LEGAL / INFORMATION
Last updated: 1 November 2026
1. Who we are and how to contact us
SolaMax is the trading name of Maksym Kamakin, a UK sole trader operating in England. For UK data protection purposes, Maksym Kamakin is the data controller. Privacy and complaints contact: maksym@solamax.co.uk. Business correspondence address: 2 Seacole Way, Horley, RH6 8TB, United Kingdom.
2. Information we collect
When you request a quotation or contact us, we receive the details you provide, such as your name, email address, telephone number, postcode and information about your property or energy requirements. Some forms or correspondence may also contain a message or documents. If a project proceeds, relevant records may include an installation address, surveys, quotations, contracts, payments, correspondence, warranty and service information.
Website providers also handle technical information needed to deliver the site, such as network, browser and device information. Where optional Analytics is enabled, Google Analytics 4 measures visits and interactions using technical information and browser identifiers. Its custom form and WhatsApp events do not read or include the name, email, telephone, postcode or message entered in an enquiry. Page URLs and technical metadata are separate from those custom parameters; personal information should not be placed in URL query strings.
3. Enquiries, email and external contact services
We normally obtain enquiry information directly from you through native Framer forms, email, WhatsApp or other direct correspondence. Framer processes form submissions for delivery through the configured Email destination to SolaMax’s business mailbox. The mailbox provider and its retention arrangements are not identified here because they have not been independently verified. The enquiry form remains available whether or not you allow optional Analytics. Submitting an enquiry is not consent to unrelated marketing. A GA4 form-submission interaction or visible success message is not independent proof that an email was delivered, that a quotation was accepted or that a sale occurred. WhatsApp links open an external WhatsApp service, which processes information under its own terms and privacy notice.
4. Purposes and lawful bases
Depending on the activity, we generally rely on steps requested before entering a contract when responding to a quotation request, performance of a contract for agreed work, legal obligations for required tax and accounting records, and legitimate interests where appropriate for answering business enquiries, managing complaints and warranty matters, protecting legal rights and preventing misuse. The applicable basis depends on the circumstances and must be applied fairly and transparently. Optional Google Analytics uses consent for the storage and access covered by the consent interface. No advertising-processing basis is claimed for advertising that is not enabled.
5. Service providers and sharing
The inspected website uses Framer for hosting, native forms and built-in analytics, and Google for optional Google Analytics 4 (measurement ID G-E83QC7Y8CP). Business email is used to receive enquiry notifications, but the email provider is not named here because it has not been independently verified. WhatsApp is an external contact option when you choose to open it. Where necessary for a project, information may be shared with installation partners, surveyors, equipment suppliers, warranty or service providers, professional advisers and IT support. These are categories, not confirmation that every category is currently engaged. We do not sell personal data to advertisers. The discontinued Cloudflare webhook pilot is not used for current enquiry processing.
6. International transfers
Some providers may process information outside the UK. The exact contracting entities, processing locations and transfer safeguards depend on the providers actually used for SolaMax accounts and have not all been independently verified. This notice does not claim that all processing remains in the UK or that a particular transfer mechanism applies in every case. Relevant provider privacy information and contractual records should be consulted where required.
7. Retention and deletion
We keep personal information only for as long as it is needed for the purpose collected, applicable legal requirements, ongoing customer support, disputes or legal claims. Enquiry, quotation, customer, accounting, installation, warranty, service and complaint records may therefore be retained for different periods. No fixed business-record period is stated here because the operational schedule has not been independently verified. The consent preference record is configured to remain valid for 180 days; this is not the retention period for enquiry emails. GA4 Admin showed event-data retention of 2 months and user-data retention of 14 months on 29 October 2026.
8. Security
We use reasonable organisational and technical safeguards, including access controls for email, website and business systems. No transmission or storage system can be guaranteed completely secure.
9. Your rights and complaints
Depending on the circumstances and the processing basis, you may request access to your personal information, correction, erasure, restriction or portability. Where consent is relied on, you may withdraw it. You may object to processing based on legitimate interests on grounds relating to your situation, and you have an absolute right to object to direct marketing. We may need proportionate information to verify identity and locate relevant records. Requests are normally handled within one month, subject to lawful extensions. You can complain directly to the Information Commissioner’s Office at https://ico.org.uk/ or by telephone on 0303 123 1113.
10. Analytics and cookie preferences
The website has a self-managed SolaMax consent interface rather than a third-party consent-management subscription. Essential functions remain active. Optional Analytics and Marketing preferences can be managed separately, and Cookie Settings in the shared footer reopens the preferences window. The published code implements Google Consent Mode v2 and a Basic Consent Mode approach: denied defaults are queued for analytics_storage, ad_storage, ad_user_data and ad_personalization, and GA4 is designed to load only after Analytics is allowed. The form and WhatsApp custom listeners check Analytics consent. Native Framer Analytics is separate from GA4. Use Cookie Settings to change choices or withdraw optional consent. The code is designed to disable further GA4 tracking, remove known GA identifiers and reload the page after Analytics withdrawal.
11. Marketing and automated decisions
The website contains a separate Marketing preference but no advertising tag was identified in the inspected script inventory. Enabling this preference does not itself install advertising tools or permit promotional emails or WhatsApp messages. Any future marketing activity will require its own legal assessment, notices and opt-out arrangements. SolaMax does not make decisions about website enquiries with legal or similarly significant effects solely by automated means.
12. Status, review and updates
This policy explains how SolaMax handles personal information and should be reviewed when website technologies, processing purposes, providers or relevant rules change. It does not certify compliance with UK GDPR, PECR or ICO guidance. Material new uses requiring consent must be explained before enabling them.