PRIVACY POLICY

Last updated: [September 2026] 

P and N Global Pty Ltd (ABN 73 639 293 495) (referred to in this Policy as “ProSolar Global”, “we”, “us” or “our”) is committed to protecting the privacy of individuals we deal with, including customers, prospective customers, website visitors, job applicants and suppliers. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can access or correct your information or make a complaint.

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Privacy Act). Where a finance provider assesses your eligibility for solar or battery finance, credit-related information about you is handled by that provider in accordance with Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2025 (see the Credit Reporting summary near the end of this page).

This Policy applies to personal information we collect through our website (pro-solar.com.au), over the phone, in person, through quote and contract paperwork, and through our sales, installation, finance-referral and after-sales service processes, including where a lead is referred to us by a lead generator, Sales Distributor, affiliate or referral partner.

Definitions

Term	Meaning
Personal information	Information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Sensitive information	A subset of personal information that receives extra protection under the APPs, such as health information.
Credit information / affordability information	Information about your identity, income, expenses, assets, liabilities, employment and repayment history collected by a finance provider to assess your eligibility for solar or battery finance.
Identity document(s)	Government-issued or other documents used to verify your identity, such as a driver licence, passport, Medicare card, utility bill or proof-of-address document.
Finance provider / credit provider	Brighte, Plenti or another finance company that assesses and provides consumer finance for a solar or battery purchase. We do not provide credit ourselves — we refer you to these providers, who deal with your application, and any credit reporting body, under their own privacy policies.
Service Provider	A third party engaged by us to perform functions on our behalf (e.g. installers, IT hosting, CRM, marketing, debt collection, finance brokerage).

Personal information we collect

Identity information (including identity documents)

To enter into an installation agreement, register your system for the Small-scale Renewable Energy Scheme (STCs), complete grid-connection paperwork with your Distribution Network Service Provider, satisfy Clean Energy Council / NETCC accreditation requirements, or verify who we are dealing with, we may collect:

• Full name, date of birth, and signature
• Proof-of-identity documents such as a driver licence, passport, Medicare card, or other government-issued ID
• Proof-of-address documents such as a recent utility bill or council rates notice
• Property ownership or tenancy information (e.g. landlord consent, strata approval)

Property, energy and site information

To design your system, prepare your proposal, and complete grid-connection and rebate paperwork, we may collect:

• Electricity bills and usage information
• National Metering Identifier (NMI) and other meter/connection details
• Photos of your property, roof and switchboard taken during a site assessment or installation

Affordability and financial information

If you apply for finance or a buy-now-pay-later arrangement through a finance provider such as Brighte or Plenti, that provider may collect (and may share the outcome of an application with us):

• Income, employment status and employer details
• Expenses, assets and liabilities
• Bank account and direct-debit details, and transaction information relevant to a finance or affordability assessment
• Hardship information, where you tell us or your finance provider you are experiencing financial difficulty
• Information from a credit reporting body, where the finance provider uses one to assess your application

We do not provide credit ourselves. Brighte, Plenti and any other finance provider we refer you to are separate credit providers who assess your application, and deal with credit reporting bodies where relevant, under their own privacy policies — please review those policies before you apply.

Contact and account information

• Name, address, phone number and email address
• Quote, order and installation preferences
• Account login details where you register on our website

Communications, complaints and warranty records

• Call recordings, where a call with us is recorded
• Emails, SMS and WhatsApp messages you exchange with us
• Complaint records and correspondence
• Warranty and after-sales service records

Technical and usage information

• IP address, browser type and device identifiers
• Pages visited, referring pages and time spent on our website
• Cookies and similar tracking technologies, including website analytics, advertising and marketing-automation tools (see the Cookies section below)

How we collect personal information

• Directly from you — via our website, phone, email, in-store or in-home consultations, and contract paperwork
• From a lead generator, Sales Distributor, affiliate, referral partner, or through social media, where you have asked to be contacted about solar or battery products
• From a finance provider you deal with in connection with your purchase
• From your installer, electrician or Distribution Network Service Provider in connection with your installation
• From publicly available sources, where reasonably necessary (e.g. verifying a business’s ABN)

Where reasonably practicable, we collect personal information directly from you. Where we collect information about you from a third party — including a lead generator, Sales Distributor or referral partner — we will take reasonable steps to ensure you are aware of the matters set out in this Policy.

