Privacy Policy

This Privacy Policy describes how SOLAR-MAIT (Rosol Energy Private Limited), located at Plot No 14 & 15, 2nd Floor, Above SBI Bank, Ranaji Enclave, Masudabad, Najafgarh, New Delhi 110043, collects, uses, and discloses your information when you use our Service at solarmait.com, in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

Key terms used throughout this policy:

• Account — a unique profile created for you to access our Service
• Company / Data Fiduciary — SOLAR-MAIT / Rosol Energy Private Limited, who determines the purpose and means of processing your Personal Data
• Consent Manager — a person registered with the Data Protection Board who enables you to give, manage, review, and withdraw consent through an accessible, transparent platform
• Cookies — small files placed on your device to store browsing data
• Data Principal — the individual to whom the personal data relates (i.e., you)
• Personal Data — any data about an individual who is identifiable by or in relation to such data
• Service — the SOLAR-MAIT website at solarmait.com
• Usage Data — information automatically collected from your interactions with the Service

We collect the following categories of personal data when you register, make a purchase, or interact with our platform:

• Email address
• First and last name
• Phone number
• Address details — state, province, ZIP code, and city

We also collect Usage Data automatically, which may include:

• Your device's IP address and browser type
• Pages visited and time spent on each page
• Unique device identifiers and diagnostic data
• Referral URLs and search terms

We collect this data directly from you — through account registration, consultation and quote request forms, and order/checkout flows — and do not currently offer sign-in via third-party social accounts.

We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. The types we use include:

• Session Cookies — temporary cookies deleted when you close your browser, used for authentication and fraud prevention
• Persistent Cookies — remain on your device to remember your preferences and consent choices
• Web Beacons — small electronic files used to track user engagement and email open rates

You can instruct your browser to refuse all cookies or alert you when cookies are being sent. However, some features of our Service may not function properly without cookies.

Under the DPDP Act, we process your Personal Data only where you have given free, specific, informed, unconditional, and unambiguous consent for a stated purpose, or where processing falls under a "legitimate use" recognised by the Act (for example, to fulfil a contract you've entered into with us, such as processing an order you place).

Consent requests are presented in clear, plain language, separately from any other information, and you may withdraw consent at any time as easily as you gave it — withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us using the details in the "Contact Us" section below.

Where we make consent available through a Consent Manager in the future, this section will be updated with details of that mechanism.

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Service
• To manage your account and purchases
• To fulfil contracts for products and services you order
• To contact you via email, SMS, or phone for service-related communications
• To send marketing communications about similar products or services (you may opt out at any time)
• To improve our Service and analyse usage trends
• To evaluate potential business transfers or partnerships
• To comply with legal obligations

We do not sell your personal data. We may share information with:

• Service providers (Data Processors) who assist us in operating the website and conducting our business, acting only on our instructions and under contractual confidentiality obligations
• Business partners offering complementary products or services
• Affiliates who are required to honour this Privacy Policy
• Other users in publicly visible areas of the platform (e.g., reviews)
• Third parties with your explicit consent
• Entities involved in a merger, acquisition, or asset sale
• Government or regulatory authorities where required by law, or in the interest of India's sovereignty, integrity, or security

Under the DPDP Act, you have the following rights in relation to your Personal Data:

• Right to Access — request a summary of the personal data we hold about you and how it is being processed
• Right to Correction & Erasure — request correction of inaccurate or incomplete data, and request erasure of data that is no longer necessary for the purpose it was collected
• Right to Grievance Redressal — raise a complaint with us and receive a response within a reasonable timeframe (see "Grievance Officer" below)
• Right to Nominate — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity
• Right to Withdraw Consent — withdraw previously given consent at any time, as described in "Legal Basis & Your Consent" above

To exercise any of these rights, contact us using the details in the "Contact Us" section below. We will respond within the timelines prescribed under the DPDP Act and its rules.

We retain your Personal Data only for as long as is necessary for the purpose for which it was collected, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements — after which it is deleted or anonymised, in line with the DPDP Act's data minimisation and storage-limitation principles.

Where you withdraw consent or your data is no longer needed for its original purpose, and we have no other legal basis to retain it, we will erase it within a reasonable period, unless retention is required by law.

Your information may be processed on servers located outside your state or, where applicable, outside India. Under the DPDP Act, cross-border transfer of personal data is permitted except to countries specifically restricted by the Central Government; by using our Service, you acknowledge this processing.

We implement reasonable security safeguards — including access controls and encryption in transit — to protect your Personal Data against unauthorised access, use, alteration, or disclosure, and to prevent personal data breaches. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to affect you, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timeframe prescribed under the DPDP Act, including the nature and likely consequences of the breach and the measures taken to mitigate it.

In compliance with the DPDP Act, we have designated a Grievance Officer to address your questions, complaints, or concerns about how your Personal Data is processed:

• Name: [Grievance Officer name — to be confirmed]
• Email: [grievance officer email — to be confirmed]
• Address: Plot No 14 & 15, 2nd Floor, Above SBI Bank, Ranaji Enclave, Masudabad, Najafgarh, New Delhi 110043

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.

Under the DPDP Act, a "child" is any individual under the age of 18. Our Service is not directed at children, and we do not knowingly process the personal data of a child without verifiable consent from a parent or lawful guardian.

We do not undertake behavioural monitoring, targeted advertising directed at children, or any processing likely to cause harm to a child's wellbeing.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at solar@solarmait.com so we can take appropriate action, including erasure of that data.

Our Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites.

We encourage you to review the privacy policy of every website you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified via email or a prominent notice on our website before they take effect.

The date at the top of this policy reflects when it was last updated. We encourage you to review this page periodically.

If you have any questions or concerns about this Privacy Policy, our data practices, or wish to exercise any of your rights as a Data Principal, please reach out to us:

• Email: solar@solarmait.com
• Phone / WhatsApp: +91 844-844-6252
• Address: Plot No 14 & 15, 2nd Floor, Above SBI Bank, Ranaji Enclave, Masudabad, Najafgarh, New Delhi 110043