Privacy Policy
Last updated: 25 September 2026
This policy explains how BCG Energy ("we", "us") collects, uses, shares and protects your personal information when you use this website and its enquiry forms. It is written to meet our obligations under South Africa's Protection of Personal Information Act, 4 of 2013 (POPIA).
In short: we collect the contact details you give us so that a person from BCG Energy can respond to your solar enquiry, and we record which advert or search brought you here so we know which of our marketing is worth paying for.
We only send you marketing email if you tick the box asking for it. That box is optional and starts unticked.
We do not sell your personal information.
1. Who is responsible for your information
BCG Energy is the responsible party for the personal information described in this policy.
| Address | 16 Bronkhorspruit Street, Norkem Park, Kempton Park, Gauteng, South Africa |
|---|---|
| info@bcgenergy.co.za | |
| Telephone | 010 500 6050 |
| 081 457 3294 |
BCG Energy is a small business and privacy requests are handled by a named person, not a department. Questions, requests and complaints about your personal information go directly to Thabiso Success Mncube, who is responsible for personal information at BCG Energy, at info@bcgenergy.co.za — they are handled personally, not by a call centre or a department. Write to that address and your request reaches the person who can act on it. Where the law sets a deadline for answering — 30 days for a formal request to see the record we hold on you — we work to it.
2. What we collect
2.1 Information you give us
When you complete an enquiry form on this site we collect:
- your name;
- your mobile number;
- your email address, where you choose to give it (optional);
- whether you ticked the box asking us to email you solar tips, offers and updates — and, if you did, the date and time you ticked it, the exact wording you agreed to, and the page you were on;
- your province or suburb;
- the solar package or system size you are interested in;
- what you want the system to do for you; and
- any additional notes you type into the form.
If you contact us by WhatsApp or telephone using the buttons on this site, we also receive your mobile number and whatever you choose to tell us in that conversation.
2.2 Information collected automatically
So that we can tell which adverts and searches actually produce enquiries, this site records marketing and technical information about your visit:
- Advertising click identifiers — Google click identifiers (
gclid,gbraid,wbraid), and equivalent identifiers from Microsoft (msclkid) and Meta (fbclid) where present in the link you arrived on; - Campaign information — campaign, ad group, keyword, match type, device, network and creative identifiers, and any UTM tags on the link;
- Visit information — the page you landed on, the website that referred you, and the date and time of your first and most recent visit;
- A random enquiry reference generated in your browser, used to match a single enquiry across our systems and to avoid counting it twice.
This information is stored in your browser (in localStorage, under the key bcg_attribution_v1) and is attached to your enquiry if and when you submit a form.
2.3 What we deliberately do not do
- We do not place your name, phone number, email address or free-text notes into our analytics data layer.
- We do not collect payment card information on this site.
- We do not knowingly collect information from children.
3. Why we use it, and on what basis
| Purpose | Lawful basis under POPIA |
|---|---|
| Responding to your enquiry and quoting you for a solar installation | Necessary to take steps at your request before entering a contract (s11(1)(b)), and your consent when you submit the form |
| Contacting you by phone, WhatsApp or email about the enquiry you submitted | Your consent, given when you submit the form (s11(1)(a)) |
| Sending you solar tips, offers and updates by email (direct marketing) | Your consent, given by ticking the marketing box on the enquiry form (s11(1)(a), read with s69). The box starts unticked, ticking it is optional, and you can withdraw at any time — see section 3.1 |
| Recording the enquiry in our customer system so that it is not lost and can be followed up | Our legitimate interests in running the business (s11(1)(f)) |
| Measuring which adverts, keywords and pages produce genuine enquiries, and reporting on advertising performance | Our legitimate interests in not wasting advertising spend (s11(1)(f)) |
| Meeting tax, accounting and other legal obligations | Compliance with an obligation imposed by law (s11(1)(c)) |
Giving us your details is voluntary. If you choose not to, we simply cannot contact you about an installation.
3.1 Direct marketing by email
We send marketing email only to people who asked for it. Every enquiry form carries a separate box, unticked by default, reading: “Yes — email me solar tips, offers and updates from BCG Energy. Optional, and you can unsubscribe at any time.” Submitting an enquiry without ticking it signs you up for nothing. We will still contact you about the enquiry itself, because that is what you asked us to do.
Section 69 of POPIA requires us to be able to show that you consented, so we keep the proof next to your contact details: that you ticked the box, the date and time you ticked it, the exact wording you agreed to, and the page you were on. If we ever reword that box, the record keeps the version you actually saw.
What we send is our own solar content — system guidance, price changes, seasonal advice and offers on our own installations. We do not send you other companies’ marketing, and we do not give your address to anyone else to market to you.
