⚡ BYD LiFePO4 BATTERY✦ 🔌 THREE FLEXIBLE CHARGING OPTIONS✦ 🇳🇬 NATIONWIDE DELIVERY✦ 🛠 AFTER-SALES SUPPORT✦ 🔒 SECURE ORDERING✦ 💬 WHATSAPP SUPPORT✦ 🔋 1,008WH CAPACITY✦

Privacy Policy

Effective date: 1 August 2026
Last updated: 2 August 2026

Table of Contents

1. About This Privacy Policy

This Privacy Policy explains how LETSGOSOLAR LIMITED, trading as LetsGoSolar, collects, uses, stores, shares and protects personal information when you:

LetsGoSolar is the data controller for the personal information covered by this Privacy Policy. This means that we determine why and how that information is processed.

Our contact details are provided in Section 20.

2. Personal Information We Collect

The information we collect depends on how you interact with us.

2.1 Checkout and order information

When you place an order, we may collect:

Certain checkout information is required for us to process and deliver an order. If you do not provide the required information, we may be unable to complete the transaction.

2.2 Location information

Our website may offer an optional location feature to help you complete or confirm your delivery location.

We will not access your device location without your permission. Depending on your device settings, this may involve approximate or precise location information.

You may decline location access and enter your delivery address manually. Declining optional location access will not prevent you from placing an order.

We do not use optional location access to create a continuous location history. Where location information is used to populate or confirm a delivery address, the resulting address will form part of the order record.

2.3 Payment information

Online payments are processed through our payment provider, currently Paystack.

Payment information such as card details, bank account details, payment authorisation information or one-time passwords may be collected directly by Paystack or the relevant bank or payment network.

LetsGoSolar generally receives limited transaction information, such as:

We do not intend to store your complete payment card number, card security code or online banking credentials on our own systems.

Paystack may process certain information under its own privacy policy and may act as an independent controller where it is required to process information for fraud prevention, regulatory compliance, dispute management or other legal obligations.

2.4 Communications and WhatsApp information

If you contact us, request a callback or communicate with us through WhatsApp, email, telephone or another channel, we may collect:

WhatsApp is operated by a third party. Your use of WhatsApp is also subject to WhatsApp's and Meta's applicable terms and privacy practices.

2.5 Warranty and support information

When you make a warranty or support request, we may collect:

2.6 Marketing information

Where you separately agree to receive marketing, we may collect:

Marketing consent is optional and is not required to place an order.

2.7 Website and device information

When you use our website, we and our service providers may automatically process:

3. How We Collect Personal Information

We collect personal information:

4. How and Why We Use Personal Information

We may use personal information to:

We will not use personal information for a materially incompatible purpose without providing appropriate notice and, where required, obtaining consent.

5. Our Lawful Bases for Processing

Depending on the activity, we process personal information under one or more of the following lawful bases.

5.1 Performance of a contract

We rely on contractual necessity where processing is required to:

5.2 Legal obligations

We may process and retain information where necessary to comply with:

5.3 Legitimate interests

We may rely on our legitimate interests where processing is reasonably necessary to:

Before relying on legitimate interests, we consider whether the processing is necessary, proportionate and likely to unfairly affect your rights.

Where we rely on legitimate interests for first-party campaign attribution, the information involved, its 90-day browser retention and your right to object are described in Section 8 and Section 14.8. That processing is separate from, and not a substitute for, the Advertising consent that governs what we send to Meta, Google and TikTok.

5.4 Consent

We rely on your consent for activities such as:

You may withdraw consent at any time. Withdrawal will not affect processing that was lawful before the withdrawal.

5.5 Other lawful grounds

Where applicable, we may process information to protect a person's vital interests or where processing is otherwise authorised by Nigerian law.

6. Order Communications and WhatsApp

We may contact you by telephone, email or WhatsApp where reasonably necessary to:

These operational communications are part of processing your order or responding to your request. They are not treated as promotional marketing.

Where you submit your telephone number specifically to receive a WhatsApp message or callback, we may use that number to fulfil the request.

We will not treat an order, callback request or customer-service interaction as consent to receive unrelated promotional messages.

7. Marketing Consent

Marketing consent is separate from order processing.

