Privacy Policy

Last updated: September 12th 2026

This policy explains how Installa collects and uses personal data when you visit installa.com, contact us, or use the Installa CRM application at installacrm.com. Installa is a trading name of IGC Enterprises Ltd ("we", "us"), company number 7074130.

Two different roles

When we are the controller. For data about visitors to our website, people who contact us, and the people who hold Installa accounts, we decide how the data is used and this policy applies.

When we are a processor. Our customers are solar installation businesses. The data they store in Installa about their own customers, sites and staff belongs to them: they are the controller and we process it only on their instructions, under our Terms of Service and data processing terms. If you are a customer of an installer who uses Installa, please contact that installer about your data.

What we collect

• Enquiries: your name, email address, phone number if you give it, and your message, plus the IP address and page the form was sent from.
• Account details: name, company name, country, email address, password (stored hashed), role, and your team members' names and email addresses.
• Billing details: plan, invoices and payment status. Card details are handled by our payment provider and never reach our servers.
• Usage data: sign-in history, device and browser information, and an audit trail of actions taken in your account.
• Website analytics: pages viewed and referring site, collected with a first-party cookie if you consent. See our Cookie Policy.

Why we use it, and our lawful basis

Who we share it with

We do not sell personal data. We use a small number of suppliers who process data for us under contract: a cloud hosting provider for hosting and backups, Postmark for transactional email, Stripe for payments, and mapping and imagery providers when you look up a site address. We may also disclose data where the law requires it.

International transfers

Where a supplier processes data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Enquiries: 24 months after our last contact.
• Account data: for the life of the account. After an account is closed, customer data is deleted after a 90-day grace period, and removed from backups within a further 30 days.
• Billing records: 6 years, as required for tax.
• Security and audit logs: 12 months.

Your rights

You have the right to access, correct, delete or restrict the use of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To use any of these rights, email privacy@installa.com. We reply within one month. You can also ask us to delete your account.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

Security

Data is encrypted in transit, passwords are stored hashed, each customer's data is separated from every other customer's, and access by our staff is limited, logged and only used to provide support.

Children

Installa is a business tool and is not intended for anyone under 18.

Changes to this policy

We will post changes here and, where they are significant, tell account owners by email.

Contact

IGC Enterprises Ltd, company number 7074130. Email privacy@installa.com.