Privacy policy: what we keep, why, and for how long

Effective November 1, 2026

This privacy policy explains how Center For Solar LLC (“Center For Solar,” “we,” “us”) handles personal information collected through center4solar.com and through our consulting work. It applies to visitors, people who contact us, and clients. If an engagement letter gives you stronger protections, the engagement letter controls.

The short version

• The site has no advertising cookies, no tracking pixels, and no third-party analytics.
• When you send a form, it goes to our hosting provider’s database and to our team’s email. That’s it.
• Client documents are used only for your engagement and shared with no one without your permission.
• We keep client files for the engagement plus three years, and inquiries that don’t become engagements for 24 months. Then we delete them.
• We never sell personal data.

Who we are

Center For Solar LLC is an independent, fee-only solar consulting firm at 651 Perimeter Drive, Suite 440, Lexington, KY 40517. We decide how the information described here is used, and we’re the people to contact about it. Our details are at the end of this page.

What we collect

Information you give us

• Contact details: your name, email address, phone number, and, if you share them, your organization, mailing address, or county.
• Project details: what you’re deciding, your utility or co-op, deadlines, and anything you write in a message or tell us on a call.
• Documents: electric bills, interval data, solar proposals, contracts, monitoring exports, land lease offers, questionnaires, and similar files you send us for an engagement.
• Billing information: the name and address on an invoice and a record of payment.

We don’t need Social Security numbers, bank account numbers, or card numbers to do our work, so please don’t send them. An account number printed on a utility bill is fine.

Information collected automatically

Our website is a static site hosted on Cloudflare. Like any web host, Cloudflare processes technical data needed to deliver pages and protect the site from abuse, such as your IP address, browser type, the page requested, and the time of the request. We don’t use this data to build profiles of visitors, and we don’t combine it with what you send us.

Our forms use anti-spam measures that may include Cloudflare Turnstile. Turnstile checks browser signals, including IP address and browser details, to tell people from bots. Cloudflare’s Turnstile privacy addendum says those signals are used to detect and block bots, not to identify, profile, or target individuals.

Information from other sources

With your permission, we may receive information about your project from people you ask us to work with, such as your installer, utility, attorney, or accountant. We also use public sources, such as utility tariffs, public commission filings, and county property records, when they bear on your project.

Cookies and tracking

We don’t use advertising cookies, cross-site tracking, session recording, or third-party analytics. Our fonts and illustrations are served from our own site, so loading a page doesn’t call out to ad networks or font services.

Cloudflare may set a small number of security cookies, for example to remember that your browser passed a bot check. Cloudflare’s documentation describes these as security tools rather than tracking tools. Because we don’t track you across sites, sell data, or share it for targeted advertising, there’s nothing for a Global Privacy Control or Do Not Track signal to switch off. We treat every visitor as opted out by default.

The free calculators on our tools pages run in your browser. We don’t receive the numbers you type into them unless you choose to send them to us.

How we use information

We use personal information to:

• reply to your message and hold a fit call;
• write your scope, fee letter, and invoices;
• do the work in your engagement and send you the report;
• keep records the law requires, such as tax records; and
• keep the site and our systems secure.

We don’t add you to a mailing list unless you ask, and we don’t use client documents for marketing. Any illustrative scenario or sample report on this site is a composite with hypothetical figures. None of them is built from a client’s file.

How our forms work

When you submit a contact or intake form, your submission travels over an encrypted connection to our hosting provider, Cloudflare, which stores it in a database. A copy is emailed to our team so a person can reply. Email you send to an @center4solar.com address also passes through Cloudflare’s email routing on its way to our inboxes. Cloudflare acts as our service provider for this storage and delivery.

Client documents

Your documents are used only for your engagement. They live in an access-controlled project folder that only the people working on your project can open. We ask for data exports or read-only access instead of passwords. When a password is the only way in, such as recovering a monitoring account after an installer has closed, we keep it in a password manager, use it only to retrieve your data, and remind you to change it when we’re done.