Where a checkout page or another form gives you the option to receive promotional communications:

You may unsubscribe through any available unsubscribe link or contact us using the details in Section 20.

We may retain a minimal suppression record after you unsubscribe so that we do not accidentally add you back to a marketing list.

8. Cookies, Analytics, Campaign Attribution and Advertising Technologies

Our website uses necessary technologies to operate, secure and maintain the service.

We also use Cloudflare Web Analytics for privacy-first aggregate traffic and performance measurement. Cloudflare states that its Web Analytics beacon does not use or access cookies, local storage or session storage. The service may process performance information, landing paths and referrer information. A source IP address is received through normal HTTP request handling and is discarded by Cloudflare rather than stored in its core analytics data.

We use Cloudflare Web Analytics to understand general site performance and traffic patterns. We do not use it to create cross-site advertising profiles.

When you submit an order, we may record limited first-party campaign information associated with that order, such as:

We use this information for internal order attribution, campaign reporting and business planning. We do not need to send your name, telephone number, email address or complete delivery address to an advertising platform for this internal reporting.

Our lawful basis for this record is legitimate interests: knowing which campaign, advertisement or referring website produced an order so that we can attribute it correctly and plan our marketing. It is not based on your Analytics or Advertising consent, and it is not an essential technology. We therefore keep it whether or not you accept optional cookies, and we limit it in other ways instead — it contains no name, contact details, delivery address or anything you typed, and the copy held in your browser is deleted automatically 90 days after the visit that created it (see Section 14.8).

This is a separate activity from the advertising measurement described later in this section. Recording campaign information for our own reporting sends nothing to Meta, Google or TikTok. Where an advertising click identifier is later sent to its platform (a Meta click identifier to Meta, or a TikTok click identifier to TikTok), that happens only where you have given Advertising consent which has not been withdrawn, and is described under the advertising technologies below.

You may object to this processing at any time using the contact details in this Policy, and you may remove the browser copy yourself at any time by clearing your browser's site data. Attribution information already copied into an order record forms part of that order's business record and is retained under Section 14.1.

With your Analytics consent, we also operate our own first-party analytics, run by LetsGoSolar on our own infrastructure rather than by a third party. It uses two first-party cookies, lgs_vid (180 days) and lgs_sid (until you close your browser), to count visitors and group page views into visits.

Through it we record the page you viewed, whether you reached each main section of that page, which button or link you selected, whether you started the timed game and whether that round was won or lost, whether the game invitation was shown and how you responded, whether you interacted with the product viewer, which customer review video you played, whether you used the solar calculator or started the generator, whether you viewed or started the checkout, which checkout step you progressed to, which checkout field you interacted with and at which step, whether you started or submitted a campaign entry or opened a campaign question, whether the saved offer was shown or dismissed and whether you saved the offer, whether you opened the customer-story submission form, whether you submitted the customer-story form and which kinds of media you included, which customer photo or video card you selected or which customer-submitted video you played in the customer-proof section, whether you shared your referral coupon and how, whether you entered a referral code at checkout, how long you were actively on the page, the approximate country you visited from, the campaign or referring website that brought you, and the time of each of these. Sections and buttons are recorded only by name, from short fixed lists published in the Cookie Policy; a section counts as reached once it has been on your screen for about a second, which means it was visible, not that you read it.

We do not record your name, telephone number, email address, delivery address, form entries, IP address, browser User-Agent string, the query string of any web address, or any device fingerprint, and we do not record your discount code, your score or completion times in the game, your card or payment details, your precise location, anything you type, or any recording or replay of your screen. We do not share this information with Google, Meta or any other third party. The cookie values are stored by us only in irreversible hashed form.

Neither cookie is created before you consent to Analytics technologies. If you withdraw Analytics consent, both are expired and the first-party analytics records associated with them are deleted. See the Cookie Policy for the full description.

With your consent, we also use:

Google Analytics 4 will not be activated until you provide Analytics consent.

