How We Protect Your Data (Compliance with the Privacy Act 2020)

Here's the short version: when you submit your details to NZ Solar Centre, your information is shared with a maximum of three vetted installers we have personally matched to your job, and nobody else. We do not sell, trade, rent, or syndicate your contact details to call-centre lead farms, lead aggregators, or competing companies. We operate a closed-ecosystem data policy that complies with the New Zealand Privacy Act 2020, and we deliberately go further than the legal minimum because the solar industry has a reputation problem we refuse to add to. If you've ever filled in a "free solar quote" form online and then been hammered by five different sales teams within 48 hours, you already know exactly why this page exists.

This article is for anyone who's about to share their address, phone number, power bill, or roof details with us and wants to know precisely what happens next. It's also for the cautious Kiwi who has been burned before and needs reassurance before they'll trust another solar website. We'll walk through what the Privacy Act actually requires, what we do on top of that, and what genuinely happens to your data from the moment you hit "submit".

What Data Protection Actually Means for NZ Homeowners

The Privacy Act 2020 is the main law that governs how organisations in New Zealand collect, use, store, and share your personal information. It's enforced by the Office of the Privacy Commissioner (privacy.org.nz), and it gives you real rights: the right to know what's held about you, the right to correct it, and the right to complain if an organisation mishandles it.

For a homeowner researching solar, the relevant data points are usually:

• Your name, email and phone number
• Your physical address (so installers can assess the roof remotely via aerial imagery)
• Your average power bill or monthly kWh usage
• Your retailer (Genesis, Mercury, Contact, Meridian, Octopus, Ecotricity, Frank, etc.)
• Sometimes your lines company (Vector, Orion, Wellington Electricity, Powerco, Aurora, Unison, Top Energy)
• Occasionally a photo of your switchboard or a copy of your power bill

That looks innocuous, but in the wrong hands it's gold. A bad-faith operator can use that bundle to cold-call you at dinner for weeks, send your details to a debt-funded sales floor, or even on-sell the lead to non-solar industries entirely. The Privacy Act's Information Privacy Principle 11 (limits on disclosure) is the rule designed to stop that, and it's the one we lean into hardest.

The Closed-Ecosystem Data Policy in Plain English

A "closed ecosystem" sounds like jargon, so here's what it actually means in practice at NZ Solar Centre.

1. Your data is only shared with installers we've vetted

We don't have a public sign-up form for installers. Every company in our network has been through our 13-step installer vetting process, which checks Companies Office records, MEA (Master Electricians) membership, SEANZ (Sustainable Energy Association of NZ) status, insurance, warranty backing, and reviews on independent platforms.

If a company doesn't pass, your details never reach them. Full stop.

2. A maximum of three installers, chosen for your job

When you request quotes, we match you with up to three installers based on your region (because a Christchurch homeowner does not want a Whangārei company quoting them) and the type of job (battery retrofit, EV-ready system, off-grid, commercial, etc.).

You will not get a fourth call. You will not get an installer from a different island. You will not get a "partner" we've never met phoning you about heat pumps.

3. No on-selling, no lead syndication, full stop

This is the bit that matters most. Many "free quote" websites in the solar, insurance, and finance sectors operate on a lead-aggregation model: they collect your details, then sell that lead to five, ten, sometimes fifteen different sales teams who race each other to your phone. That's not us, and it never will be.

We do not sell leads. We do not rent leads. We do not trade leads. Your data is not a product.

4. The installer who quotes you is the installer who does the job

Some networks send your details to a "sales partner" who then subcontracts the actual install to whoever's cheapest that week. We don't. The installer who receives your quote request is the company that will, if you choose them, send a technician onto your roof.

The Privacy Act 2020 in Practice: The 13 Information Privacy Principles

The Privacy Act is built around 13 Information Privacy Principles (IPPs). Rather than make you read the whole Act on the legislation.govt.nz site, here's how we apply the ones that matter most to a solar enquiry.

IPP 1, 2, 3 (collection): we only ask for what we need

We collect the minimum data required to match you with relevant installers. We don't ask for your IRD number, your date of birth, your KiwiSaver balance, or any of the other intrusive questions some finance-linked sites slip in. If a field isn't essential to producing a sensible quote, we don't have it on the form.

