About this Policy

CGA Green Energy ("CGA Green Energy", "CGA", "we", "us" or "our") respects the privacy of its customers, website visitors, vendors, installers, business partners, applicants and other users.

This Privacy Policy explains how we collect, receive, use, store, process, disclose, transfer, retain and protect personal data when you visit or use cgagreenenergy.com, submit an enquiry, request a quotation, subscribe to communications, purchase or enquire about products or services, interact with our B2B marketplace or vendor platform, apply for financing or insurance-related services, contact our support team, or otherwise interact with CGA Green Energy.

This Privacy Policy should be read together with our Terms & Conditions, Refund Policy and any additional notices or consent forms provided at the time personal data is collected.

Contents

• Scope of This Privacy Policy
• Personal Data We May Collect
• Information From Third Parties
• How We Use Personal Data
• Consent and Lawful Processing
• Cookies and Similar Technologies
• Analytics and Third-Party Technologies
• Marketing Communications
• Disclosure and Sharing of Personal Data
• B2B Marketplace and Vendor Platform
• Government Subsidy Assistance
• Data Retention
• Data Security
• Personal Data Breaches
• Your Privacy Rights
• User Responsibilities
• Children's Personal Data
• International Data Transfers
• Third-Party Websites and Services
• Social Media
• Business Transfers
• Legal Disclosures
• Do Not Track and Browser Controls
• Data Accuracy and Correction
• Withdrawal of Consent
• Grievance Redressal
• India Data-Protection Compliance
• Consent Notices at Collection Points
• Changes to This Privacy Policy
• Contact Us

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed through CGA Green Energy's website and related services, including, where applicable:

• Solar energy products and services
• Wind energy products and services
• Electric vehicle and EV charging solutions
• EV batteries and battery-related services
• Hybrid renewable-energy systems
• Biofuel services
• Biogas solutions
• Waste-management services
• Renewable-energy products and installations
• Maintenance and after-sales support
• B2B marketplace services
• Solar vendor and installer platforms
• Supplier and business-partner interactions
• Government subsidy assistance
• Loans and financing facilitation
• Insurance-related facilitation
• Quotations and consultations
• Customer support
• Newsletter and promotional communications
• Careers and recruitment
• Partnerships and collaborations; and
• Other services offered by CGA Green Energy from time to time.

2. Personal Data We May Collect

The personal data collected depends on how you interact with us.

2.1 Identification and Contact Information

Full name; email address; mobile/telephone number; residential or business address; city; state; PIN/postal code; country; and other contact information voluntarily supplied by you.

2.2 Enquiry and Quotation Information

Products or services you are interested in; property or installation location; project requirements; energy requirements; remarks or messages submitted by you; preferred method of communication; details necessary to assess your renewable-energy requirements; and records of communications with our representatives.

2.3 Transaction and Order Information

Products/services ordered; order number; transaction details; billing and shipping details; payment status; invoice information; refund information; and purchase and service history. Where payments are processed by a third-party payment service provider, payment-card, bank or UPI credentials may be collected directly by that provider rather than by CGA Green Energy. Such processing may also be governed by the provider's privacy policy.

2.4 Solar, EV and Renewable-Energy Project Information

Property type; site location; electricity-consumption information; electricity bills voluntarily provided to us; proposed system capacity; installation requirements; site-survey information; photographs or measurements of the installation site; equipment information; maintenance history; and other technical information reasonably required to provide the requested service.

2.5 Vendor, Installer and B2B Marketplace Information

Business/contact-person name; company/business name; business address; business email and telephone number; product/service information; professional qualifications; certifications; licences; tax/business-registration information where required; bank/payment information where required for legitimate transactions; quotations and commercial information; business communications; and other information necessary to verify or manage the commercial relationship.

We will collect identity, financial or verification information only where reasonably necessary for the relevant business purpose and permitted by applicable law.

2.6 Financing and Loan Information

Where CGA Green Energy facilitates access to financing or EMI services through third-party lenders or financial institutions, we may collect or facilitate the transfer of information required to process an enquiry or application. Depending on the service and lender requirements, additional information may be collected directly by the relevant lender. CGA Green Energy does not guarantee loan approval. The lender or financial institution may independently determine eligibility and process personal data under its own privacy practices and applicable laws.

