1.Introduction and scope
This policy applies to the SaudiSolar website in Arabic and English, to every form and tool on it, including the quote request form, the partner registration form and the solar calculator, and to all personal data we process because you use it.
SaudiSolar is an online matching service that lets businesses, industry, farm and istiraha owners and homeowners send one request for quotes from qualified, licensed solar installers, for services such as rooftop and ground-mounted systems, solar carports, grid connection, off-grid and hybrid systems, solar water pumps, batteries, solar lighting, solar water heaters and maintenance, and then passes that request, with your consent, to independent providers. We are not an installer or an electricity or energy company, and we do not sell, install, finance or connect to the grid any system or equipment.
We process personal data in accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H, as amended, its Implementing Regulations and the other laws in force in the Kingdom.
This policy does not apply to websites, accounts, apps and services run by others, including installers’ own websites and accounts, system monitoring apps, and the services of the Saudi Electricity Company or any financing provider, whose processing is governed by their own policies.
2.Definitions
Wherever they appear in this policy, the following words and expressions have the meanings given next to them:
The Law: The Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations.
The Site or the Service: The SaudiSolar website and the content, tools and forms it offers for requesting solar quotes and registering as a partner, including the solar calculator.
We, us or SaudiSolar: The operator of the Site, acting as controller of the personal data collected through it.
You or the User: Any natural person who visits the Site or uses its forms and tools, including a person sending a request for their home or farm or on behalf of a business, and the representative of a business that registers as a partner.
Personal Data: Any data, whatever its source or form, that identifies you specifically or makes it possible to identify you directly or indirectly.
Processing: Any operation carried out on personal data, including collection, recording, storage, use, disclosure, transfer and destruction.
Provider: An independent company or establishment qualified to design and install solar systems and licensed for electrical work and grid connection where the service requires it, to which we pass requests that match its services, customer types and cities.
Technical Service Provider: A party that processes data on our behalf to run the Site, such as hosting, form handling and measurement services.
3.The data we collect
Data you provide in the quote request form:
- Your name and mobile number, your business name and email address if you choose to enter them, and your preferred contact channel.
- The customer type (business, farm or off-grid site, or home), the service or need, your city and district, and the expected timeline.
- For businesses: the type of business, the number of sites, the space available for installation and the roof or land area range, the monthly electricity bill range, operating hours, whether backup power is needed, interest in an operation and maintenance contract, and your role in the decision.
- For farms and off-grid sites: the site type, whether the grid is available, the diesel use range, whether water pumping is needed, and the well depth and water need ranges.
- For homes: the property type, whether you own or rent, the roof type, the electricity bill range, and whether you would like batteries.
- Solar calculator results if you choose to attach them to your request, such as the estimated system size, area and production — rough technical estimates only.
- Your consent to share your request with providers, and the date the request was sent.
Data a partner provides in the registration form:
- The company or establishment name, the services it offers, the customer types it serves, the cities or regions it covers, the project sizes it handles, its team size, and whether it offers operation and maintenance services.
- Whether the business is qualified to install grid-connected systems and its qualification number or reference, whether it holds an electrical contractor licence, and whether it holds a commercial registration.
- The name, mobile number and email address of the contact person, a website link if given, and a short message if written.
Data collected automatically when you use the Site:
- Technical data that hosting servers necessarily process, such as your IP address, browser and device type and the time of your visit.
- The page the request was sent from, and campaign identifiers in the link you arrived from, if any, such as UTM parameters and the Google Ads click identifier (gclid).
- Usage and measurement data when analytics tools are enabled, as described in section 11.
We do not ask for your exact address, for sensitive data as defined by the Law, or for ID numbers, bank account details or passwords. The district and city are enough; you give the exact location to the installer you choose directly. Please do not enter ID numbers or passwords in any form field, nor your electricity account number, photos of bills, or login details for system monitoring apps.
If you send the request on behalf of another person, a business or a farm, you confirm that you are authorised to provide their details for the purpose of requesting quotes.
4.How we use your data
We use your personal data only for the following purposes:
- To receive and review your request and pass it to qualified providers that serve your city and your customer type and offer the service you need, so that they can contact you about the details and a site survey and present their quotes.
- To review partner registrations, including qualification, electrical licence and commercial registration details, and contact partners about the partnership.
- To check that requests are complete and to prevent duplicate or fake requests and misuse of the Site.
- To run, protect and fix the Site and its tools.