Meta Pixel, TikTok Pixel and advertising-related Google measurement will not be activated until you provide Advertising consent. This is the "Advertising" category in our cookie banner and Cookie Settings panel. It is a separate decision from the optional marketing-communications checkbox on the order form, which controls only whether we send you product updates and offers. TikTok's Automatic Advanced Matching and Enhanced Data Postback features are disabled; first-party cookies are enabled so that TikTok can attribute visits from TikTok advertisements.

Where you have given Advertising consent, we may also send limited information to Meta directly from our servers when you submit an order, in addition to the information Meta Pixel sends from your browser. This is the same measurement, sent by a second route so that it is not lost to browser or network conditions.

This is reported when a new order is submitted. It is not a record that payment has been made or verified: an order that is submitted and never paid for is still reported.

What we send is limited to the following, and nothing else:

We do not send your name, telephone number, email address, delivery address, delivery instructions, preferred delivery date, IP address, or anything else you typed into the order form, and we do not send a customer or account identifier of our own.

If you do not give Advertising consent, we send nothing to Meta about your order — by either route.

Where you have given Advertising consent, we may also send limited information to TikTok directly from our servers (the TikTok Events API) when a payment is verified. Unlike the Meta server event described above, this event is reported only after a payment has been verified — it is a record of a confirmed purchase, not of an order submission.

What we send to TikTok is limited to the following, and nothing else:

We do not send your name, telephone number, email address, delivery address, IP address, external identifiers, or anything else you typed.

If you withdraw Advertising consent while a prepaid checkout is open and payment has not yet been verified, the site associates the withdrawal with that checkout through the same payment-attempt capability cookie that identifies the checkout this browser opened. Where the association succeeds, the server-side purchase event that would otherwise be sent to TikTok when payment is verified is suppressed. If you withdraw consent from a different browser or device, or the capability cookie has been cleared or expired, the site cannot connect that withdrawal to the pending order and the purchase event may still be sent when payment is verified.

If you do not give Advertising consent, we send nothing to TikTok about your purchase. If you withdraw Advertising consent before your payment is verified and the withdrawal can be associated with your open checkout in this browser, we also send nothing.

Where activated with consent, Google, Meta and TikTok may receive information such as:

Google, Meta and TikTok may process information under their own privacy policies and may combine information received from our website with information obtained through their other services.

We do not send complete checkout-form contents, payment information, complete delivery addresses or unrestricted customer text to Google, Meta or TikTok.

Our consent notice provides clear options to:

Rejecting optional analytics and marketing technologies will not prevent you from accessing the core website or placing an order.

Necessary technologies used for security, checkout, payment, consent-preference storage or essential website operation may be used without optional consent where permitted by law.

For further details, see our Cookie Policy.

9. Cloudflare Hosting, Security and Turnstile

We use Cloudflare services to host, operate, secure or improve the availability of our website and related systems.

Customer order information may be stored or processed using Cloudflare infrastructure. For this processing, LetsGoSolar determines the purposes of processing and Cloudflare generally processes the information on our behalf under applicable contractual data-processing terms.

Cloudflare may process technical information including:

We also use Cloudflare Turnstile to distinguish legitimate users from automated or malicious traffic and to protect forms and checkout processes.

Turnstile may analyse technical signals from your browser or device. These signals are used for website security and bot prevention rather than LetsGoSolar advertising.

For limited network-security, abuse-prevention or Turnstile-related activities, Cloudflare may process certain information under its own privacy terms and legal responsibilities.

10. Email Processing Through Resend

We use Resend to send or manage emails, including:

Resend may process:

Resend processes information through its own infrastructure and authorised subprocessors under its contractual and data-protection terms.

11. Browser Storage and Order Confirmation

We may use browser storage to display limited order-confirmation information on the thank-you page.

Separately, while you are completing checkout we may temporarily keep a checkout draft in your browser's sessionStorage, so that returning from the payment flow does not mean entering the same details again. This draft may include the contact and delivery information you typed: first and last name, WhatsApp number, email address, state, LGA or area, street address, delivery instructions, and the delivery method and preferred date you selected.

The checkout draft is valid for up to 60 minutes and may be cleared earlier when the checkout completes or a new checkout journey begins. Because it is held in sessionStorage, closing the tab, window or browser session may remove it sooner, depending on how your browser behaves; we do not rely on it persisting.

