RADIANT GRID ENERGIES

Legal

Privacy Policy

What personal data Radiant Grid Energies collects through this website, why, who sees it, and the rights you have under the Data Protection Act, 2019 of Kenya.

1.Who we are

Radiant Grid Energies (“RGE”, “we”, “us”) is an energy infrastructure company based at Delamere Court, Milimani, Nairobi, Kenya. We decide how and why the personal data described in this policy is used, which makes us the data controller.

For any question about this policy or your data, email business@radiantgrid.co.ke or call +254 723 544 097.

2.Data we collect

  • Contact details you give us: name, company, role, email address, phone number and the town and county of your site.
  • Project information: your answers in the energy assessment (property type, monthly electricity bill range or figure, solutions of interest, roof or site type and area, number of vehicles or units, preferred delivery model and timeline) and anything you write in a message.
  • Consent record: which version of this policy you agreed to, and when.
  • Technical and source data: the page you submitted from, campaign tags in the link you used (UTM source, medium and campaign), your browser type, and a keyed hash of your IP address. We do not store the IP address itself.

We do not ask for sensitive personal data. Please do not include any in free-text messages.

3.Why we use it and our lawful basis

  • To respond to your request: preparing your indicative estimate, answering a quote request and contacting you. Our basis is your consent, and steps taken at your request before a possible contract.
  • To manage enquiries: keeping records, following up and tracking our sales pipeline. Our basis is our legitimate interest in running our business, balanced against your rights.
  • To keep the site secure: bot checks and limits on repeat submissions. Our basis is our legitimate interest in preventing spam and abuse.
  • To prove your consent: keeping the record described above.

You can withdraw your consent at any time by contacting us. Withdrawal does not affect what we did before you withdrew, and we will stop contacting you about your request.

We do not make decisions about you that have legal or similarly significant effects. The assessment estimate is an automated calculation for screening only, and any priority marking on an enquiry is internal and only helps us respond sooner.

4.Who we share it with

We use the following service providers, who handle data on our behalf:

  • Supabase: the database where enquiries are stored.
  • Resend: sends our notification and confirmation emails.
  • HubSpot: customer relationship management, used to track enquiries where enabled.
  • Cloudflare Turnstile: checks that a form is submitted by a person.
  • Vercel: hosts the website and runs the form handling.
  • Google Workspace: our company email.

We do not sell personal data. We may share it with professional advisers under confidentiality, where the law requires it, or with your agreement, for example when we introduce a financing partner to your project.

5.International transfers

Some of our providers store or process data outside Kenya. Where that happens, we rely on the safeguards the Data Protection Act, 2019 requires, such as contractual commitments, or on your consent where the Act asks for it.

6.How long we keep it

We keep enquiry and assessment records for 24 months after our last contact with you. If you become a client, we keep project records for as long as we need them to deliver the service and meet legal obligations. Consent records are kept for as long as we hold the related data.

When the period ends we delete or anonymise the records.

7.How we protect it

We use encryption in transit (HTTPS), restrict access to our database and email systems, keep secret keys on the server and out of the browser, store hashed instead of raw IP addresses, and use spam controls on our forms. No system is completely secure. If a breach affects your data, we will notify you and the ODPC where the Act requires.

8.Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be told how your data is used;
  • access the data we hold about you;
  • object to processing and ask us to correct inaccurate data;
  • ask us to delete your data;
  • receive your data in a portable format where the Act provides for it; and
  • withdraw your consent at any time.

To use any of these rights, email business@radiantgrid.co.ke. We respond within the period the Act requires. You may also complain to the Office of the Data Protection Commissioner (odpc.go.ke). We would welcome the chance to put things right first.

9.Cookies

Our Cookie Notice explains the cookies and similar technologies the site uses.

10.Children

This site is for businesses and is not aimed at anyone under 18. We do not knowingly collect data from children.

12.Changes to this policy

We update this policy when our practices change, and show the version and date at the top of this page. If a change affects data you have already given us, we will tell you where we can.