Best Energy Technology Co., Ltd. explains here how we collect, use, disclose and retain personal data, and the choices available to you.
1. Scope and responsibility
This statement applies to BestSolar photovoltaic and energy storage products, websites, applications, monitoring and account services, inquiries, sales, warranty and support, business communications, and related analytics, advertising and artificial intelligence features that reference it (the “Services”). The information involved depends on the Services you use.
Unless a separate agreement or notice identifies another responsible entity, the controller is Best Energy Technology Co., Ltd., a company incorporated in Hong Kong SAR. Contact us at legal@bestsolar-group.com.
A dealer, installer, employer or other organization supplying or administering your system may independently control its own collection and use of information. Its privacy notice applies to those activities. Where we act solely on an organization’s instructions, our processing agreement with it also applies.
2. Personal data we collect
We receive information from you, your use of the Services, authorized representatives, organizations involved in your transaction, and providers operating the relevant service. Where we obtain business contact information from public or other indirect sources, we provide any source information and notice required by law.
The categories may include:
- Identity, contact and account data: name, organization, role, email, telephone number, addresses, country, account identifiers, authentication information, permissions and access records.
- Product and transaction data: inquiries, orders, serial numbers, installation details and location, system configuration, operating and energy measurements, faults, warranty records and support information. Precise site coordinates are used where you provide them for a relevant service.
- Communications and service records: forms, emails, WhatsApp and SMS messages, attachments and voice messages, delivery status, call details, recordings, transcripts, saved translations, service notes and AI interactions.
- Website and advertising data: pages and referring sources, events, device and browser information, connection and advertising identifiers, approximate location, conversion activity, audience membership and the eligible customer information described in section 7.
- Privacy and security records: consent, withdrawal and opt-out records, policy versions, timestamps, fraud indicators and necessary operational logs. Where an IP address is kept with a consent record, it is truncated; full IP addresses are limited to short-lived operational and security logs.
We use approximate region information to apply relevant privacy choices. Where location cannot reliably be determined, we apply the more protective default. Collection notices explain required information and the consequences of not providing it. Please provide relevant information and obtain authority before supplying another person’s data.
3. Purposes and lawful bases
We use personal data to provide and support products, administer accounts and transactions, communicate with customers and business contacts, maintain safety and reliability, prevent fraud, measure website and advertising performance within your choices, and meet legal obligations.
Where the GDPR or UK GDPR applies, our bases are:
- Contract: providing a service you request as an individual and taking requested steps before entering a contract.
- Legitimate interests: managing business relationships, supporting customers, securing Services and maintaining reliability, subject to your rights and any requirement to obtain consent.
- Legal obligations: required safety, accounting, regulatory and other records or disclosures.
- Consent: optional cookies, advertising, marketing and other processing for which consent is required.
Recording, transcription, translation and AI processing use the basis appropriate to their disclosed purpose; we obtain any consent required by law. You may withdraw consent and object to processing based on legitimate interests. We provide further notice and obtain any additional permission required before materially changing a purpose.
4. Business communications and recordings
We use email, WhatsApp Business, SMS and telephone services to handle inquiries, coordinate transactions, provide support and send communications within the permission applicable to that channel. This involves contact details, content, attachments, routing and delivery information, and relevant customer records.
Before initiating messages, we obtain the permission required by law and platform rules. Responding to your inquiry does not automatically subscribe you to continuing promotional messages. Where an unsolicited introductory business message is lawful, we limit that outreach to one message through that channel unless you respond. This limit does not replace an opt-in or other permission requirement. Service, safety, warranty and legally required messages follow their own purposes.
WhatsApp and SMS choices
You can ask us to stop WhatsApp or email contact in the conversation, through an available unsubscribe method, or at our contact address. For SMS, reply STOP to unsubscribe and HELP for assistance. We may send one final opt-out confirmation, then stop SMS to that number unless you validly subscribe again. Necessary communications can be handled through another appropriate channel.
SMS frequency varies with your requests, transactions and subscriptions. Message and data rates may apply. The subscription notice identifies BestSolar, the message types and applicable frequency, and links to this statement and the Terms of Use. Marketing consent is not a condition of purchase or ordinary customer support.