The checkout draft is a convenience only. Every detail is checked again by our server when you submit, exactly as if you had typed it fresh. It is never used as payment authority, and never as proof of your identity or of which order belongs to you. It does not contain payment card details, payment authorisation data or security credentials of any kind.

The limited information stored in your browser may include:

We do not intend to store your complete delivery address, telephone number, email address or complete order record in browser local storage.

The limited browser record should expire or be removed after 30 days, although you may clear it earlier through your browser settings.

If you win the Pack the Box game, we may also store a short-lived discount record containing the discount code, issue time and expiry time so that the eligible code can be pre-filled in checkout. This record should not contain your complete address, telephone number, email address or complete order information and should expire no later than five hours after the code is issued.

We also keep two small campaign-attribution records in your browser, lgs_attribution_first_touch and lgs_attribution_last_touch, described in Section 8. They are written only when you arrive with campaign information in the web address, they contain no name, contact details, delivery address or form entries, and each is deleted automatically 90 days after the visit that created it. You may clear them yourself at any time through your browser's site-data settings.

Clearing browser data may prevent the website from displaying a previous order-confirmation summary, but it will not delete the order record retained in our order-management systems.

12. When We Share Personal Information

We may share personal information only where reasonably necessary with:

12.1 Hosting and infrastructure providers

Including Cloudflare and authorised infrastructure subprocessors that support the website, database, security, network or order systems.

12.2 Payment providers

Including Paystack, banks, card networks and other payment participants involved in authorising, settling, refunding or investigating transactions.

12.3 Communications providers

Including Resend, WhatsApp and telecommunications providers used to send order, support or marketing communications.

12.4 Analytics and advertising providers

Including Google, Meta and TikTok, but only in connection with non-essential tracking where the required consent has been obtained.

12.5 Delivery and logistics providers

We may provide delivery partners with information reasonably necessary to deliver an order, such as:

Delivery partners must not use this information for unrelated marketing.

12.6 Professional advisers

We may provide information to accountants, auditors, insurers, lawyers, consultants or other professional advisers where reasonably necessary and subject to appropriate confidentiality obligations.

12.7 Authorities and legal recipients

We may disclose information where required by law, court order or a lawful regulatory request, or where reasonably necessary to protect customers, our business or another person from fraud, harm or unlawful activity.

12.8 Business transactions

If LetsGoSolar is involved in a merger, financing, restructuring, acquisition or sale of business assets, relevant information may be disclosed subject to confidentiality and applicable data-protection requirements.

We do not sell or rent customer personal information.

13. International Processing and Cross-Border Transfers

Some of our service providers, including Cloudflare, Resend, Google, Meta and TikTok, may process personal information outside Nigeria.

The laws of another country may differ from Nigerian data-protection laws. We will only permit an international transfer where we have taken reasonable steps to ensure that an adequate level of protection or another lawful transfer basis applies.

Depending on the circumstances, our safeguards may include:

We maintain responsibility for selecting appropriate service providers and assessing the legal and practical safeguards relevant to personal information transferred from Nigeria.

Certifications or compliance frameworks may form part of our provider assessment, but they are not treated as a substitute for the transfer safeguards required by applicable Nigerian law.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, regulatory, warranty, fraud-prevention and dispute-management requirements.

Our general retention approach is as follows:

14.1 Orders and transactions

Order, invoice, payment-reference and delivery records are retained only for as long as reasonably necessary to fulfil the order, meet applicable accounting, tax and legal obligations, handle disputes, prevent fraud and support warranty claims.

14.2 Warranty records

Warranty and product-support records may be retained for the applicable warranty period and thereafter where reasonably necessary to manage claims, product history, legal rights or recurring product issues.

14.3 Customer communications

Customer-service and complaint communications may be retained for as long as necessary to resolve the matter and maintain an appropriate record of the outcome.

14.4 Marketing records

Marketing contact information is retained until you withdraw consent, unsubscribe or the information is no longer required.

We may retain a minimal record of an unsubscribe request to ensure that the preference continues to be respected.

14.5 Cookie-consent records

Cookie-consent preference records are retained for a reasonable period so that we can remember and respect your choices. The record may be refreshed when you change your preferences or when we are required to request consent again.

