Renewable Labs
Request an O&M assessment

Legal

Privacy Policy

Last updated 5 October 2026 · Ελληνικά

Who we are

Renewable Labs is an energy consulting practice based in Cyprus, operated by SK Renewable Laboratory Ltd (registered in Cyprus, HE 458890), which is the controller of the personal data described here. For questions about this policy or how we handle your data, contact us at info@renewable-labs.com.

What we collect

We collect personal data when you give it to us directly or, only if you accept it, through the advertising measurement described below. Specifically:

  • Contact form submissions. When you submit our contact form, we receive your name, email, optional company name, the message you wrote, and any service and system details you choose to add (the service you are interested in, asset type, capacity band and district). We also record the page you sent it from and, if the link you arrived on carried campaign tags (for example utm_source), those tags. If you accepted cookies, the page we record may instead be the first page of your visit, and we also record the website that linked you here (its domain only), as explained under "Cookies and analytics" below.
  • LinkedIn lead forms. When you fill in a form in one of our LinkedIn ads, LinkedIn passes us the details you submit: your name, work email, company, job title, and your answers to our questions (for example the size of your solar system in kW and where it is). LinkedIn's own privacy policy covers what LinkedIn itself collects.
  • Facebook and Instagram lead forms. When you fill in a form in one of our Facebook or Instagram ads, Meta passes us the details you submit: your name, your email and, if the form asks for them, your phone number, company and town, and your answers to our questions (for example the size of your solar system in kW). We keep them in our CRM and send you a short email to confirm that we received your request. We may also call you, or message you on WhatsApp, at the number you gave. Meta's own privacy policy covers what Meta itself collects.
  • Messages on Messenger. When you write to our Facebook page on Messenger, we receive your messages, the name Messenger shows us for your profile and, if you came from one of our ads, which ad it was. We keep them in our CRM so that we can reply to you.
  • Data for work you engage us for. Only after you sign an engagement letter, we receive the data needed for your study, such as meter or production data you share with us through the DSO portal or your monitoring system. We use it only for your study.
  • Email correspondence. When you email us at info@renewable-labs.com, we retain your message and email address for as long as needed to respond and to keep a record of our work together.
  • Anonymous traffic data. Our hosting provider (Render) keeps standard server logs (IP, user-agent, requested URL) for security and operational purposes. We also run Cloudflare Web Analytics, a privacy-first, cookieless service that measures aggregate page views without setting cookies or identifying individual visitors, so it needs no consent. See "Cookies and analytics" below for the optional Google Analytics that runs only if you accept it.
  • Advertising measurement, only if you accept it. If you choose Accept all in the cookie banner, the Meta Pixel tells Meta which pages you viewed and that you sent the contact form, with the service you chose, so we can see whether our Facebook and Instagram ads lead to enquiries. It never sends your name, email or message. See "Cookies and analytics" below.

Why we collect it

  • To respond to your enquiry, to a message you send to our Facebook page, or to the request you sent through a LinkedIn, Facebook or Instagram form (steps you asked us to take before a possible contract).
  • To deliver the consulting services you've engaged us for.
  • To meet our legal and accounting obligations.

We do not sell or rent your personal data. The only data shared for marketing is the Meta Pixel measurement described below, and only if you accept it.

How we store it

Contact form submissions are delivered to our inbox via Web3Forms, then stored in our standard email system. The same submission is also stored in our customer relationship management (CRM) system, which runs on Supabase in the EU (Ireland), so we can follow up on your enquiry. Alongside the form, the CRM keeps your browser type and a one-way hash of your IP address, used only to block spam and abuse. When a new enquiry arrives, the CRM sends us an internal alert email through Postmark or Resend. LinkedIn form leads are downloaded from LinkedIn and kept in our email system and client records. Facebook and Instagram form leads and Messenger messages reach the same CRM directly from Meta. Server logs are retained by Render per their standard policy.

Some of this processing happens outside the European Union. Web3Forms forwards form submissions to our inbox from servers in the United States, under the European Commission's Standard Contractual Clauses in its data processing agreement. The internal alert email contains your enquiry (your name, contact details, company and message) and is sent through Postmark, which AC PM LLC runs in the United States, or through Resend, which Plus Five Five, Inc. runs in the United States. Both companies are certified under the EU-U.S. Data Privacy Framework. The same applies to the emails we send you through Postmark or Resend (see "Other services we use" below), which carry your name, your email address and the content of the email. Meta (for lead forms, Messenger and WhatsApp) and Render (for server logs) may also transfer data to the United States. Both are certified under the EU-U.S. Data Privacy Framework. Telegram also processes some data outside the European Union, as described under "Other services we use" below. For details of the safeguards or other legal basis that cover these transfers outside the European Union, write to us at info@renewable-labs.com.

