Privacy Policy

This policy describes what Lakecity Solar Energy collects through this website, why, where it is kept and what you can require us to do about it. It is written to be checked rather than skimmed, so it names actual fields and actual systems instead of describing categories.

If anything here does not match what you experience on the site, that is a defect and we would like to know.

The short version

• We collect only what you type into a form, plus the minimum a web request requires to work.
• There is no third-party analytics on this site. No Google Analytics, no Meta pixel, no advertising or behavioural-tracking script of any kind. We do not build a profile of you and we have nothing to sell to anyone who would.
• We do not sell, rent or trade your personal data. Not to lead aggregators, not to other installers, not to finance companies.
• The only cookie we set is the one that keeps you signed in, and it is set only if you sign in.

What we collect, field by field

When you request a call-back or a quotation, the form submits: your name, phone number, and — only if you choose to provide them — email address, address, city, and any notes you write. The page you submitted from is recorded so we know what you were reading when you got in touch.

When you book a site survey, the same fields, plus your preferred date and an estimated system capacity if you have used the calculator.

When you subscribe to updates, your email address only.

When you comment on an article, the content of your comment and the article it belongs to. Commenting requires you to be signed in.

When you sign in, we use your phone number and a one-time password sent to it.

That is the complete list. There is no hidden field, and nothing is collected from you that you have not typed.

What is collected automatically, and how little that is

Spam protection. Forms are protected by Cloudflare Turnstile. To verify a submission, your IP address is passed to Cloudflare at the moment you submit. It is used for that check and is not stored with your enquiry.

Ordinary server logs. Like any website, requests reach a server that necessarily sees an IP address and a browser user-agent. This site runs on Cloudflare Workers, and Cloudflare processes that request data as our infrastructure provider under its own terms.

No behavioural tracking. We do not run tag managers, session recording, heatmaps or advertising pixels. Nothing on this site follows you to another site.

Cookies

One cookie, and only if you sign in:

Cookie	Purpose	Lifetime
lse_customer_session	Keeps you signed in to your project area	30 days

It is httpOnly (unreadable by page scripts), secure in production, and set with SameSite=Lax. It contains a session token, not your personal details.

If you never sign in, this site sets no cookie of ours at all — which is also why you are not shown a consent banner. There is nothing to consent to.

Why we hold it, and for how long

We use what you give us to respond to your enquiry, carry out a survey, prepare a quotation, deliver and support an installation, and — where the project involves it — to file your subsidy application and your net-metering application with your distribution company. Some of that data must be shared for those filings to happen: a PM Surya Ghar application goes to the National Portal, and a net-metering application goes to your DISCOM. That is the purpose of collecting it, and it cannot be done without it.

We also use it to meet obligations that outlast the project — tax and accounting records, and warranty and maintenance obligations that run for years after commissioning.

Enquiry data is kept while the enquiry is live and for a reasonable period afterwards in case you return. Project data is kept for as long as we have obligations arising from the installation. Records we are required by law to retain are kept for the period the law requires.

Where it lives, and who can reach it

Data is stored on Cloudflare infrastructure — its D1 database, KV store and R2 object storage — which we use as our processor. Access within Lakecity Solar Energy is limited to people who need it to do the work.

We share personal data outside the company only where it is necessary:

• Your distribution company (MPCZ, MPWZ or MPEZ) for the net-metering application.
• The PM Surya Ghar National Portal for a subsidy application.
• Cloudflare, as infrastructure and spam-protection provider.
• Where the law requires it, or to establish or defend a legal claim.

We do not share with advertisers, data brokers or lead-generation networks.

WhatsApp and phone

If you contact us on WhatsApp or by phone, that conversation happens on that platform and under that platform's own privacy terms as well as this policy. We will use what you tell us there for the same purposes set out above.

Your rights under the DPDP Act, 2023

India's Digital Personal Data Protection Act, 2023 gives you rights over personal data we hold about you. You may:

• Ask what we hold and how it has been processed and shared.
• Have it corrected where it is inaccurate, or completed where it is incomplete.
• Have it erased, where we no longer need it for the purpose it was collected for and no law requires us to keep it.
• Withdraw consent at any time where our processing rests on your consent — including unsubscribing from updates. Withdrawal applies going forward; it does not make lawful past processing unlawful, and it may mean we can no longer carry out a service you have asked for.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Complain to the Data Protection Board of India if you believe your rights have not been honoured.

To exercise any of these, contact us using the details on our contact page and say what you want done. We will act on it and confirm when it is complete.

Children

This site is not directed at children, and we do not knowingly collect personal data from a child. If you believe a child has submitted information to us, tell us and we will delete it.

Security, honestly stated

Data in transit is encrypted. The session cookie is httpOnly and secure. Access is limited to those who need it. Forms are protected against automated abuse.

No system is perfectly secure, and we will not claim otherwise. What we will commit to is that if a breach affects your personal data, we will tell you and the Data Protection Board as the DPDP Act requires, rather than deciding on your behalf that it did not matter.

Changes

If this policy changes materially we will update the date at the top of this page. A change will never retroactively broaden what we did with data collected under an earlier version.