2.7 Insurance-Related Information

Where we facilitate renewable-energy system insurance or related products, information necessary to obtain a quotation, assess eligibility, issue coverage or process an enquiry may be shared with the relevant insurer, intermediary or authorised service provider. Insurance providers may separately collect additional information and process it according to their own privacy policies and legal obligations.

2.8 Communications and Customer-Support Information

The content of your enquiry; correspondence; complaints; service requests; feedback; support history; and other information voluntarily provided during the communication. Calls may be recorded only where permitted by law and where appropriate notice is provided.

2.9 Newsletter and Marketing Information

If you subscribe to updates or otherwise consent to marketing communications, we may process your contact details and communication preferences to provide offers, renewable-energy updates, product launches, subsidy-related updates, service announcements, educational information and promotional communications. You may withdraw your marketing consent or unsubscribe at any time using the available mechanism or by contacting us.

2.10 Careers and Recruitment Information

Name and contact information; resume/CV; educational information; professional experience; skills and qualifications; employment history; portfolio or professional-profile information; and other information voluntarily supplied during recruitment.

2.11 Technical and Usage Information

IP address; browser type and version; device type; operating system; date and time of access; referring website/page; pages visited; website interaction information; session information; approximate location derived from IP address, where applicable; cookie identifiers; and technical logs. We use such information for website operation, security, analytics, troubleshooting and improvement.

3. Information From Third Parties

Where lawful and appropriate, we may receive information from vendors, installers, suppliers, manufacturers, business partners, financing partners, banks and lenders, insurance providers/intermediaries, payment processors, logistics providers, marketing or lead-generation partners, government portals or agencies where authorised, publicly available business sources, and other parties authorised by you. We process such information only for appropriate purposes and in accordance with applicable law.

4. How We Use Personal Data

We may process personal data to:

• Respond to enquiries and quotation requests
• Provide requested products and services
• Conduct site assessments and installations
• Manage orders, deliveries, installations and maintenance
• Provide customer support and after-sales service
• Connect customers with appropriate vendors, installers or service providers
• Operate B2B marketplace and vendor services
• Facilitate financing, loan or EMI enquiries
• Facilitate insurance enquiries
• Assist with eligible government subsidy processes
• Process transactions and refunds
• Verify users, vendors or business partners where appropriate
• Maintain customer and business records
• Send transactional or service-related communications
• Send marketing communications where permitted
• Improve our website, products and services
• Analyse website performance and usage
• Prevent fraud, abuse, cybersecurity incidents and unlawful activity
• Protect CGA Green Energy, customers and third parties
• Enforce contractual rights
• Resolve disputes and complaints
• Comply with tax, accounting, regulatory and legal requirements
• Respond to lawful requests from governmental or judicial authorities
• Establish, exercise or defend legal claims; and
• Carry out other purposes disclosed to you at or before the time of collection.

5. Consent and Lawful Processing

Where applicable law requires consent, CGA Green Energy will seek consent before processing personal data for the specified purpose. Your consent should be free, specific, informed, unconditional and unambiguous where such requirements apply.

You may withdraw consent for future processing where processing depends on your consent. Withdrawal of consent will not affect processing lawfully undertaken before the withdrawal. Certain information may still need to be retained or processed where required by law or where another lawful basis permits such processing.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local-storage technologies and similar technologies for essential website functionality, security, session management, remembering preferences, website performance, analytics, error detection, traffic measurement, and advertising or marketing where implemented and legally permitted.

Cookie categories

• Strictly Necessary Cookies — required for core website functions and security.
• Functional Cookies — remember settings and preferences.
• Analytics Cookies — help us understand how visitors use our website.
• Advertising/Marketing Cookies — may measure campaigns or provide relevant advertising where implemented.

Where legally required, non-essential cookies will be used subject to appropriate consent. Users may also manage cookies through browser settings; blocking certain cookies may affect website functionality.

