Privacy Policy

Last updated: 24 March 2026

VERA Solar ("we", "us", "our") is a trading name of Brakkn Ltd (company number 11085677), registered at Unit 3, Vista Place, Ingworth Road, Poole, England, BH12 1JY.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our solar roof assessment service at vera.solar and related services. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

1.3 Information from Third Parties

To provide accurate solar assessments, we retrieve and process data about your property from authoritative third-party sources:

2. How We Use Your Information

2.1 Purposes and Legal Bases

2.2 Consent

Where we rely on consent (e.g., for email delivery), you can withdraw it at any time by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

2.3 Legitimate Interests

Where we rely on legitimate interests, we have assessed that our interests do not unduly impact your rights and freedoms. Our legitimate interests include improving and developing our services, understanding how users interact with our service, and ensuring security of our systems. You can object to processing based on legitimate interests at any time.

3. How We Share Your Information

3.1 Service Providers (Sub-Processors)

We share data with service providers who help us deliver VERA Solar:

All third-party providers are bound by data processing agreements and comply with UK GDPR requirements. When we use mapping or data lookup services, we share only the minimum data needed (coordinates or UPRN) and do not include names or contact details.

3.2 Legal Requirements

We may disclose information where required by law or to:

• Comply with legal process or government requests
• Protect our rights, privacy, safety, or property
• Enforce our terms of service
• Respond to an emergency

3.3 Business Transfers

If Brakkn Ltd is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any change in ownership or use of your personal information.

4. International Transfers

We primarily select suppliers that store and process personal data within the UK and EU. Your data is processed in AWS eu-west-2 (London). Where data is transferred to third-party services that operate globally (such as Google's infrastructure), appropriate safeguards are in place including Standard Contractual Clauses approved by the European Commission.

5. Data Retention

5.1 Retention Periods

5.2 Data Encryption

Email addresses and names provided for report delivery are encrypted at rest using AWS Key Management Service (KMS) with AES-256 encryption. These are decrypted only at the moment of sending your report email.

6. Data Security

We use appropriate technical and organisational measures to protect your data:

• All data transmitted via HTTPS/TLS encryption
• Personal data (email, name) encrypted at rest using AES-256
• Infrastructure hosted in UK (AWS eu-west-2, London)
• Access controls limiting who can access personal data
• Regular security reviews and dependency updates
• DDoS protection via Cloudflare

7. Your Rights

Under UK GDPR, you have the following rights:

7.1 Right of Access

You can request a copy of your personal data. We will respond within one month.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data where it is no longer necessary, you withdraw consent, or data has been unlawfully processed.

7.4 Right to Restrict Processing

You can request restriction of processing while we verify accuracy or assess objections.

7.5 Right to Data Portability

You can receive your data in a structured, machine-readable format.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing.

7.7 How to Exercise Your Rights

Contact us at [email protected]. We will respond within one month. If your request is complex, we may extend by two months (with notification). We may request identification to verify your identity before processing requests.

8. Cookies and Tracking

8.1 Cookies We Use

We do not use advertising cookies or third-party tracking cookies. Our analytics (Cloudflare Web Analytics) are privacy-focused and do not use cookies or track individuals.

9. Children's Privacy

VERA Solar is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via our website. The "Last updated" date at the top indicates when changes were made.

11. Complaints

If you have concerns about how we handle your data:

1. Contact us first: [email protected]
2. Escalate to the ICO: If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk or call 0303 123 1113.

We would appreciate the opportunity to address your concerns before you contact the ICO.

12. Contact Us

For privacy-related enquiries:

For general enquiries:

• Email: [email protected]
• Website: vera.solar