Effective Date: November 8, 2025
Last Updated: November 8, 2025
Soluxia Energy is committed to protecting your privacy and ensuring the security of your personal data. This policy outlines our practices for collecting, using, disclosing, and protecting data collected through our website, communication channels (like WhatsApp), and specialized engineering services, regardless of your location.
1. Data Collection: Categories and Sources
We collect and have collected the following categories of personal information in the preceding 12 months from the following sources.
A. Information You Provide Directly (Sources: Request a Quote, Contact Form, Email, WhatsApp)
Category of Information | Business Purpose for Collection |
|---|---|
Identifiers & Contact Data (Name, Email, Phone/WhatsApp, City) | To fulfill service contracts, communicate assessment results, and respond to inquiries. |
Commercial Information (Site Type, Project Stage, Preferred Contact Time) | To evaluate project feasibility, deliver accurate engineering quotes (BOQs), and tailor services (SolarPro™, AegisVision™, etc.). |
Service-Related Data (Existing BOQs, Solar Audit reports, Load Review) | To perform contractual obligations (audits, installations, O&M) and verify project performance. |
B. Information Collected Automatically (Sources: Website, Cookies, Analytics)
Category of Information | Business Purpose for Collection |
|---|---|
Internet & Network Activity (IP address, browser type, pages viewed, time spent) | For website analytics, security, maintenance, and improving user experience. |
Geolocation Data (General city/region based on IP) | To understand regional demand for our services across Pakistan and internationally. |
Sensory Data (Camera/Mic data from AegisVision™ system logs) | To provide AI security services, anomaly detection, and real-time alerts (Only for clients subscribed to AegisVision™ services). |
2. Lawful Basis for Processing (GDPR Requirement)
For individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal grounds (lawful bases) for processing your Personal Data under GDPR Article 6:
Performance of a Contract: Processing is necessary to provide you with the services you request (e.g., fulfilling an Engineering Assessment, performing a Solar Audit, or completing an installation contract).
Consent: We process data based on your clear, affirmative consent (e.g., signing up for marketing updates). You have the right to withdraw this consent at any time.
Legitimate Interests: Processing is necessary for our legitimate interests (or those of a third party), provided these are not overridden by your rights and freedoms. Examples include fraud prevention, internal data analysis, and service security.
Legal Obligation: Processing is necessary to comply with a legal obligation to which Soluxia Energy is subject (e.g., tax reporting or responding to a valid legal request).
3. How We Use and Disclose Your Information
We use the information collected for the following business and commercial purposes, and we do not sell or share (as defined by CCPA/CPRA) your data for monetary compensation.
Purpose | Description |
|---|---|
Service Fulfillment | To process your inquiry, design systems, deliver materials, and complete the installation, audit, or maintenance service (SolarPro™, HydraSoft™). |
Legal & Regulatory | To comply with requirements from PEC, tax authorities, or court orders, and to comply with the proposed PDPB in Pakistan. |
Audit & Security | To perform independent audits ( |
Service Providers | Disclosing identifiers and network activity to third parties (e.g., cloud hosting, payment processors, analytics providers) under strict contractual terms to perform functions on our behalf. |
4. Data Retention and Security
Data Retention
We retain your Personal Data only for as long as is necessary to fulfill the purposes outlined in this policy, including for satisfying any legal, accounting, or reporting requirements (such as retaining PEC-stamped drawings and warranties for the duration of the 5-year warranty period or as required by Pakistani law).
Security Measures
We employ appropriate physical, technical, and administrative security measures (such as encryption and access controls) to protect your Personal Data against accidental loss, unauthorized access, misuse, alteration, or disclosure. However, no internet-based system is 100% secure.
Cross-Border Data Transfer (PDPB & GDPR Compliance)
Soluxia Energy is based in Pakistan. While your data is primarily managed here, we may use global cloud services or data processors. If your data is transferred outside of Pakistan, the EEA, or the UK, we will take all necessary steps to ensure that the transfer is lawful and that the recipient jurisdiction provides a level of protection at least equivalent to that afforded by the PDPB or implements Standard Contractual Clauses (SCCs) as required by GDPR.
5. Your Global Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding the data we hold about you. You may exercise these rights by contacting us using the details in Section 7.
A. GDPR / General International Rights
Right to Access (Know): The right to request copies of the Personal Data we hold about you, along with details about how we process it.
Right to Rectification (Correction): The right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure (Be Forgotten): The right to request that we delete your Personal Data, under certain conditions.
Right to Restrict Processing: The right to request that we restrict the processing of your Personal Data, under certain conditions.
Right to Object to Processing: The right to object to our processing of your Personal Data if it is based on legitimate interests.
Right to Data Portability: The right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time.
B. CCPA / CPRA Specific Rights (For California Residents)
If you are a California resident, the following rights also apply:
Right to Opt-Out of Sale or Sharing: The right to direct us not to sell or share (disclose for cross-contextual behavioral advertising) your Personal Information.
Soluxia Energy does not sell Personal Information for monetary compensation. However, our use of third-party analytics and advertising tools may constitute “sharing” under CPRA.
Right to Limit Use of Sensitive Personal Information: The right to limit our use and disclosure of Sensitive Personal Information (SPI) to only that which is necessary to perform the services you requested.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA privacy rights.
To Exercise Your CCPA/CPRA Rights: Please submit requests using the email address or phone number in Section 7. We will verify your request using a combination of your name, phone number, and service information.
6. Children’s Privacy
Our services are intended for professional and residential property owners and are not directed to individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If we become aware that we have collected Personal Data from a child without parental consent, we take steps to remove that information immediately.
7. Contact Information and Complaint Mechanisms
If you have any questions or concerns about this policy or wish to exercise any of your rights, please contact our dedicated support team.
Soluxia Energy (Data Controller) Office Address: Office 501, fifth floor, Crown Plaza, Opposite DHA Phase 2, Main GT Road, Islamabad, Pakistan
Email for Privacy Requests: support@soluxiaenergy.com
Phone / WhatsApp: +92 315 1556697
Right to Lodge a Complaint
If you are an EEA or UK resident and feel we have not addressed your concerns adequately, you have the right to lodge a complaint with your relevant supervisory authority (Data Protection Authority).