Privacy notice
Jualink (“Jualink”) runs a marketplace that connects people who want solar power with installers, equipment suppliers and financing partners. This notice explains what personal data we collect, why, who receives it, and your rights.
What we collect
Account details (name, email, phone, country); your energy assessment (location, property type, appliances, usage, bills and photos you choose to add); project records (address, inspection reports, designs, installation photos, serial numbers); payment records (amounts, dates, references — card and bank details are handled by the payment provider, not us); financing applications (employment, income, identity and bank details, stored encrypted); security logs (sign-in times, devices, IP addresses) and an audit trail of important actions.
Why we use it
To estimate your solar needs, invite installers to quote, manage your project and payments, provide warranties and maintenance through your Solar Passport, prevent fraud, resolve disputes, and meet legal and accounting obligations.
Who receives it
Installers you ask to quote see your assessment, photos, city and first name. The installer you choose also sees your full name, phone, email and address. A lender you apply to receives your financing application, only with your explicit consent, which you can withdraw before the loan is funded. Payment providers process your payments. We don't sell personal data. You can see exactly who received your data in Account → Privacy & data.
Your choices and rights
You can download your data, withdraw optional consents, turn SMS and WhatsApp messages on or off, and delete your account from Account → Privacy & data. Some records (payments, project and audit records) are kept for as long as the law requires, without your contact details.
Security
Passwords are hashed, sessions are protected, sensitive financing fields are encrypted, files are private and served only to authorised people, and important actions are written to a tamper-evident audit log. Optional two-step verification is available for every account.
Country-specific law
We design for each country's own regime rather than assuming one law covers all of Africa. The frameworks we map to are listed below; the listing is a pointer for legal review, not a statement of compliance.
| Country | Law | Regulator |
|---|---|---|
| Côte d'Ivoire | Loi n° 2013-450 relative à la protection des données à caractère personnel | ARTCI |
| Ghana | Data Protection Act, 2012 (Act 843) | Data Protection Commission |
| Kenya | Data Protection Act, 2019 | Office of the Data Protection Commissioner (ODPC) |
| Nigeria | Nigeria Data Protection Act 2023 | Nigeria Data Protection Commission (NDPC) |
| Rwanda | Law No 058/2021 on the protection of personal data and privacy | National Cyber Security Authority |
| Senegal | Loi n° 2008-12 sur la protection des données à caractère personnel | Commission de Protection des Données Personnelles (CDP) |
| South Africa | Protection of Personal Information Act, 2013 (POPIA) | Information Regulator |
| Tanzania | Personal Data Protection Act, 2022 | Personal Data Protection Commission |
| Uganda | Data Protection and Privacy Act, 2019 | Personal Data Protection Office |
| Zambia | Data Protection Act, 2021 | Office of the Data Protection Commissioner |
Questions: support@jualink.com