IPP 4 (manner of collection): no dark patterns

You won't find pre-ticked consent boxes, "we'll share your details with our trusted partners" footnotes, or sneaky opt-ins to a newsletter you didn't ask for. When you submit a quote request, the consent is explicit and specific: you're asking us to forward your details to up to three vetted installers.

IPP 5 (storage and security): encrypted, NZ-based, time-limited

Your data is held on encrypted servers, accessed only by named staff, and retained only for as long as is necessary to facilitate the quote process and any follow-up. We don't sit on a giant historic database to data-mine later.

IPP 6 and 7 (access and correction): just email us

If you want to see what we hold about you, or you want it corrected or deleted, you email us and we sort it. The Privacy Act gives you that right; we honour it without making you jump through hoops.

IPP 11 (disclosure): the big one

This is the principle that says an organisation can only share your personal information for the purpose you provided it. You gave us your details so we could match you with installers. We use them for exactly that, and nothing else.

IPP 12 (overseas disclosure): your data stays in NZ

Where we use cloud infrastructure, we prioritise services with NZ or Australian data residency. We are not bouncing your details through call centres in jurisdictions with weaker privacy law.

What This Means for You (By Persona)

If you're the ROI Pragmatist

You care about price discovery, not data drama. The good news: because we limit you to three installers, you get genuine competitive tension without the chaos of fifteen sales calls. Three serious quotes from vetted companies is the sweet spot for negotiating a fair price, and it's what Consumer NZ generally recommends for any major home purchase.

Pair the quotes with our Solar System Cost & ROI Calculator and you've got everything you need to make a confident, data-driven decision without your phone ringing off the hook.

If you're the Tech-Savvy Optimiser

You're probably already comfortable with concepts like end-to-end encryption, data residency, and consent management. The relevant detail for you: we treat the photo of your switchboard or the line-item breakdown of your power bill with the same seriousness a fintech treats banking data. That includes secure transmission to installers (not plain-text email attachments to a generic Gmail account) and clear deletion timeframes.

If you're interested in how the energy sector is moving towards data-portability standards more broadly, our piece on the Consumer Data Right for energy in NZ is the next read.

If you're the Eco-Conscious Family

You're trying to do the right thing for your household and your kids' future. The last thing you need is a fortnight of high-pressure phone calls undermining what should be an exciting project. Our closed-ecosystem policy exists so the research phase feels like research, not like running a gauntlet.

If a salesperson ever rings you claiming to represent "NZ Solar Centre" or claiming we passed them your details, that's a red flag worth checking against our Solar Scam Checklist. We never sell, share, or syndicate beyond your three matched installers.

Common Pitfalls: What Lead-Farm Sites Won't Tell You

Here's where we earn our keep as your trust proxy. The solar industry, like the insurance and finance industries before it, has attracted some pretty grim lead-generation practices. Watch out for:

• "Free quote" forms with no privacy policy linked, or a privacy policy that quietly mentions "trusted third-party partners". That phrase is industry code for "we sell your lead five times over."
• Sites that ask for information unrelated to solar: household income, employment status, mortgage balance. That's a finance lead-gen play dressed up as a solar enquiry.
• Aggressive remarketing: you fill in one form and suddenly every website you visit is showing you solar ads from companies you've never heard of. That's a sign your enquiry has been syndicated into ad-tech audiences.
• SMS spam within minutes of submitting. Reputable installers don't operate auto-dialler floors; lead farms do.
• "Partner" companies you can't identify. If you ask "who exactly will be calling me?" and the answer is vague, walk away.
• No clear opt-out. Under the Privacy Act and the Unsolicited Electronic Messages Act 2007, you must be able to opt out easily. If you can't, that's a compliance breach.

If any of these patterns turn up after you've used our service, please tell us. We treat that kind of feedback seriously because it's the only way we can keep the network clean.

What Happens to Your Data, Step by Step

So you've filled in the form. Here's the actual journey:

Step 1. Your submission lands in our system via an encrypted connection. It's tagged with your region, system type, and any notes you've added.

Step 2. Our matching logic identifies up to three installers from our vetted network whose service area covers your address and whose specialty matches your job (residential rooftop, battery retrofit, EV-ready, commercial, rural off-grid, etc.).