You can withdraw at any time and it applies to all future marketing: click unsubscribe at the foot of any marketing email we send you, or email info@bcgenergy.co.za and ask us to stop. Withdrawing does not affect an enquiry or an installation already under way, and it does not make the marketing we sent you beforehand unlawful.
If you gave us your email address but did not tick the box, we use that address only to send you your quote and to answer your enquiry.
4. Who we share it with
We share personal information only with service providers who process it on our behalf (our operators), and only so far as they need it:
| Provider | What it does | Where it is processed |
|---|---|---|
| Cloudflare | Hosts this website and receives and stores the enquiry form submission | South Africa (the website is served from Cloudflare's local network) and the United Kingdom (enquiry records) |
| HubSpot | Our customer relationship system — stores your enquiry so our team can follow it up | European Union |
| Google (Google Ads, Google Analytics, Google Tag Manager) | Measures advertising and website performance, and reports which adverts produced enquiries | United States and elsewhere |
| Meta and Microsoft | Where you arrived from one of their adverts, their click identifier is recorded for the same measurement purpose | United States and elsewhere |
We may also disclose personal information where the law requires it, or to establish or defend a legal claim.
We do not sell your personal information, and we do not share it with third parties for their own independent marketing.
5. Sending information outside South Africa
Some of the providers above process information outside South Africa. Where that happens we rely on section 72 of POPIA — the recipient is bound by binding contractual terms, including that provider's data processing agreement and standard contractual clauses, which uphold a level of protection substantially similar to POPIA.
6. Cookies and similar technologies
This site uses browser storage and cookies for two things:
- Measurement and advertising — Google Tag Manager loads Google Analytics 4 and Google Ads tags, which set cookies to recognise a returning browser, to measure whether an advert led to an enquiry, and to avoid counting the same enquiry twice.
- Attribution storage — the
bcg_attribution_v1entry described in section 2.2, stored in your browser rather than as a cookie.
You can clear or block these at any time through your browser settings, including your browser's "site settings" or "clear browsing data" controls. Blocking them does not stop you using the site or submitting an enquiry.
You can also opt out of Google Analytics measurement using Google's browser add-on, and manage Google's advertising personalisation at My Ad Center.
7. How long we keep it
- Enquiries that do not become customers — kept for up to 24 months from your last contact with us, so that we can pick up a conversation you restart, and then deleted or anonymised.
- Customer records — kept for the life of the installation warranty, and for as long as tax and company law requires us to keep the underlying records (generally five years from the end of the relevant tax period).
- Marketing consent records — where you ticked the marketing box, the record of that consent, and of any later withdrawal, is kept for as long as we hold your contact details and for three years afterwards, because it is our proof that we were entitled to email you.
- Website measurement data — retained according to the standard retention settings of Google Analytics and Google Ads.
8. How we protect it
- The site is served over HTTPS.
- Credentials for our customer system are held server-side as secrets, and are never exposed in the website's code or in your browser.
- We are a small team, and access follows that. Your enquiry is seen by the people who run BCG Energy, by the office staff who book and follow up on quotes, and — once you go ahead with an installation — by the technicians who need your address and site details to do the work. Nobody outside that group has access to it.
No system is perfectly secure. If a security compromise affects your personal information, we will notify you and the Information Regulator as POPIA requires.
9. Your rights
Under POPIA you have the right to:
- ask what personal information we hold about you, and get a copy of it;
- ask us to correct or complete information that is wrong or out of date;
- ask us to delete information we no longer have a lawful reason to keep;
- object to us processing your information on the legitimate-interests basis;
- withdraw your consent to being contacted, at any time; and
- complain to the Information Regulator.
To exercise any of these, email info@bcgenergy.co.za. We will respond within a reasonable period, and may need to confirm your identity first. There is no charge, except that a reasonable fee may apply to a formal request for access to a record, as PAIA allows.
To stop us contacting you, reply STOP to any WhatsApp or SMS from us, tell the consultant on a call, or email the address above. To stop marketing emails only, click unsubscribe at the foot of any marketing email we send you, or email us and ask — either way it does not affect us contacting you about an enquiry or an installation already in progress.
10. Complaining to the regulator
If you are not satisfied with how we have handled your information, you may complain to:
| Information Regulator (South Africa) | JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 PO Box 31533, Braamfontein, Johannesburg, 2017 |
|---|---|
| Complaints | complaints.IR@justice.gov.za |
| General enquiries | enquiries@inforegulator.org.za |
| Website | inforegulator.org.za |
11. Changes to this policy
We may update this policy as our systems change. The "last updated" date at the top always reflects the current version. Material changes affecting how we use your information will be made prominent on this page.
010 500 6050