14.6 Analytics and advertising information

Analytics and advertising information is retained according to our settings and the retention practices of the relevant providers. We will configure such retention to be proportionate to the relevant measurement or advertising purpose.

For our own first-party analytics, the lgs_vid visitor cookie expires 180 days after your most recent visit, and the lgs_sid visit cookie is discarded when you close your browser. If you withdraw Analytics consent, both cookies are expired and the first-party analytics records associated with them are deleted.

14.7 Security records

Security, bot-prevention and access records may be retained for a reasonable period necessary to detect, investigate and prevent fraud, attacks or misuse.

14.8 Browser storage

Limited order-confirmation information stored locally in your browser should expire after 30 days or may be deleted earlier through your browser settings.

The checkout draft described in Section 11 is a separate record with its own, shorter lifecycle: it is valid for up to 60 minutes, is cleared when a checkout completes or a new checkout journey begins, and — being held in sessionStorage — may be removed sooner when the tab, window or browser session closes.

The two campaign-attribution records described in Section 8 are retained in your browser for a maximum of 90 days from the visit that created each one. The website checks their age whenever it loads and removes any record that has passed that limit, so the 90-day maximum is enforced by the website itself and does not depend on you clearing your browser.

That browser limit is separate from attribution information that has already been copied into an order record. Once you place an order, the attribution current at that moment becomes part of that order's business record and is retained under Section 14.1 with the rest of the order, not for 90 days. Deleting the browser records does not alter the order record.

When information is no longer required, we will delete, anonymise or securely dispose of it, subject to reasonable technical backup and deletion cycles.

15. How We Protect Personal Information

We use reasonable technical and organisational measures designed to protect personal information against:

These measures may include:

No online system is completely secure. You should also protect your devices, passwords, banking credentials and one-time passwords.

We will never ask you to send your card PIN, complete card security code or online banking password through WhatsApp or ordinary email.

Where a personal-data breach creates a risk requiring regulatory or customer notification, we will take the steps required by applicable law.

16. Your Data-Protection Rights

Subject to applicable legal conditions and exemptions, you may have the right to:

These rights are not absolute. For example, we may retain information where required for tax, accounting, fraud prevention, an unresolved transaction, a warranty obligation or the establishment or defence of legal claims.

17. How to Exercise Your Rights

To submit a privacy request, email:

hello@letsgosolar.co

Use the subject line:

Privacy Request

Please provide:

We may request reasonable additional information to confirm your identity and prevent unauthorised disclosure. We will not request excessive identification where a request can be verified through existing order or contact information.

Where identification documents are genuinely necessary, you should conceal information that is not required for verification.

We will acknowledge your request without unreasonable delay and provide a substantive response within the period required by applicable law.

A complex request may require additional time where permitted by law. If so, we will explain the reason for the delay and keep you informed of the request's progress.

We may refuse or limit a request where required or permitted by law. Where appropriate, we will explain the reason and available complaint options.

18. Complaints

If you believe we have not handled your personal information properly, contact us first through:

hello@letsgosolar.co

Use the subject line:

Privacy Complaint

Please describe:

We will investigate the complaint and communicate the outcome or next steps.

If you are dissatisfied with our response, you may submit a complaint to the Nigeria Data Protection Commission through its official complaint channels or seek another remedy available under Nigerian law.

19. Third-Party Websites and Services

Our website may contain links to third-party websites, social-media platforms, payment pages or services that we do not control.

This Privacy Policy does not govern those third parties. You should review their privacy information before providing personal information through their services.

20. Contact Us

The data controller responsible for this Privacy Policy is:

LETSGOSOLAR LIMITED
Trading as LetsGoSolar

Registered business address:
6, Emmanuel Folorunsho Street
Badore, Ajah
Lagos, Nigeria

Email: hello@letsgosolar.co

WhatsApp: +234 901 325 5928

Website: letsgosolar.co

For privacy requests, use the email subject line Privacy Request.

For privacy complaints, use the email subject line Privacy Complaint.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

The updated version will be published on this page with a revised effective date.

Where a change materially affects how we use personal information, we will provide additional notice where reasonably appropriate and obtain new consent where required.