We do not sell or share mobile information with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from general sharing provisions and are not shared for another party’s own use. Providers may process this information solely as necessary to operate and deliver our messaging service; your permission is not transferred to another business. SMS subscription information and consent records are excluded from advertising audiences and customer matching.
Calls, recordings and transcription
We route business calls to authorized representatives and keep relevant call and service records. Calls covered by a recording notice are recorded and transcribed to maintain an accurate communication record and support the matter being handled. We notify participants before recording starts, explain transcription, and obtain the agreement required by law. If you decline, tell the representative or use a suitable written channel.
Access is limited to authorized personnel and necessary providers. Recordings and transcripts follow their respective retention rules in section 9. A WhatsApp voice message is a message attachment and follows the business-record schedule.
5. Artificial intelligence
AI assists customer support, message translation and speech transcription by processing relevant content, outputs and necessary operational information. Staff may initiate translation or transcription while handling a request. When you interact directly with an AI assistant, we identify it and explain how to reach a person.
We do not use customer communications, recordings, transcripts, or customer service AI inputs and outputs to train, retrain or fine-tune AI models. Providers processing this content for us are not authorized to use it for their own model training or improvement.
AI outputs may be inaccurate. Personnel remain responsible for service decisions; AI does not make decisions with legal or similarly significant effects without meaningful human involvement. Avoid submitting highly sensitive information to a general assistant unless the relevant service requests it through an appropriate process.
AI also assists with preparing public website content. The Terms of Use explain reliance on that content. This does not authorize publication or training use of private customer communications. Provider, transfer, retention and rights provisions in this statement apply to AI processing as well.
6. Providers and other recipients
We disclose information appropriate to the relevant purpose to authorized dealers and installers, affiliates assisting with the transaction or service, contracted providers, and analytics or advertising recipients within your choices. We may also disclose information when law requires it or in a business restructuring, subject to applicable protections.
The table groups related services under a provider name. The responsible recipient and its role depend on the service, region and applicable contract. Providers acting for us are subject to appropriate processing agreements; certain platforms and carriers also act independently or jointly for legally defined purposes.
| Provider or recipient | Services and relevant information | Further information |
|---|---|---|
| Cloud hosting, storage, security, translation and relevant AI processing; website analytics, advertising measurement, Enhanced Conversions, customer matching and remarketing described in section 7. Data depends on the cloud task or permitted analytics and advertising function. | Google Privacy Policy; Google partner data use; Google Cloud data processing terms | |
| Meta | Advertising measurement and remarketing using website events and identifiers; WhatsApp Business delivery using contact identifiers, message content, media and delivery information. Messaging content is excluded from our advertising data submissions. | Meta Privacy Policy; Meta Business Tools Terms; WhatsApp Privacy Policy |
| Microsoft | Identity, access, cloud and relevant AI services, using account information and the content necessary for the selected service. | Microsoft Privacy Statement |
| Amazon Web Services | Hosting, application and business-messaging infrastructure, using the information needed to operate the relevant service. | AWS Privacy Notice |
| Twilio and relevant carriers | SMS and telephone delivery, call transport, recording where used, delivery and call status, fraud prevention and related operational processing. | Twilio Privacy Notice |
| Other operational providers | Email delivery, content delivery, edge networking, security and technical support, using relevant message, request, connection or account information. | Details relevant to your information are available on request. |
SMS restrictions take precedence over general sharing provisions, including in a restructuring. Grouping services in this table does not allow information collected for one purpose to be reused for another without the appropriate basis and notice.
7. Cookies, analytics and advertising
We use cookies, pixels and similar identifiers for essential operations, privacy choices, security, analytics and advertising. The Cookies link in the footer controls optional Analytics and Advertising. Essential functions remain available if you refuse optional categories.
Optional Analytics and Advertising are denied by default in the EEA, United Kingdom and Switzerland, and whenever we cannot reliably determine your region. We apply any additional local requirements.
