Privacy Policy

We collect personal data in the following categories:

Identity and contact data Your full name, email address, mobile number, and alternate contact number.

Property and location data Your property address, district and city, roof type, property ownership status (owner-occupied or tenant-occupied), and roof photographs were voluntarily submitted.

Electricity and utility data Your electricity distribution company (DISCOM), consumer number, and monthly electricity bill range.

Project and financial data Your recommended and confirmed solar package, project value, payment milestones, subsidy eligibility, and financing preference.

Technical usage data When you use our customer portal, we collect standard usage data including your browser type, IP address, pages visited, and session timestamps. This is used for security and to improve the portal experience.

Attribution data UTM parameters (source, medium, campaign, and content codes) associated with how you first contacted us. This data helps us understand which marketing or referral channels are working.

Communication records A record of emails and WhatsApp messages sent to you in connection with your project.

We do not collect any sensitive personal data as defined under applicable law, including financial account credentials, passwords, biometric data, or health information.

We process your personal data for the following purposes:

Service delivery To manage your solar installation project from initial enquiry through to commissioning, including survey, proposal preparation, DISCOM application, vendor assignment, and handover. This is the primary purpose for which we collect your data and the basis on which it is processed.

Communication To send you project status updates, appointment confirmations, and important notices by email and WhatsApp at each stage of your installation journey.

Subsidy assistance To prepare and submit your PM Surya Ghar — Muft Bijli Yojana subsidy application and your net metering application to your DISCOM on your behalf.

Portal access To create and maintain your customer portal account, allowing you to track your project status, access documents, and contact your relationship manager.

Vendor coordination To share necessary project details (your address, technical specifications, and project scope) with the installation partner assigned to your project, solely for the purpose of executing your installation.

Relationship management To assign a dedicated relationship manager and to maintain continuity of service over the course of your project and post-installation warranty and AMC period.

Attribution and marketing improvement To understand which channels and referral sources are bringing customers to Fender Energy, so we can allocate our marketing efforts fairly and reward referrers accurately. This uses UTM attribution data.

Legal and regulatory compliance To comply with our obligations under applicable law, including DISCOM regulatory requirements, GST records, and any directions from competent authorities.

Under the DPDP Act, 2023, we process your personal data on the following bases:

Consent: When you submit the solar survey form, you provide consent for us to contact you, assess your property, and begin the project process. You may withdraw consent at any time — see Section 8 for how to do this.

Legitimate use for contractual performance: Once you confirm your project and enter into an agreement with us, we process your data as necessary to perform that contract — including sharing your data with installation partners and submitting your DISCOM application.

Legitimate use for legal compliance: We retain certain records (invoices, project completion certificates, warranty documents) as required by applicable tax and business law.

We share your personal data only with the following categories of third parties, and only to the extent strictly necessary:

Installation partners (vendors) Certified solar installation companies who execute the physical installation at your property. They receive your name, address, project scope, and contact number. They are contractually bound to use this data only for your installation and not to retain or use it for any other purpose.

DISCOM authorities Your name, address, and consumer number are submitted to your electricity distribution company as part of the net metering registration and subsidy application process. This sharing is required by law.

Zoho Corporation (Bigin CRM, India DC) Our CRM (Zoho Bigin), email, and workflow tools are provided by Zoho Corporation Pvt. Ltd. When you submit an enquiry form on our website, your details — name, email, phone, city, state, company (for industrial enquiries), enquiry message, customer type, monthly bill (if provided), submission timestamp, and UTM parameters — are transmitted server-to-server to Zoho Bigin so our team can respond. Data is stored on Zoho's India-region servers. Legal basis: your explicit consent at form submission and our legitimate interest in responding to your enquiry. Retention: for the lifecycle of the lead in our CRM (minimum 24 months). Zoho acts as a Data Processor under a Data Processing Agreement with us.

Meta Platforms (WhatsApp Business) WhatsApp messages are sent through Meta's Business API. Your mobile number and the content of project-status messages are processed by Meta for the purpose of message delivery. Meta's data processing is governed by Meta's own Business Data Processing Terms.

Supabase Inc. Your customer portal account (email, authentication token, and linked project ID) is stored with Supabase, our authentication provider. Supabase acts as a Data Processor.

Panasonic India For warranty registration of Panasonic solar modules installed at your property, your name, address, and installation details may be shared with Panasonic India. This is done only after project completion and only for the purpose of warranty activation.

We do not sell, rent, or trade your personal data to any third party for marketing, advertising, or any commercial purpose whatsoever.

We retain your personal data for the following periods:

At the end of the applicable retention period, your personal data is securely deleted or anonymised.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed by us:

Right to access You may request a summary of the personal data we hold about you and the purposes for which it is being processed.

Right to correction and erasure You may request that we correct any inaccurate or incomplete personal data, or erase your personal data where we no longer have a legal obligation to retain it.

Right to grievance redressal You may raise a complaint or grievance with our Grievance Officer if you believe your personal data has been processed in violation of the DPDP Act. We will respond within the timeline prescribed by the Act.

Right to nominate You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity. To register a nominee, write to our Grievance Officer.

Right to withdraw consent Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. Please note that withdrawal of consent may affect our ability to continue delivering your solar project — we will communicate the specific implications when you make such a request.

We operate a categorised consent framework. On your first visit you are asked to choose which categories to allow, and you can change or withdraw your choice at any time using the Cookie preferences link in the footer.

Essential: Required for the site to function — authentication, session, security, and storage of your consent choice itself. Always on.

Functional: Third-party embeds that add features but are not strictly required — currently Google Maps (interactive service-point locator) and Zoho Forms (embedded enquiry form). Off by default; the pages show a placeholder until you enable this category.

Analytics: We use Google Analytics 4 (provided by Google LLC) to measure how visitors use the public website — pages viewed, project and package interest, and completed enquiries — in aggregate. It is switched off until you enable this category. When enabled, it sets two first-party cookies, _ga and _ga_G-QKJCNPCXL5, each stored for up to two years, and Google receives the page address and title, your approximate location derived from your IP address (the IP address itself is not stored by us), and basic device and browser information. We do not send Google your name, email address, phone number, enquiry contents, or any account identifier, we do not use Google's advertising or cross-device features, and we do not track pages inside the customer, vendor, or administrator portals. Because Google processes this data on servers outside India, enabling analytics involves a transfer of this limited, non-identifying information abroad. Analytics consent is entirely optional and refusing it does not restrict any part of the site. You can withdraw it at any time from Cookie preferences in the footer, which immediately stops further measurement and deletes the analytics cookies from your device. Google's own privacy information is available at policies.google.com/privacy.

Marketing: Advertising and re-marketing pixels. No marketing service is currently active on the site; the category exists so any future addition requires your explicit consent.

We record each consent decision (accept, reject, or preference change) in an audit log for compliance, together with the policy version, a random anonymous visitor identifier, your browser's user-agent string, and a salted hash of your IP address. We do not store your raw IP address, use cookies for cross-site advertising, or sell your personal data.

When we materially update this policy or the Cookie Notice, the policy version is bumped and you will be asked to review your choices again.