Step 3. Your details are forwarded to those installers via a secure portal, not a public email blast. Each installer agrees, by contract, to use those details solely to prepare a quote for you and to comply with the Privacy Act 2020.

Step 4. Installers contact you (usually within 1-3 working days) to arrange a site visit or remote assessment. You receive quotes. You compare. You choose, or you don't, and either is fine.

Step 5. Your enquiry record is retained only as long as needed to follow up on quote quality and to honour any warranty referral. After that retention period it's purged.

At no point does your data go to a fourth installer, a call-centre, a finance broker we haven't disclosed, an insurance partner, or any other "trusted partner". The list ends at three vetted installers and stops there.

If Something Goes Wrong: Your Rights

If you ever feel that we, or one of our installers, has mishandled your personal information, you have three escalation paths:

• Email us first. We'd far rather hear about a problem and fix it than have it fester. Most issues are resolved within a few days.
• Contact the installer directly with a written request to delete your data. Under the Privacy Act, they're obliged to action it.
• Lodge a complaint with the Office of the Privacy Commissioner at privacy.org.nz. They're independent, free to use, and surprisingly responsive.

You can also use the Commerce Commission if a company has engaged in misleading conduct around how they collect or use your data, or the Telecommunications Forum's protocols for any phone-based harassment.

Frequently Asked Questions

Will NZ Solar Centre sell my details to multiple companies?

No. Your details are shared with a maximum of three vetted installers we've matched to your job. We never sell, rent, or syndicate leads. This is the central promise of our closed-ecosystem data policy.

How many phone calls should I expect after submitting?

Typically one to three, one from each matched installer. If you get more than three, or if you get calls from companies that don't match the names we tell you to expect, please let us know immediately.

How do I delete my data after I've chosen an installer (or decided against solar)?

Just email us and ask. Under the Privacy Act 2020 you have the right to request deletion, and we honour those requests without question or delay. You can also ask each installer to delete their copy.

Is my address safe to share for a remote roof assessment?

Yes. Installers use your address with services like Google Earth and LINZ aerial imagery to assess your roof's orientation, pitch, and shading before a site visit. Your address is never published or shared beyond the matched installers.

Are you compliant with the Privacy Act 2020?

Yes. We follow all 13 Information Privacy Principles, with particular attention to IPP 11 (limits on disclosure) and IPP 12 (overseas disclosure). We deliberately go further than the legal minimum because the solar industry's reputation depends on it.

Do you use my data for advertising or remarketing?

We do not feed your personal details into ad-tech audiences. We do use anonymous, aggregated website analytics (the kind that doesn't identify individuals) to improve our content, which is standard for any modern website and disclosed in our cookie policy.

What if an installer in your network breaches my privacy?

Tell us. Installers in our network sign data-handling agreements as a condition of membership. A serious breach is grounds for removal from our network, and we treat that obligation seriously. You can also complain directly to the Office of the Privacy Commissioner.

Where is my data stored?

On encrypted servers prioritising NZ or Australian data residency. We avoid bouncing your details through jurisdictions with weaker privacy law, and we never share data with overseas call centres.

What if I just want general information and don't want to be contacted at all?

Easy: don't fill in the quote form. Use the calculators, read the guides, and browse the site freely. We don't require any personal details to access our educational content. The quote form is the only place where personal data is collected, and it exists specifically to connect you with installers.

Can I see what information you hold about me?

Yes, that's your right under IPP 6 of the Privacy Act. Email us and we'll provide a copy of any personal information we hold about you, usually within 20 working days as the Act requires.

Where to Go From Here

Trust is the entire business model of NZ Solar Centre. We're not the cheapest place to get a quote; we're the place where the experience of getting a quote doesn't feel like a trap. If you'd like to read more about how the trust framework hangs together, start with our Trust Proxy promise to NZ homeowners, then have a look at the 13-step installer vetting process and the Solar Scam Checklist so you know what to avoid out in the wild.

If you're ready to crunch the numbers before talking to anyone, the Solar System Cost & ROI Calculator is the quickest way to get a sensible sense of what your roof and your power bill might add up to. And when you're ready for real quotes from real humans, the form below is the only place your details go.