- Google: With Analytics allowed, Google Analytics 4 measures website use. With Advertising and the relevant customer-data permission allowed, Google advertising services measure conversions, use Enhanced Conversions and show remarketing advertisements. We also export eligible GA4 audiences to our linked Google Ads account. Designated forms may supply consented customer information, such as email, through Google’s supported user-provided data features for conversion and audience matching. It is normalized and hashed before transmission; hashing does not make matchable information anonymous. GA4 customer matching and advertising audience use require both relevant Analytics and Advertising choices. Contact details are not sent in ordinary URLs or general analytics event fields.
- Meta: With Advertising allowed, Meta advertising services use permitted website events, online identifiers, IP addresses and device or browser information to measure conversions and show remarketing advertisements. Automatic advanced matching is disabled. We do not send form contact details through Meta Pixel.
Customer matching is limited to the fields and purposes identified where the information is collected. Service information is not automatically repurposed for advertising. We exclude private messages, attachments, recordings, transcripts, authentication information, and SMS subscription or consent records from advertising tags and matching submissions.
Withdrawal and opt-out
Change your choices through Cookies or contact us. We honor supported Global Privacy Control signals as an opt-out from sale, sharing or targeted advertising: Advertising remains off while the signal is present, regardless of a previous advertising choice. Analytics remains a separate choice. We extend an identifiable request to your account where required.
An advertising refusal or withdrawal stops relevant future tags, customer-data submissions and audience uses within our control. We apply necessary audience suppression or removal and attempt to delete advertising cookies on our domain. Cookie deletion alone does not erase platform records already received. Those records remain subject to applicable platform rules and rights procedures; we assist with requests within our responsibility.
Additional controls are available through Google My Ad Center and Meta Ad Preferences. Advertising choices do not themselves unsubscribe you from email or SMS; those preferences can be changed through the communication channel or by contacting us.
8. Security and international processing
We use appropriate access restrictions, encryption, authentication and security monitoring, with protections suited to the sensitivity of the information involved. We assess providers for their processing and give any breach notifications required by law.
Information may be stored or processed in the United States, Ireland and elsewhere in the EEA, and other countries where we, authorized personnel or relevant providers operate. Storage, service processing and authorized access may occur in different locations. A provider’s corporate address does not establish data residency.
Customer records, recordings and transcripts use our designated cloud storage. Necessary delivery, translation, transcription and other processing may create temporary copies or operational records subject to the applicable rules. We do not describe central storage as a guarantee that every processing step occurs in one country.
For transfers from the EEA, UK or Switzerland requiring safeguards, we use an applicable adequacy decision or recognized mechanism, such as relevant Data Privacy Framework certification or standard contractual clauses with required UK or Swiss adjustments. We assess additional safeguards where necessary. You may request information about the mechanism applicable to your data and a copy of relevant safeguards.
Where mainland China requirements apply, we provide required overseas-recipient details, purposes, methods, data categories and rights information, obtain any required separate consent, and implement the applicable transfer mechanism before transferring information.
9. Retention and deletion
We retain identifiable information only while needed for its stated purpose and applicable obligations. Fixed periods below govern retention in active systems under our control and the deletion instructions we give our processors. Earlier deletion requirements apply; specific legal, warranty or dispute records may be retained separately where necessary and lawful.
