Last updated: 18 September 2026
SolarOptics ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share personal data when you visit solaroptics.co (the "Site"), purchase our products, or contact us. It applies to individuals in the European Economic Area (EEA) and the United Kingdom and is issued in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR.
1. Data controller
SolarOptics Group Inc. is the data controller responsible for personal data processed through solaroptics.co. You can contact us directly at support@solaroptics.co for any privacy-related questions or to exercise your rights described below.
2. Personal data we collect
- Contact data — name, email address, company name, country, and any message you provide via our contact or wholesale enquiry forms.
- Order data — billing and shipping address, items ordered, order value, and order reference.
- Payment data — handled by the payment provider displayed at checkout. We do not receive or store full card details on our servers; we receive transaction, payment-status and limited card-reference information needed to administer the order.
- Technical data — IP address, browser type, device type, time zone, and pages visited, collected via standard server logs and limited first-party analytics.
3. How we use your data and legal bases
- To process and ship your order, issue invoices, send transactional order and service messages, and provide customer support — performance of a contract (Art. 6(1)(b) GDPR).
- To respond to contact and wholesale enquiries — legitimate interests (Art. 6(1)(f)) in answering business communications.
- To meet tax, accounting, and product-safety obligations — legal obligation (Art. 6(1)(c)).
- To send optional marketing updates where you have expressly opted in — consent (Art. 6(1)(a)), which you may withdraw at any time. Transactional messages needed to fulfil or support an order do not rely on marketing consent.
- To secure the Site, prevent fraud, and improve our services — legitimate interests (Art. 6(1)(f)).
4. Sharing your data
We share personal data only with trusted third parties acting as processors:
- Checkout and payment providers — including the provider displayed at checkout, to process payment and help prevent fraud.
- Shopify — product catalogue, cart, order processing and fulfilment administration.
- Lovable Cloud — database, hosting and infrastructure used to operate the Site and store order and enquiry records.
- Lovable and Mailgun — transactional email delivery, optional marketing email delivery, and bounce, complaint and suppression handling.
- Google Ads — advertising measurement only after you consent to non-essential cookies.
- Shipping and fulfilment providers — the carrier and fulfilment services used for the destination and order.
- Accounting and tax advisors — to meet our legal obligations.
We do not sell your personal data. We may disclose data where required by law or to protect our rights.
5. International transfers
Where data is transferred outside the EEA or UK (for example to a US-based sub-processor of a payment, commerce, hosting, email or advertising provider), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU–US Data Privacy Framework where applicable.
6. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including fulfilling and supporting orders, responding to enquiries, meeting accounting, tax and product-safety obligations, resolving disputes, preventing fraud, maintaining security, and establishing or defending legal claims. Marketing consent records are kept while consent remains relevant and as needed to record withdrawals or suppression choices. The applicable period therefore depends on the record, transaction, legal requirements and any dispute or enforcement need.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Request erasure ("right to be forgotten");
- Restrict or object to certain processing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, without affecting prior lawful processing;
- Lodge a complaint with your local supervisory authority (e.g. the Irish DPC, the French CNIL, or the UK ICO).
To exercise any right, email support@solaroptics.co. We handle requests without undue delay and generally within one month, subject to any extension permitted by applicable law for complex or numerous requests.
8. Cookies
The Site uses strictly necessary cookies to operate the cart and checkout. Any non-essential cookies and scripts, including Google Ads conversion measurement, are loaded only after you give consent via our cookie banner. Google may receive device, browser, interaction and conversion information when that tracking is enabled. You can change your preferences at any time.
9. Security
We use TLS encryption, access controls, and reputable payment and hosting providers to safeguard your data. No system is perfectly secure, but we apply appropriate technical and organisational measures as required by Article 32 GDPR.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top reflects the latest revision. Material changes will be communicated on the Site or by email where appropriate.
11. EU/EEA & UK GDPR Representatives (Article 27)
SolarOptics Group Inc. has appointed representatives in the European Union and the United Kingdom pursuant to Article 27 of the applicable GDPR frameworks.
EU Representative
Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road, Cork
T23 AT2P, Ireland
Email: gdpr@euverify.com
UK Representative
Euverify Ltd (UK)
3rd Floor, 86-90 Paul Street
London, EC2A 4NE
United Kingdom
Email: gdpr@euverify.com
Individuals in the EU/EEA or UK may contact either SolarOptics Group Inc. directly or our appointed representative regarding their personal data, including access, deletion and other data-protection requests.
You can use the external portal below to verify our appointed representative and to submit GDPR-related requests.
Verify Our GDPR Representative / Submit a GDPR Request
12. Contact
SolarOptics Group Inc. — Privacy enquiries: support@solaroptics.co. Trade enquiries: sales@solaroptics.co.