7. Analytics and Third-Party Technologies

We may use analytics, hosting, content-delivery, security, communications, CRM or other technology service providers to operate and improve the website. Where such third parties process personal data on our behalf, we seek to use appropriate contractual, confidentiality and security safeguards. If third-party services independently determine how personal data is processed, their own privacy policies may also apply.

8. Marketing Communications

Subject to applicable law and consent requirements, we may communicate with users through email, SMS, telephone, messaging services or other authorised communication channels. You may opt out of promotional communications at any time. Opting out of marketing does not necessarily prevent us from sending essential transactional, contractual, security or service-related communications.

9. Disclosure and Sharing of Personal Data

We do not sell personal data merely for monetary consideration.

We may disclose personal data, where appropriate, to employees and authorised representatives; vendors and installers; suppliers and manufacturers; service and maintenance partners; logistics and delivery providers; IT, hosting and cloud providers; cybersecurity providers; CRM and communication providers; payment processors; banks, lenders and financing partners; insurance companies and intermediaries; professional advisers; government authorities and regulators; courts, tribunals or law-enforcement agencies where legally required; business partners involved in delivering a requested service; and other recipients with your consent or as permitted by applicable law.

Recipients should receive only information reasonably necessary for the relevant purpose.

10. B2B Marketplace and Vendor Platform

Where CGA Green Energy operates a marketplace or platform connecting customers, vendors, manufacturers, installers, suppliers or other businesses, certain information may need to be disclosed between participating parties to enable quotations, negotiations, orders, installations, project execution, customer support, payments, deliveries and other legitimate marketplace activities.

Users should avoid posting confidential or unnecessary personal information in publicly visible marketplace areas. Independent businesses participating on the platform may have their own privacy obligations and policies.

11. Government Subsidy Assistance

Where a customer asks CGA Green Energy to assist with a government renewable-energy subsidy or incentive, information may need to be provided to the relevant government department, portal, utility/distribution company, authorised agency, installer or other participant in the subsidy process. We will seek appropriate authorisation where required.

Eligibility, approval and payment of any government subsidy are determined by the relevant authority and not solely by CGA Green Energy.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing products/services, maintaining warranties, completing installation and maintenance obligations, handling customer support, fulfilling contractual obligations, maintaining transaction records, resolving disputes, preventing fraud, meeting accounting and taxation requirements, complying with applicable laws, and establishing or defending legal claims.

When personal data is no longer required and no lawful retention requirement applies, we will take reasonable steps to delete, anonymise or securely dispose of it. Different categories of information may have different retention periods.

13. Data Security

CGA Green Energy takes reasonable technical and organisational measures designed to protect personal data against unauthorised access, unlawful processing, accidental loss, misuse, alteration, disclosure, destruction and other security risks.

• Access controls
• Authentication measures
• Encryption in transit and/or at rest where appropriate
• Secure hosting
• Firewalls and security monitoring
• Backups
• Restricted administrative access
• Vendor-security requirements
• Staff confidentiality obligations; and
• Security reviews.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Users should also protect their devices, accounts and communications.

14. Personal Data Breaches

If a personal-data breach occurs, CGA Green Energy will take reasonable steps to investigate the incident, contain and mitigate potential harm, secure affected systems, document the incident, take corrective measures, and notify affected individuals and/or appropriate authorities where required under applicable law.

15. Your Privacy Rights

Subject to applicable law, individuals may have rights relating to their personal data, including the ability to:

• Request information about personal data being processed
• Request access to relevant information
• Request correction of inaccurate or misleading information
• Request completion of incomplete information
• Request updating of outdated information
• Request erasure where legally applicable
• Withdraw consent where processing is based on consent
• Opt out of marketing communications
• Raise a grievance concerning processing of personal data; and
• Exercise other rights available under applicable privacy law.

Requests may be subject to identity verification and applicable legal limitations.

16. User Responsibilities

Users should provide information that is accurate, complete and up to date. Users should not impersonate another person, submit another individual's personal data without authority, provide false or misleading information, or misuse CGA Green Energy's website or systems to collect personal information about others unlawfully.

Where you provide another person's personal data, you represent that you have appropriate authority or permission to provide such information where required.

