Data protection

Data Protection & GDPR Policy

Our operating framework for handling quote enquiries, lead sharing, retention, rights requests and complaints.

1. Purpose and scope

This Data Protection & GDPR Policy sets out how Chetankumar Vakharia, trading as WattaQuote, aims to handle personal data lawfully, fairly and securely. It applies to customer quote requests, installer registrations, contact emails, business records, website logs and lead-sharing activity.

2. Data protection governance

Controller role

Chetankumar Vakharia, trading as WattaQuote, acts as controller for data collected through the WattaQuote website forms and emails.

Installer role

When an installer receives a lead and contacts the customer, that installer may act as a separate controller for its own quote process.

Controller: Chetankumar Vakharia, trading as WattaQuote. Data protection contact: hello@wattaquote.co.uk.

3. UK GDPR principles

Lawful and transparent

Explain what data is collected, why, and who it may be shared with.

Purpose-limited

Use data for quote handling, installer registration, service operation and compliance.

Minimised

Collect only what is needed to handle the enquiry.

Accurate

Keep records accurate where reasonably possible.

Stored only as needed

Delete or anonymise data when it is no longer required.

Secure

Protect data with reasonable technical and organisational measures.

4. Lawful basis register

ActivityLawful basisPractical control
Customer quote formPre-contract steps, legitimate interests and consent where requiredClear consent checkbox and privacy wording before submission
Lead sharing with installersConsent where required, pre-contract steps and legitimate interestsShare only necessary quote information with relevant partners
Installer registrationPre-contract steps and legitimate interestsUse details to assess suitability and contact the installer
Security logsLegitimate interestsKeep logs limited and review access
MarketingConsent or other lawful basis where permittedUse opt-in/opt-out controls where required by PECR

5. Lead sharing controls

Important: WattaQuote is responsible for its own data handling and lead-routing process. Installer service complaints should be directed to the installer.

6. Retention schedule

Data categoryRetention targetReason
Customer quote enquiriesUp to 24 months from last contactLead management, customer service, audit and complaints
Installer registrationsUp to 36 months or partner relationship plus recordsPartner management and lead allocation
Complaints/disputesUp to 6 years where necessaryLegal limitation and evidence records
Technical logsUsually up to 12 monthsSecurity and troubleshooting

7. Data subject rights handling

Requests for access, correction, deletion, restriction, objection, portability or withdrawal of consent should be sent to hello@wattaquote.co.uk. WattaQuote should verify the requester, search relevant systems, respond within the applicable legal timeframe, and keep a record of the request and response.

8. Breach handling

If a personal data breach is suspected, WattaQuote should:

9. Marketing and PECR

Direct marketing by email, SMS, phone or similar electronic means should only be used where permitted by UK GDPR and PECR. If WattaQuote adds remarketing, analytics pixels or advertising cookies, the website should be updated with appropriate cookie information and consent controls.

10. Complaints process

If a complaint is about WattaQuote’s data handling, website enquiry process or lead-sharing process, the person should email hello@wattaquote.co.uk. We aim to acknowledge and provide an initial response within 14 days.

If a complaint is about an installer’s quote, pricing, appointment, installation, workmanship, grant handling, warranty or aftercare, it should be raised directly with the installer.

11. Review

This policy should be reviewed whenever WattaQuote changes legal entity, starts paid advertising, adds analytics or advertising pixels, enters installer contracts, expands outside London and Kent, or changes how leads are shared.

Last updated: 17 May 2026.