- To measure the performance of the Site and of advertising campaigns in aggregate, so that we can improve the Service.
- To meet our legal obligations and respond to requests from the competent authorities.
We never publish details of the businesses, farms or people who send requests or of their consumption or bills, we do not use your data for direct marketing of products unrelated to your request, and we do not take decisions about you based solely on automated processing.
If we need to use your data for any other purpose not related to those above, we will only do so with your consent or as permitted by the Law.
5.Legal basis for processing
We rely on your explicit consent to collect your request data and share it with providers, and on a partner’s consent to be contacted about the partnership. Consent is given by ticking the consent box before the form is sent.
We process some data on the basis of our legitimate interest in running and protecting the Site and preventing fraud, within the limits the Law allows and without prejudice to your rights and interests.
We also process data where this is necessary to comply with an obligation under another law or at the request of a competent authority.
You may withdraw your consent at any time as described in section 10. Withdrawal does not affect the lawfulness of processing carried out before it.
7.Transfers outside the Kingdom
Some of the technical service providers we rely on, such as hosting, content delivery, form handling and measurement services, may be located outside the Kingdom of Saudi Arabia, so some data may be processed or stored outside it.
We transfer personal data outside the Kingdom only in the cases and on the conditions permitted by the Law and the Regulation on Personal Data Transfer outside the Kingdom, to the extent needed for the purpose, and with appropriate safeguards that provide a level of protection no lower than that required by the Law.
8.How long we keep data
We keep your request data for as long as needed to pass it to providers, monitor the quality of the Service and deal with any question or complaint about it. We keep partner data for the duration of the partnership or for as long as needed to review the registration.
When the purpose for which the data was collected has ended, we securely destroy it or make it anonymous, unless the Law requires us to keep it longer or it is needed for a case before a judicial authority.
Data received by providers is subject to the retention periods those providers apply under the Law.
9.Data security
We take appropriate organisational, administrative and technical measures to protect personal data against unauthorised access, use, disclosure, alteration or destruction, including encrypting connections to the Site (HTTPS) and limiting access to requests to those whose work requires it.
If personal data is leaked, damaged or unlawfully accessed, we will handle the incident in accordance with the Law, including notifying the competent authority and notifying you where the Law requires it.
No transmission of data over the internet can be guaranteed to be completely secure, so we recommend that you do not send data the forms do not ask for and never share the login details of your Saudi Electricity Company account or system monitoring apps with anyone through the Site.
10.Your rights
The Law gives you the following rights over your personal data:
- The right to be informed of the legal basis and purpose of collecting your data, which is what this policy is for.
- The right to access your data and obtain a copy of it in a clear format.
- The right to ask for your data to be corrected, completed or updated.
- The right to ask for your data to be destroyed once it is no longer needed, unless the Law requires it to be kept.
- The right to withdraw your consent to the processing of your data at any time.
To exercise any of these rights, contact us on +966 50 778 6207 with your name, the mobile number used in your request and a clear description of what you are asking for. We may ask for what we need to verify your identity before acting on the request.
We will respond within the period set by the Law and its Implementing Regulations. If your request concerns data that has been sent to a provider, we will inform that provider of your request, and you may also contact the provider directly.
You have the right to complain to the authority responsible for supervising the application of the Law, the Saudi Data and Artificial Intelligence Authority (SDAIA), if you believe that the processing of your data breaches it.
12.The solar calculator
The solar calculator gives rough technical estimates of system size, the area needed and expected production, based on what you enter and on general assumptions. These results are not a quote, not a promise of any saving or output, and not financial or investment advice.
The calculator does not require personal data. If you choose to attach its results to your quote request, they are sent with your request to providers as preliminary estimates only; the actual size and production are set after a site survey.
13.Children
The Service is intended for people aged 18 or over, and we do not knowingly collect personal data from children. If we learn that a request was sent by someone under 18 without the consent of their guardian, we will destroy their data.
14.Changes to this policy
We may change this policy from time to time to reflect changes in the Service or the law. The date of the last update is shown at the top of the page, and changes take effect from the date they are published.
If a change is material and affects how data you have already provided is processed, we will take appropriate steps to inform you and will ask for your consent again where the Law requires it.
15.How to reach us about your data
For any question about this policy or any request about your personal data, contact us on +966 50 778 6207.
This address is for privacy and data matters only. Questions about a system you agreed to have installed or maintained by a solar installer should go to that installer directly.