 hours. If you asked for quotes, it is your request record.
- Rectify anything that's wrong (or simply check your roof again with the corrected postcode).
- Erase anything we have. For quote requests and waitlist signups: one email and we delete you. For installer listings: one email and we'll cancel and unpublish.
- Object to processing on legitimate-interest grounds. Tell us why and we'll respond.
- Complain to the Information Commissioner's Office (ICO) — ico.org.uk — if you believe we've handled your data badly.
To exercise any of these, email privacy@solarable.org. We aim to respond within five working days.
If you'd rather your address never be processed by Solarable in the first place — for example, if a previous occupant or someone else used the roof checker on your property and you're uncomfortable with that — email us and we'll add the address to an opt-out list that prevents future Solarable Reports being generated for it.
Children's data.
Solarable is not directed at children. We don't knowingly collect data from anyone under 18. If you believe a minor has used the site, email us and we'll delete anything we hold.
Changes to this notice.
We'll update the date at the top whenever this notice changes. We won't make material changes (e.g. starting to share data with new third parties) without first prompting you to re-consent if applicable.
Who's responsible.
Solarable is operated by Tristan Watson. The data controller for the purposes of UK GDPR is the same. Contact: privacy@solarable.org.
ICO registration is in progress. Once complete, the registration number will appear here.