Privacy Policy
Last updated: March 2026
1. Who we are
Certa Cito Digital Ltd ("we", "us", "our") is a company registered in England & Wales. We operate the website at certacitodigital.com and provide a solar installation lead generation service for MCS-certified businesses.
For any privacy-related queries, contact us at leads@certacitodigital.com.
2. What data we collect
We collect personal data in the following ways:
- Installer registration form: name, company name, email address, phone number, and service areas. This is provided voluntarily when you register your interest in receiving leads.
- Publicly available data: we monitor publicly accessible UK forums and social media platforms (such as Reddit, MoneySavingExpert, Mumsnet, and similar) for posts in which individuals express interest in solar panel installation. We collect only the information visible in those public posts.
- Website usage data: standard server logs and analytics (IP address, browser type, pages visited) collected automatically when you use our website.
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Sending you solar installation leads matching your service area | Performance of a contract / legitimate interests |
| Communicating with you about your account and our service | Performance of a contract |
| Matching homeowner enquiries to geographically relevant installers | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Improving our website and service | Legitimate interests |
4. Who we share data with
We share data only where necessary:
- MCS-certified installers: lead details (sourced from public posts) are shared with up to three geographically relevant installers per lead.
- Vercel Inc: our website hosting provider. Data may be processed on servers within the EU/UK/US under standard contractual clauses.
- Zoho Corporation: our email service provider, used for delivering lead notifications.
We do not sell personal data to third parties.
5. Data retention
- Installer registration data: retained for as long as you are an active customer, plus 2 years thereafter for accounting and legal purposes.
- Lead data: retained for up to 12 months from the date of creation, then deleted.
- Website logs: retained for up to 90 days.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data ("right to be forgotten")
- Object to or restrict certain processing
- Data portability
- Withdraw consent where processing is based on consent
To exercise any of these rights, email us at leads@certacitodigital.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
Our website uses only essential functional cookies required for the site to operate. We do not use advertising or tracking cookies. No consent banner is required for essential cookies under UK GDPR.
8. Security
We take reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access controls, and secure credential management. No system is completely secure, and we cannot guarantee absolute security.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by updating the "last updated" date at the top of this page. Continued use of our service following any changes constitutes acceptance.
10. Contact
Certa Cito Digital Ltd
Email: leads@certacitodigital.com