| Data category | Retention rule |
|---|---|
| Raw inquiry and contact-form content | 3 years from submission. Any necessary record incorporated into a business relationship follows the next row. |
| Customer contact records and ordinary business communications, including email, WhatsApp and SMS content and attachments, call details, transcripts, saved translations and customer service AI conversations | During the active business relationship and for 3 years after it ends. An unanswered inquiry alone does not establish an indefinite active relationship. |
| Ordinary call recordings | 90 days from the end of the call. |
| Other temporary transcription, translation and processing files | Delete when the task finishes, with necessary cleanup completed within 24 hours after completion, failure or abandonment. Saved service results follow their relevant record category. |
| Necessary consent and permission evidence, including WhatsApp, SMS, advertising and recording choices | While the permission is valid and for 5 years after it expires, is superseded or is withdrawn, unless a different mandatory requirement applies. This does not extend the life of the underlying content. |
| Minimum suppression records needed to honor a communication or advertising opt-out | While needed to prevent renewed use or unwanted contact, reviewed for continuing necessity. These records are not used for marketing. |
| Full IP addresses in ordinary server and content-delivery logs | 30 days. A specific incident record may be retained separately where necessary and lawful. |
| Private documents delivered on request | 90 days for the delivery copy. Necessary transaction and warranty records follow their own requirements. |
| GA4 user and event data, including applicable user-provided data | A 14-month retention setting, subject to Google’s applicable processing and deletion rules. New activity does not renew the retention period of a user identifier. Standard aggregated reports may follow different rules. |
| Google and Meta remarketing audience membership | 30 days from the most recent qualifying interaction, subject to applicable consent and earlier suppression or removal. |
Meta _fbp and Google _gcl_au browser identifiers | 90 days from setting or refresh. Other identifiers follow the applicable cookie information and provider rules. |
| Routine database backups under our control | A rolling 7-day retention window. This rule does not describe every independent provider record. |
| Product operating, transaction and warranty records | For the relevant operating life, warranty, service or legally required period, limited to information needed for that purpose. |
After deletion from active systems, restricted residual copies may remain through a provider’s documented technical deletion cycle and are not available for ordinary use. Separately, records held by an independent advertising, messaging or telecommunications recipient follow its applicable policies, settings and legal duties. Browser-cookie expiry, audience membership and platform record retention are separate periods. Provider documentation is linked in section 6.
We delete or anonymize information at the end of its applicable period. A restored backup is subject to existing deletion and suppression records before ordinary use. Truly anonymous aggregate information may be kept while useful.
10. Your rights and choices
Depending on applicable law, you may request access, a copy or portability, correction, deletion, restriction, withdrawal of consent, objection, or review of relevant automated decisions. You may also have rights concerning sensitive information and advertising.
Send requests to our contact address. We verify them using information reasonably related to your existing interaction and accept authorized agents where law permits. We respond within 30 days, or sooner where required, and explain any lawful extension within the applicable initial period.
If we refuse a request, we explain why and describe available appeal or complaint routes. Where applicable, appeal by replying to the decision or emailing us with the subject Privacy Appeal. You may complain to the competent privacy regulator.
Withdrawal stops future consent-based processing without making earlier processing unlawful. We apply relevant deletion and opt-out requests to our records and providers, retain only necessary permission evidence, and explain any further steps needed for an independent recipient.
11. Regional information
EEA, United Kingdom and Switzerland. You may object to legitimate-interest processing and direct marketing, withdraw consent and complain to the relevant supervisory authority. The UK authority is the Information Commissioner’s Office. Required representative or data protection officer details are provided in the applicable service or regional notice.
California and other United States jurisdictions. We do not sell personal information for money. The advertising disclosures in section 7 may nevertheless qualify as sale, sharing or targeted advertising under state law. They involve permitted online identifiers, website and conversion activity, and eligible customer matching data disclosed to relevant Google or Meta recipients. Private communications and SMS subscription or consent records are excluded. Use Cookies, Global Privacy Control or our contact address to opt out. We do not discriminate for exercising statutory rights.
Mainland China. We provide business inquiry and communication channels; we do not currently operate a consumer energy-storage monitoring platform for users in mainland China. Where Chinese personal information law applies, we provide applicable access, correction, deletion, withdrawal and explanation rights, and use separate notices and consents where required for sensitive information or overseas provision. Relevant local processing and transfer requirements apply before expanding a service.
12. Children
The Services are intended for businesses and adult customers. We do not direct them to children or knowingly use children’s information for advertising. Contact us if a child has provided information without an appropriate basis so that we can investigate and take the required action.
13. Changes and contact
We update this statement when our processing or applicable requirements materially change. The version published on our website identifies the applicable statement. We provide prominent notice and obtain a fresh choice where required before the relevant processing starts. A revision does not retrospectively authorize processing that required prior permission.
For privacy questions, requests or complaints, contact Best Energy Technology Co., Ltd. at legal@bestsolar-group.com. The current Privacy Statement and Terms of Use are available on our website.