Privacy Policy

1. Who We Are

Kasot Power Solutions Limited (RC: 9563851) is a solar energy company registered in Nigeria and acts as the data controller for the personal information described in this policy. Our registered address is No 7, Awofeso Street, Shomolu, Lagos, Nigeria. You can contact us at:

• Email: lightup@kasotpower.com
• Phone/WhatsApp: +234 802 542 2669

2. What Data We Collect

We collect only the data necessary to provide our services. This includes:

2.1 Data You Provide Directly

• Contact information: Name, email address, phone number
• Property information: Address/location, state, LGA, nearest landmark, and property type for the installation site
• Energy usage data: Appliance lists, monthly consumption/bill estimates, backup requirements (when using our calculator or quote forms)
• Quote request details: System preferences (with or without panel), budget range, power needs (supplementary or full off-grid), roof space, and whether you'd like a power audit
• Financial information for financing enquiries: If you request information about our financing options, we may share your name and contact details with our financing partners (see Section 5) at your request. We do not collect or store your bank account, card, or credit information ourselves.
• Communication records: Messages sent via email, WhatsApp, or our contact and quote request forms

2.2 Data Collected Automatically

• Usage data: Pages visited, time spent, links clicked
• Device information: Browser type, operating system, screen resolution
• IP address: Used for security and approximate geographic location

See our Cookie Policy for details on the specific cookies used to collect this data.

2.3 Data We Do Not Collect

We do not collect payment card details directly — outright payments are processed via bank transfer with no card data stored on our systems, and financed payments are handled entirely by the relevant financing provider. We do not collect sensitive personal data (health, biometric, or financial account data) without explicit consent.

3. How We Use Your Data

We use your personal data for the following purposes, each based on a lawful basis under the NDPA 2023:

4. Automated Processing

Our website includes a solar calculator and system explorer that use the information you provide (such as appliance lists or daily energy usage) to generate an automated system size and price recommendation. These recommendations are estimates for your convenience and do not result in any binding decision about you — a member of our team reviews every quote request before a formal offer is made. You may always request a manual review of any recommendation by contacting us.

5. Your Rights Under the NDPA 2023

Under Nigerian data protection law, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to deletion: Request deletion of your personal data (subject to legal retention requirements)
• Right to withdraw consent: Withdraw marketing or financing-referral consent at any time
• Right to object: Object to processing based on legitimate interest
• Right to data portability: Receive your data in a structured, commonly used format

To exercise any of these rights, contact us at lightup@kasotpower.com. We will respond within 30 days.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Website hosting and database infrastructure (Vercel, Supabase), transactional email delivery (ZeptoMail) — all under data processing agreements and used only to operate our website and communicate with you
• Financing partners: Checkoff Finance and our partner commercial bank, but only where you have expressly requested information about financing options, and only the contact details necessary for them to reach you
• Installation partners: For properties outside Lagos, only the data necessary to complete the installation
• Legal authorities: Where required by Nigerian law

Some of our service providers may process or store data on servers located outside Nigeria. Where this occurs, we take reasonable steps to ensure the provider offers an equivalent standard of data protection, consistent with the NDPA 2023's requirements for cross-border data transfers.

7. Data Retention

We retain personal data for as long as necessary for the purposes for which it was collected:

• Quote enquiries that do not convert: 12 months
• Customer installation records: 7 years (for warranty and legal purposes)
• Marketing consent records: Until consent is withdrawn

8. Cookies

Our website uses minimal cookies necessary for functionality. We do not use advertising or tracking cookies without your consent. See our Cookie Policy for details.

9. Children's Privacy

Our website and services are not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete it.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, access controls limiting staff access to only the data needed for their role, and regular security reviews. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and affected individuals in accordance with the timeframes and requirements set out in the NDPA 2023.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. We encourage you to review this policy periodically.

13. Contact and Complaints

For any privacy-related questions or to exercise your rights, contact:

If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.