Privacy Policy

This Privacy Policy sets out how Bilohi ("we", "us", "our"), operating through the website Bilohi.site, collects, uses, stores, and protects personal data relating to visitors and users ("you"). We are committed to handling personal data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) as retained in domestic law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018. The Information Commissioner's Office (ICO) is the supervisory authority for data protection matters in the United Kingdom.

1. Identity and Contact Details of the Data Controller

The data controller responsible for personal data collected through this website is Bilohi, located at 101 Whitehouse Ln, South Yorkshire, Sheffield S6 2UY, United Kingdom. Enquiries relating to data protection matters may be directed to us by email at [email protected] or by telephone at +44 114 234 5067. We are the sole controller of data collected through this website and do not operate as a joint controller with any third party in relation to the processing activities described in this policy.

2. What Personal Data We Collect

We collect personal data only where it is necessary for the purposes described in this policy. The categories of personal data we may collect include: (a) contact information such as name and email address, submitted voluntarily through our contact form or newsletter sign-up; (b) message content submitted through our contact form, including any questions or information you choose to include; (c) technical data such as IP address, browser type and version, operating system, referring URL, pages visited, and time and date of access, collected automatically through server logs and analytics tools; and (d) cookie-related data as described in our separate Cookie Policy. We do not collect sensitive personal data as defined under Article 9 of the UK GDPR, and we do not collect payment information.

3. Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so under Article 6 of the UK GDPR. The lawful bases we rely upon are as follows: (a) Consent — where you have submitted a contact form or signed up to receive educational updates, we rely on your freely given, specific, informed, and unambiguous consent as the lawful basis for processing your contact details and message content; (b) Legitimate Interests — we rely on our legitimate interests in operating, maintaining, and improving this website as the basis for processing technical data collected through server logs and analytics, provided these interests are not overridden by your fundamental rights and freedoms; and (c) Legal Obligation — where we are required to retain or disclose data to comply with a legal obligation under UK law, we will do so on that basis.

4. How We Use Your Personal Data

Personal data collected through contact forms is used solely to read and, where appropriate, respond to your enquiry. We do not use contact form submissions for marketing purposes, profiling, or any automated decision-making. Email addresses collected through our newsletter sign-up are used only to send occasional educational updates relating to solar energy content on this website. Technical data is used in aggregate form to understand how the website is being used and to identify technical issues. We do not use personal data to make automated decisions that produce legal or similarly significant effects on individuals.

5. Data Sharing and Third Parties

We do not sell, rent, or trade personal data with third parties. We may share personal data with trusted service providers who assist us in operating this website, including hosting providers and analytics services, where those providers act as data processors under written agreements that require them to process data only on our instructions and in compliance with UK GDPR. Where analytics services involve the transfer of data outside the United Kingdom, we ensure that appropriate safeguards are in place, including reliance on adequacy decisions or standard contractual clauses as recognised under UK data protection law. We will disclose personal data to law enforcement or regulatory authorities where required to do so by applicable UK law.

6. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected. Contact form submissions are retained for a period of up to twelve months, after which they are securely deleted. Newsletter subscriber data is retained until you unsubscribe, at which point your data is removed from our mailing list within a reasonable period. Technical data collected through server logs is typically retained for a period of up to six months. Where we are required by law to retain data for a longer period, we will do so and will inform you accordingly where required.

7. Your Rights Under UK GDPR

You have the following rights in relation to your personal data, exercisable free of charge: the right to be informed about how your data is used (fulfilled by this policy); the right of access to personal data we hold about you; the right to rectification of inaccurate or incomplete data; the right to erasure ("right to be forgotten") where data is no longer necessary or where consent is withdrawn; the right to restriction of processing in certain circumstances; the right to data portability where processing is based on consent or contract and carried out by automated means; the right to object to processing based on legitimate interests; and the right not to be subject to solely automated decision-making. To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.

8. Security of Personal Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include the use of HTTPS encryption for data transmitted through this website, restricted access to personal data on a need-to-know basis, and regular review of our data handling practices. No method of transmission over the internet is entirely secure, and while we take reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to individuals, we will notify the ICO within 72 hours as required by UK GDPR, and will notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms.

9. Cookies

This website uses cookies. For full information about the cookies we use, their purpose, and how to manage your preferences, please refer to our Cookie Policy available at Bilohi.site/cookies.html. Cookie consent is obtained through our cookie consent mechanism prior to the setting of non-essential cookies.

10. Children's Data

This website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that personal data has been submitted by a child under 13 without appropriate parental consent, we will delete that data promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of this website following the posting of changes constitutes your acknowledgement of those changes.