Privacy Policy
Last updated: March 2026
1. Who we are
LDP Solar Ltd (“LDP Solar”, “we”, “us”) operates the platform at ldpsolar.com. We develop dual-use solar greenhouse projects across the UK.
Contact: linus@ldpsolar.com
2. What data we collect
We collect the following personal data when you create an account or submit information through our platform:
- All users: full name, email address, password (stored as a secure hash — we never store your plain-text password)
- Farmers / landowners: farm name, address, county, postcode, land size (acres), notes about your land
- Investors: investment range, preferred deal type, message
3. Why we collect it (lawful basis)
- Contract performance: to operate your account and provide the platform service
- Legitimate interests: to assess land suitability and contact you about relevant projects
- Consent: to send you updates and investment information (which you can withdraw at any time)
4. How we store and protect your data
All data is stored in a PostgreSQL database hosted by Supabase on AWS infrastructure within the EU (eu-west region). Data is encrypted in transit (TLS) and at rest. We do not sell or share your data with third parties, except where necessary to operate the service (e.g. our hosting provider).
5. Cookies
We use a single session cookie (next-auth.session-token or __Secure-next-auth.session-token) solely to keep you logged in. We also use Vercel Analytics to collect anonymous, aggregated page-view data (no personal data, no cross-site tracking). We do not use advertising cookies.
6. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Rectification — correct any inaccurate data
- Erasure (“right to be forgotten”) — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time without affecting prior processing
To exercise any of these rights, email linus@ldpsolar.com. We will respond within 30 days.
7. Data retention
We retain your data for as long as your account is active, or as required for legal and financial record-keeping. If you request deletion, we will remove your personal data within 30 days except where retention is required by law.
8. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email.