Privacy Policy

Introduction

SolarCascade Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website at solarcascade.world or use our services.

Data Controller Information

The data controller responsible for your personal information is SolarCascade Ltd, a company registered in Cyprus with registration number HE621524, VAT number CY95125463X, located at Poseidonos Avenue 51, Nicosia, 1029, Cyprus.

Data We Collect

We may collect and process the following types of personal data about you:

• Contact Information: Name, email address, phone number, postal address
• Communication Data: Records of your communications with us, including messages sent through our contact forms
• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Information about how you use our website and services
• Cookie Data: Information collected through cookies and similar tracking technologies
• Financial Information: Information about your student loans and debt situation (when voluntarily provided for consultation purposes)

How We Use Your Information

We use your personal data for the following purposes and under the following legal bases:

• Service Provision: To provide our student loan guidance and debt management services (Legal basis: Contract performance)
• Communication: To respond to your inquiries and provide customer support (Legal basis: Legitimate interests)
• Website Improvement: To improve our website functionality and user experience (Legal basis: Legitimate interests)
• Marketing: To send you information about our services (Legal basis: Consent or legitimate interests)
• Legal Compliance: To comply with legal obligations and protect our rights (Legal basis: Legal obligation)
• Analytics: To analyse website usage and improve our services (Legal basis: Legitimate interests)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party companies that help us provide our services (e.g., hosting providers, analytics services)
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with any merger, sale, or acquisition of our business

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

• Contact form submissions: 3 years from last contact
• Website analytics data: 26 months
• Cookie data: As specified in our Cookie Policy
• Customer service records: 5 years from last interaction

Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, access controls, and regular security assessments.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place to protect your data, including adequacy decisions by the European Commission or appropriate safeguards such as standard contractual clauses.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us about data protection matters, please reach out to us:

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable data protection laws. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.