Legal

Privacy Policy

Last updated: April 2026

Who We Are

This privacy policy applies to the Marillion Solar platform operated by MarillionEX. Contact: privacy@marillionex.com

What Data We Collect

Personal Data

• Full name
• Email address
• Phone number
• Country of residence
• Password (encrypted)
• Payment information (processed by Stripe — we do not store card numbers)
• Bank account or mobile money details (for payouts)

Installation Data

• GPS coordinates (latitude and longitude) of your solar installation
• Address (auto-detected or manually entered)
• Solar system specifications (panel count, wattage, tilt, azimuth, geyser size, etc.)
• Photographs of your installation
• Documents (invoices, certificates, electricity bills)
• Calculated carbon savings and credit estimates

Usage Data

• Login times and IP addresses
• Pages visited and features used
• Device type and browser information

Business Data (business accounts)

• Business name and registration number
• Industry sector
• Employee count
• Energy consumption data from electricity bills

Why We Collect It

We collect and process your data to:

• Create and manage your account
• Verify your solar installation using GPS and satellite imagery
• Calculate your carbon savings and credit estimates
• Aggregate installations into carbon credit portfolios
• Process payments and payouts
• Send you notifications about your account, verification status, and earnings
• Improve the platform and our services
• Comply with legal and regulatory requirements
• Generate anonymised analytics and market insights

Legal Basis for Processing

We process your data based on:

• Contract performance (providing the service you registered for)
• Legitimate interest (improving our platform, fraud prevention)
• Consent (marketing communications — you can opt out at any time)
• Legal obligation (financial record-keeping, tax reporting)

GPS and Location Data

We collect precise GPS coordinates to:

• Verify the physical location of your installation
• Calculate location-specific solar irradiance and energy generation estimates
• Enable satellite imagery verification by our admin team
• Display your installation on the portfolio map

GPS coordinates are essential to the service and cannot be opted out of while maintaining an active registration. Your exact address is visible only to Marillion administrators and is not shared publicly. The portfolio map displays approximate locations only, not exact addresses.

Who We Share Data With

We share data with:

Stripe (payment processing) — subject to Stripe's privacy policy
Email service providers (transactional emails)
Map and satellite imagery providers (Google Maps, Mapbox, or Esri)
Carbon credit verification bodies (when pursuing formal credit issuance — only aggregated, anonymised data unless you consent to sharing individual data)
Legal authorities (when required by law)

We do NOT:

Sell your personal data to third parties
Share your exact GPS coordinates publicly
Share your financial information with anyone other than payment processors
Use your data for advertising

Data Retention

• Account data: retained while your account is active and for 7 years after closure (for financial record-keeping)
• Installation data: retained while your installation is in the active portfolio and for 7 years after removal
• GPS coordinates: retained as long as the installation is registered
• Payment records: retained for 7 years (legal requirement)
• Uploaded photographs: retained while installation is active; deleted within 90 days of installation removal

Your Rights

Depending on your jurisdiction, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data (subject to legal retention requirements)
• Export your data in a portable format
• Withdraw consent for marketing communications
• Object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact: privacy@marillionex.com

Data Security

We protect your data using:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage (hashed, never stored in plain text)
• Role-based access controls (only authorised administrators can view personal data)
• Regular security reviews
• Stripe PCI-compliant payment processing

International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

Children

The platform is not intended for users under 18 years of age. We do not knowingly collect data from minors.

Cookies

The platform uses essential cookies for authentication and session management. We do not use advertising or tracking cookies.

Changes to This Policy

We may update this policy at any time. Material changes will be communicated by email. The "Last updated" date at the top indicates the most recent revision.

Contact

General / Info: info@marillion.ai
Support: support@marillionex.com
Data Protection: privacy@marillionex.com
Postal (UK): MarillionEX, 70 Pall Mall, St James's, London SW1Y 5NQ, United Kingdom
Postal (Africa): MarillionEX, 3 Dock Road, V&A Waterfront, Cape Town, South Africa