We keep enquiry, message and lead details only for as long as we need them to handle your request and any work that follows, and client records for as long as the law requires for accounting purposes. You can ask us to delete your details at any time. If you ask us to delete your details, we still keep your email address on our do not email list, so that we do not add you again or email you again, unless you contact us first.

Other services we use

  • Postmark and Resend. Besides our internal alert, the emails we send you from our CRM go out through Postmark or Resend: the confirmation after a Facebook or Instagram form and our quotes when we send them by email. Where Postmark and Resend run is described under "How we store it" above.
  • WhatsApp. If you gave us a phone number, we may send you our quote or a message on WhatsApp, which Meta runs. The message carries your name and what we write to you, for example the size of your system and the price we quote. WhatsApp's own privacy policy covers what WhatsApp itself collects.
  • Telegram. We get internal alerts about new enquiries in a private Telegram chat that only we use. These enquiry alerts carry only a reference number, a link to the enquiry in our CRM and short labels such as the service, the channel, the ad, the system size range you picked or the enquiry's follow-up stage (for example "New enquiry L-1040 · O&M · Meta form"), never your name, contact details or message. If you write to us on Messenger, your messages and the name Messenger shows us for your profile may also be shown to us in that private Telegram chat so that we can reply to you. Telegram processes these alerts and messages outside the European Union. No European Commission adequacy decision covers transfers to Telegram, and Telegram does not offer standard contractual clauses for this use.
  • Google Gemini and Veo, Lovable and OpenAI. We use AI models (Google's Gemini and Veo, directly and through Lovable's AI gateway, which can also pass our requests to OpenAI models) to help us draft our own posts, images and videos. We do not send them your enquiry, your messages, your contact details or any other personal data about you.

Your rights

Under EU/Cyprus data protection law (GDPR), you have the right to:

  • Request a copy of the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete your data, subject to any legal retention requirement.
  • Object to processing or withdraw consent.

To exercise any of these rights, email info@renewable-labs.com.

Cookies and analytics

Cloudflare Web Analytics runs on every page. It is cookieless and privacy-first: it records aggregate traffic without cookies and without identifying you, so it does not need your consent.

We also use Google Analytics 4, which does set cookies. It stays off until you choose Accept all or Analytics only in the cookie banner: Google's code is not even loaded before you accept, and your IP address is anonymized. Accepting turns on analytics cookies only: Consent Mode v2 keeps advertising storage and the use of your data for ads denied even after you accept, and we do not use Google Analytics for advertising or ad personalization. If you accept, we use it to understand how visitors move through the site. If you decline, no analytics cookies are set and nothing is sent to Google.

If you accept, we also keep the following in your browser for this session only: the campaign tags of the link you first arrived on (for example utm_source=facebook), the first page you landed on, and the address of the website that linked you here, if any (its domain only, for example https://www.linkedin.com, never the full page address). We send them with your enquiry so we know which post, ad or website brought you. Google Analytics then records that an enquiry was sent, without your name or email. If you decline, none of this happens, and the form carries only the page you send it from and that page's own campaign tags. If your browser sends a Global Privacy Control or Do Not Track signal, we keep none of this even if you accept.

If you choose Accept all, we also load the Meta Pixel from Meta Platforms Ireland Limited. We use it only to measure whether our Facebook and Instagram ads lead to enquiries. It sends Meta the pages you view, a "form sent" event with the service you chose, and technical data such as your IP address and browser details. It never sends your name, email or message. Meta may link these events to your Facebook or Instagram account if you are logged in. It sets the _fbp cookie, and _fbc when you arrive from one of our ads, for up to 90 days.

For collecting and transmitting this data, we and Meta are joint controllers under Article 26 GDPR, as set out in Meta's Controller Addendum. Meta's own use of the data is covered by its policy at facebook.com/privacy/policy. Meta may transfer data to the United States under the EU-US Data Privacy Framework. The legal basis is your consent. If your browser sends a Global Privacy Control signal, the pixel never loads, even if you choose Accept all. Choosing Analytics only or Decline keeps it off.

On this page the cookie banner does not open by itself, so you can read this policy before you choose. Until you choose, Google Analytics and the Meta Pixel stay off. You can make, change or withdraw your choice at any time with the Cookie settings button below.

Changes to this policy

We will update this page when our practices change. The date at the top reflects when the policy was last revised.