If you’d rather not email a contract or bill, ask us for a secure upload link.

Who we share information with

We share client documents with no one outside Center For Solar without your permission. That includes installers, lenders, developers, manufacturers, and utilities. When you ask us to coordinate with your attorney, CPA, electrician, or utility, we share only what that task requires.

There are two narrow situations to know about:

• Service providers. Companies that host our website, database, email, and files store information on our behalf. They aren’t permitted to use it for their own purposes.
• Legal requirements. If a court order or subpoena compels us to disclose information, we will tell you before we respond unless the law forbids it.

We never sell personal data, and we don’t share it for targeted advertising.

How long we keep information

Information	How long we keep it
Inquiries and form submissions that don’t become engagements	24 months, then deleted
Client documents and working files	The engagement plus three years, unless you ask us to delete them sooner
Recorded walkthrough calls	Same as client documents
Invoices and payment records	As long as tax and accounting rules require
Hosting security logs	As long as Cloudflare keeps them under its own policies

You can ask us to delete your documents at any time, including in the middle of an engagement. If we’re still working, deleting them may end the work. Deleted data can persist for a short time in backup copies until those copies roll over.

How we protect information

The entire site uses HTTPS. Client files are restricted to the people working on your project, and we require multi-factor sign-in on the accounts that hold them. We collect less so there’s less to protect.

No system is perfectly secure. If a breach affecting your personal information occurs, we’ll notify you as Kentucky law and any other applicable law require, and we’ll tell you what happened and what we’re doing about it.

Your privacy rights

Kentucky

The Kentucky Consumer Data Protection Act (KRS 367.3611 to 367.3629) took effect January 1, 2026. It applies to businesses that, in a calendar year, control or process the personal data of at least 100,000 Kentucky consumers, or at least 25,000 consumers while deriving more than half their gross revenue from selling personal data. A consulting firm of our size is not expected to meet either threshold, and we don’t sell personal data at all.

We honor the core rights anyway. You can ask us to:

• confirm whether we hold personal data about you and give you access to it;
• correct inaccurate data;
• delete data you provided or that we obtained about you; and
• give you a copy of data you provided, in a portable format.

The Kentucky law also gives people the right to opt out of targeted advertising, the sale of personal data, and certain profiling. We don’t do any of those, so there’s nothing to opt out of.

Other states

A growing number of states have consumer privacy laws, most with size or data-volume thresholds. Wherever you live, and whether or not a particular law applies to us, we’ll handle access, correction, and deletion requests the same way.

How to make a request

Email welcome@center4solar.com or write to the address below. Tell us what you’re asking for. We’ll confirm your identity, usually by replying to the email address we already have for you, and respond within 45 days, the same window the Kentucky law sets. If we need more time, we’ll tell you why within that period. Requests are free.

If we decline a request, we’ll explain why. You can appeal by replying to that decision, and we’ll answer in writing within 60 days. If you’re still not satisfied, you may contact the Office of the Kentucky Attorney General, which enforces the state’s consumer privacy law.

Children’s privacy

This site and our services are meant for adults making decisions about homes, businesses, farms, and organizations. We don’t knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we’ll delete it.

Links to other websites

Our pages link to utilities, government agencies, and other sources. Those sites have their own privacy practices, which we don’t control. Read their policies before you share information with them.

Changes to this policy

When we change this policy, we’ll post the new version here with a new effective date. If a change materially affects how we handle information we already hold, we’ll also email active clients before it takes effect.

Contact us

Questions or requests about privacy:

• Email: welcome@center4solar.com
• Phone: (859) 487-5027, Monday–Friday, 8:30 a.m.–5:30 p.m. Eastern
• Mail: Center For Solar LLC, Attn: Privacy, 651 Perimeter Drive, Suite 440, Lexington, KY 40517

Our terms of service and scope of services explain the rest of how we work.