17. Children's Personal Data

CGA Green Energy's commercial renewable-energy services are not primarily directed toward children. Where applicable law treats a person as a child for data-protection purposes, we will process a child's personal data only in accordance with applicable requirements, including obtaining verifiable consent from a parent or lawful guardian where required.

We do not knowingly intend to engage in tracking, behavioural monitoring or targeted advertising directed at children where prohibited by applicable law. If a parent or guardian believes that a child has submitted personal data improperly, they may contact us and request appropriate action.

18. International Data Transfers

Our website, hosting providers, technology providers or other service providers may process or store information in India or other jurisdictions. Where personal data is transferred outside India, CGA Green Energy will endeavour to comply with applicable Indian data-protection requirements and any restrictions imposed by the Government of India. Where appropriate, reasonable contractual and organisational safeguards may be used for cross-border processing.

19. Third-Party Websites and Services

Our website may contain links to websites, portals, social-media services, payment providers, lenders, insurers, manufacturers, government services or other third parties. CGA Green Energy does not control the independent privacy practices of such third parties.

Users should review the privacy policy of a third-party service before providing personal data directly to that service. The presence of a third-party link does not by itself mean that CGA Green Energy controls that third party's processing of personal data.

20. Social Media

If you interact with CGA Green Energy through a social-media platform, the platform may independently collect and process information under its own terms and privacy policy. Information you make publicly available through social media may be visible to others.

21. Business Transfers

If CGA Green Energy undergoes a merger, acquisition, restructuring, financing, sale of assets, transfer of business or similar corporate transaction, relevant personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

22. Legal Disclosures

We may disclose information where reasonably necessary to comply with applicable law; respond to lawful government requests; comply with court orders or legal proceedings; investigate suspected fraud or illegal conduct; protect our systems and services; protect the safety and rights of individuals; enforce our agreements; or establish, exercise or defend legal claims.

23. Do Not Track and Browser Controls

Some browsers provide privacy preferences or 'Do Not Track' signals. Because technical standards and legal requirements concerning such signals may differ, our website may not respond uniformly to all browser signals. Users may nevertheless manage cookies and related technologies through available browser or website controls.

24. Data Accuracy and Correction

We encourage users to ensure that information supplied to CGA Green Energy remains accurate and current. If your contact or other personal information changes, you may request that we update our records, subject to verification and applicable legal requirements.

25. Withdrawal of Consent

Where we rely upon consent, you may withdraw it by contacting CGA Green Energy through the contact information below. Following a valid withdrawal request, we will stop processing the relevant personal data for consent-dependent purposes unless continued processing is permitted or required by law.

Withdrawal may affect our ability to provide a service where the relevant personal data is necessary to perform that service.

26. Grievance Redressal

If you have a complaint, concern or question regarding the processing of your personal data, you may contact our designated privacy/grievance contact. We will endeavour to acknowledge, investigate and resolve legitimate privacy grievances within the period required by applicable law.

27. India Data-Protection Compliance

CGA Green Energy intends to process digital personal data in accordance with applicable Indian data-protection and information-technology laws, including, as and when applicable, the Digital Personal Data Protection Act, 2023, applicable rules made under it, and other applicable statutory or regulatory requirements.

Where provisions of this Privacy Policy conflict with a mandatory requirement of applicable law, the mandatory legal requirement will prevail. Nothing in this Privacy Policy is intended to limit any non-waivable statutory privacy right.

28. Consent Notices at Collection Points

Where required, CGA Green Energy may display a separate privacy notice or consent statement when collecting personal data through enquiry forms, quote forms, newsletter forms, vendor registration, marketplace registration, loan/financing enquiries, insurance enquiries, job applications, contact forms or other digital forms.

Such notices may specify the information collected, purpose of processing and method for withdrawing consent.

29. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, new website features, changes in technology, new business partnerships, changes in data-processing practices, or changes in legal or regulatory requirements.

The revised policy will display an updated 'Last Updated' date. Where a change materially affects the processing of personal data, we may provide additional notice or seek fresh consent where required by law. Users are encouraged to review this Privacy Policy periodically.

30. Contact Us