Legal
Privacy policy
Last updated 9 September 2026
The short version: we collect what Form A1-2 requires, we share it with your network operator because that is the entire point of the service, and we don't sell it to anyone.
Who controls your data
Aesir Limited, trading as Aesir Solar, is the data controller for the information described here. For any privacy question, email hello@aesirsolar.co.uk.
What we collect
- About you: name, company, email address, telephone number and your installer accreditation or qualification.
- About the site: installation address, postcode and MPAN.
- About the system: inverter make and model, ENA type-test reference, output rating, phase configuration, storage capacity, export limitation details and target commissioning date.
- About the transaction: the fact and amount of your payment, and the order reference. Card details are entered on the hosted payment page, not in this application form.
Why we use it, and on what basis
- To perform our contract with you — preparing, submitting and progressing your application, and keeping you updated.
- To comply with legal obligations — keeping records for tax and accounting.
- For our legitimate interests — keeping records of applications we have made so we can answer later queries, and protecting against fraud.
Who we share it with
- Your Distribution Network Operator or Independent Distribution Network Operator. This is unavoidable and is the purpose of the service — the application cannot be made without it.
- Payment services. Payments use Stripe. Contact and order information is used to prepare the payment; card details are entered on Stripe’s hosted payment page. An unsuccessful payment handoff does not send your details to another payment provider.
- Hosting and application records. Vercel serves the website and server endpoints. Supabase stores the complete application and payment reference in our private Solar database, hosted in London. These services process information to deliver the application service.
- Our professional advisers — accountants and, if ever needed, lawyers.
We do not sell your data, and we do not share it for anyone else's marketing.
To limit automated checkout abuse, we use keyed, non-readable identifiers derived from the requesting IP address and email address. We count new attempts in hourly windows; retries of the same saved application do not consume another allowance. Old counters are removed during subsequent checkout activity.
How long we keep it
Application records are kept for six years from the end of the tax year in which you paid, which matches the period we must retain financial records and comfortably covers the life of a connection record. After that they are deleted.
Your rights
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing based on legitimate interests, or ask for it in a portable format. Email us and we'll respond within one month.
Note that once an application has been submitted to a network operator, we cannot retrieve or delete the copy they hold — that's their record, governed by their own privacy notice.
If you think we've handled your data badly, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
These pages do not set advertising or analytics cookies. When you submit the application form, its answers are written to your browser’s local storage and sent to our server, which saves the complete application before opening Stripe Checkout. Existing eligibility prefill values, a private payment-status access token and application reference may also be stored in that browser. The full application is not automatically restored after a reload. A browser copy does not confirm that we have received or saved an application. Clearing your browser data removes these local values.
The payment step is hosted on a separate system, which sets its own strictly necessary cookies to keep your order and session together.
Where your data is held
The application database is hosted in London. Our hosting and payment providers may process information in other countries under their applicable data-protection safeguards. Card details remain with Stripe; they are not stored in our application database.