Privacy Policy

1. Who We Are

Tulima Solar Ltd (“we,” “our,” or “us”) provides solar-powered irrigation and agricultural solutions across East Africa. When we refer to “Tulima Solar” in this policy, we mean Tulima Solar Ltd and our local offices, agents, and authorized representatives.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.tulimasolar.com, use our mobile applications, or engage with our services in any way.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Fill out contact forms or request a quote on our website
• Subscribe to our newsletter or job alerts
• Apply for financing options for solar equipment
• Submit a job application through our careers portal
• Contact us by phone, email, WhatsApp, or in person
• Participate in surveys, promotions, or events

This information may include:

• Identity data: Full name, title, date of birth
• Contact data: Email address, phone number, physical address
• Business data: Company name, farm details, location, acreage
• Financial data: Payment information, financing application details
• Technical data: Project requirements, equipment specifications

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate location
• Browser type, version, and language settings
• Operating system and device type
• Pages visited, time spent, and navigation paths
• Referring website or source
• Date, time, and duration of your visit

2.3 Information from Third Parties

We may receive information about you from trusted third parties, including financing partners, business referral partners, publicly available sources, and social media platforms (when you interact with our social accounts).

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide solar solutions, quotes, system design, installation, and ongoing customer support
• Communication: To respond to your inquiries, send service updates, maintenance reminders, and warranty notifications
• Marketing: To send promotional materials about products and services, with your consent or where permitted by law
• Analytics: To analyze website usage patterns, improve our website, and enhance user experience
• Financing: To assess and manage financing applications in partnership with our banking and financial partners
• Legal compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address fraud, unauthorized access, and other security issues
• Recruitment: To process job applications and manage our hiring process

4. Legal Bases for Processing

Depending on your jurisdiction, we rely on one or more of the following legal bases to process your personal data:

• Consent: Where you have given explicit consent (e.g., opting in to marketing communications or newsletter subscriptions)
• Contract performance: Where processing is necessary to fulfill a contract with you (e.g., providing solar solutions, managing financing agreements)
• Legitimate interests: Where we have a legitimate business interest that is not overridden by your rights (e.g., improving services, preventing fraud)
• Legal obligation: Where processing is required to comply with laws and regulations (e.g., tax, accounting, regulatory requirements)

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• Service providers: Trusted third-party companies that help us operate our business (IT hosting, analytics, payment processing, customer support). These providers are contractually obligated to protect your data.
• Financing partners: Banks and financial institutions involved in assessing and managing equipment financing applications
• Legal requirements: When required by law, court order, or government request, or to protect the rights, property, or safety of Tulima Solar, our customers, or the public
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee security training and awareness programs
• Secure data backup and disaster recovery procedures
• Incident response procedures for data breaches

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to minimizing risks.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Essential cookies: Enable core website functionality (login sessions, form submissions, security)
• Analytics cookies: Help us understand how visitors interact with our website to improve performance and content
• Preference cookies: Remember your settings and choices for a personalized experience

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality. For detailed information, please see our Cookie Policy.

8. Your Rights and Choices

Depending on your jurisdiction and applicable data protection laws, you may have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request corrections to inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Request a machine-readable copy of your data
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the details provided below. We may need to verify your identity before processing your request. We will respond within 30 days.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy. Specific retention periods include:

• Customer records: Duration of the business relationship plus 7 years for legal and accounting compliance
• Marketing data: Until you withdraw consent or unsubscribe
• Website analytics: Aggregated data retained indefinitely; individual session data retained for 26 months
• Job applications: 12 months after the hiring decision, unless you consent to longer retention
• Contact form submissions: 3 years from the date of submission

When data is no longer required, we take steps to securely delete or anonymize it.

10. International Data Transfers

Our servers, systems, and service providers may be located in countries other than your country of residence. Where we transfer personal data across borders, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Adequacy decisions where applicable
• Binding corporate rules for internal transfers

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without appropriate parental consent, we will take steps to delete that information promptly.

12. Changes to This Policy & Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. We encourage you to review this policy periodically.

Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone: +256 800 388 883
• Address: Plot 483, Kaduyu road, Ntinda - Kiwatule
• Online: Contact Form