1. About this notice
Lava Solar Sdn Bhd ("we", "us", "our") is a solar installer based at First Floor, Lot 12763, Block 16, Gala City, Kuching, Sarawak, Malaysia. We are the data user responsible for your personal data under the Personal Data Protection Act 2010 (Act 709) ("PDPA"), as amended.
This notice explains what personal data we collect through this website and when you contact us, why we collect it, who we share it with, and the rights you have. It is published in English and Bahasa Malaysia. If the two differ, the English version prevails.
2. Personal data we collect
Depending on how you deal with us, we may collect:
- Identity and contact details: your name, telephone or WhatsApp number, email address and the address of the property.
- Property and energy details: your roof and site information, photos you send us, and details from your electricity bill such as usage (kWh), amount and tariff. A bill can also show your account number, so please cover it before sending a photo if you prefer.
- Communications: messages you send us on WhatsApp, email, telephone or social media.
- Customer records: quotations, contracts, payment records, installation and commissioning records, and warranty and service history.
- Technical data: your IP address, device and browser type and the pages you view, collected automatically by our hosting and analytics tools.
3. How we collect it
- Directly from you, when you message, call, email or visit us or ask for a quotation.
- From Sarawak Energy and its subsidiary SESCO, where we act for you on your Net Energy Metering (NEM) application.
- Automatically, through this website (see section 5).
4. Why we use your personal data
- To reply to your enquiry and arrange a site survey and quotation.
- To design your system, prepare and submit your NEM application on your behalf, and install, test and commission it.
- To perform our contract with you, including invoicing, payments and warranty or service claims.
- To measure and improve how this website and our enquiry channels perform.
- To comply with the law, including tax, accounting and regulatory requirements, and to protect our legal rights.
- To send you information about our services, only where you have agreed (see section 9).
5. This website, cookies and analytics
The savings calculator runs in your browser. The figures you type in are not stored on our servers. They are only sent to us if you choose to press a WhatsApp button, in which case they appear in the message you send.
The contact form on this website does not submit data to us. It prepares a WhatsApp message that you review and send yourself.
We use Cloudflare to host and protect this website, and Google Analytics 4 (loaded through Cloudflare Zaraz) to count visits and WhatsApp button clicks. When you click a WhatsApp button, we record that a click happened together with, where relevant, the monthly bill entered, the number of panels recommended and the amount payable. This is not linked to your name or number. Analytics may use cookies or similar identifiers. You can refuse or delete cookies in your browser settings, and the site will still work.
Fonts on this site are loaded from Google Fonts, which means your IP address is sent to Google when a page loads.
We do not sell your personal data.
6. Who we share it with
We share personal data only as needed for the purposes above, with:
- Sarawak Energy Berhad and SESCO, and government or regulatory bodies, for NEM applications, meter installation, subsidy processing and compliance.
- Our installers, subcontractors and suppliers, for the parts of your project they carry out.
- Service providers that support us, such as Cloudflare (website hosting), Google (analytics and fonts) and WhatsApp (Meta Platforms) for messaging.
- Our professional advisers, banks and insurers, and the authorities where the law requires.
7. Transfers outside Malaysia
Some of the providers named above process data on servers outside Malaysia. Where we transfer personal data abroad, we do so only where the PDPA allows it, for example where the recipient is subject to law or safeguards that give substantially similar protection, or with your consent.
8. Consent and what happens if you do not provide data
By contacting us and giving us your details, you agree to us processing your personal data as described in this notice. You can withdraw consent at any time by contacting us (section 12).
Your name, contact details and property address are needed for us to respond to you, quote and install. If you do not provide them, we may not be able to help. Everything else is optional.
9. Marketing
We will only send you promotional messages if you have agreed to receive them. You can opt out at any time by telling us, and we will stop. Replying to an enquiry or sending a quotation is not marketing.
10. Security and data breaches
We take practical steps to protect personal data from loss, misuse, unauthorised access and disclosure, including limiting access to people who need it. If a personal data breach is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as the PDPA requires.
11. How long we keep it
- Enquiries that do not proceed: up to 24 months, then deleted or anonymised.
- Customer records (quotations, contracts, payments, installation and warranty records): for as long as your system is under warranty or service, and in any case at least 7 years to meet tax and accounting rules.
- Website analytics data: according to the retention settings of the analytics provider.
12. Your rights and how to contact us
Under the PDPA you may:
- ask for access to the personal data we hold about you;
- ask us to correct personal data that is inaccurate, incomplete or out of date;
- withdraw your consent, or limit how we process your data;
- ask us not to use your data for direct marketing;
- ask for your personal data in a commonly used format, or for it to be sent to another data user, where the law allows.
To exercise any right, write to us at lavasolarkch@gmail.com, call +60 12-887 7807, or write to First Floor, Lot 12763, Block 16, Gala City, Kuching, Sarawak, Malaysia. We may ask you to confirm your identity first, and we will respond within the time the PDPA requires (21 days for access and correction requests). We may charge a reasonable fee for access requests, as the law permits.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You may also complain to the Personal Data Protection Commissioner of Malaysia.
13. Children
Our services are for property owners and are not directed at anyone under 18. We do not knowingly collect personal data from children.
14. Links to other sites
This website links to WhatsApp, Facebook, Instagram and Google. They have their own privacy practices, and we are not responsible for them.
15. Changes to this notice
We may update this notice from time to time. The latest version is always on this page, with its date at the top.