Why we collect, hold, use and disclose your information

• Preparing quotes, contracts and system designs
• Verifying your identity and eligibility for rebates (e.g. Solar Victoria, STCs) and grid connection
• Referring you to a finance provider and supporting their assessment of your application
• Processing payments and deposits through our payment providers
• Scheduling and delivering installation, warranty and after-sales service
• Administering and recovering outstanding debts owed to us (see below)
• Complying with our legal, regulatory and industry-code obligations (NETCC, Clean Energy Council, Solar Victoria, ACCC, AER, ASIC where relevant)
• Responding to complaints and regulator enquiries
• Direct marketing about products and offers, where you have not opted out
• Improving our website, services and customer experience

Disclosure of personal information

We only disclose personal information where necessary for the purposes above, where you would reasonably expect the disclosure, where required by law, or with your consent. We do not sell your personal information.

Payment providers and finance partners

Where you pay a deposit or invoice, or apply for finance, we disclose the minimum information necessary to:

• Payment gateway and merchant services providers who process card, bank transfer or BNPL payments
• Finance providers — Brighte and Plenti — to refer and support your finance application

Credit reporting

We are not a credit provider and do not offer finance or payment plans directly. Where you apply for finance, we refer your application to Brighte, Plenti or another finance provider. That provider is the credit provider for your application and is responsible for assessing it, including any dealings with a credit reporting body, in accordance with Part IIIA of the Privacy Act and the Privacy (Credit Reporting) Code 2025. Please refer to Brighte’s or Plenti’s own privacy policy for details of how they handle your credit-related information, and your rights to access or correct it.

Debt administration and recovery

If an account with us becomes overdue, we may disclose relevant contact, contract and payment information to:

• Our internal accounts and collections team
• External debt collection agencies or law firms engaged to recover the debt
• Courts, tribunals (including VCAT) or regulators, where necessary to enforce or defend a claim

We will only disclose information for debt recovery purposes to the extent necessary, and any external collection agency we use is required to handle your information in line with the Privacy Act and, where applicable, the ACCC/ASIC Debt Collection Guideline.

Installers, service providers and regulators

• Licensed installers, electricians and subcontractors engaged to install or service your system
• Our CRM, IT hosting and marketing service providers who support our operations
• Solar Victoria, the Clean Energy Regulator, NETCC, the Clean Energy Council, your Distribution Network Service Provider, and other regulators or industry bodies, where required for rebates, accreditation or a compliance matter
• Our professional advisers (legal, accounting, insurance)
• Law enforcement or government agencies where required or authorised by law

Overseas disclosure

Our website and core business data are hosted in Australia. However, some personal information is disclosed to overseas recipients, namely:

• Our related entity, H&M Virtual Services, based in India, which provides back-office and customer support functions on our behalf
• Our CRM provider (solarerp.com.au), which is hosted on Amazon Web Services in the United States

Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure the recipient does not breach the APPs in relation to that information, including through contractual protections. Except where an exception in the Privacy Act applies (for example, if the disclosure is required to perform our contract with you), we will seek your consent before disclosing your personal information to an overseas recipient who is not subject to a scheme substantially similar to the APPs — providing us with your information does not, by itself, constitute that consent.

Direct marketing

We may use your contact details to send you information about products, promotions and offers. You can opt out at any time by using the unsubscribe link in our communications, or by contacting us using the details below. We will not send you marketing after you opt out, other than service-related communications necessary to administer an existing contract.

Data quality

We take reasonable steps to ensure the personal information we collect, use and disclose is accurate, up to date and complete. You can help us by letting us know if your contact or identity details change.

Data security and secure destruction

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including:

• Restricting access to personal information (including identity documents and financial information) to staff who need it to perform their role
• Storing electronic records behind access controls and, where applicable, encryption
• Requiring our Service Providers to protect personal information under contract
• Physical security controls over any hard-copy documents (e.g. locked storage)

Where personal information is no longer required for the purposes in this Policy and we are not required to retain it by law or as set out below, we securely destroy or permanently de-identify it. Electronic records are securely deleted or wiped; hard-copy documents containing identity or financial information are cross-cut shredded or destroyed by a secure document-destruction provider.

How long we keep your information

As a guide:

Record type	Retention period	At end of period
Website enquiries / leads that do not convert to a customer	Retained indefinitely	N/A
Customer contracts, quotes and installation records	Retained indefinitely	N/A
Payment and transaction records	Retained indefinitely	N/A
Identity documents collected for verification, STC assignment or grid connection	Retained indefinitely	N/A
Call recordings	Retained indefinitely with service provider	N/A
Overdue-account / debt recovery records	Retained indefinitely	N/A
Marketing contact preferences and website usage data	Retained indefinitely	N/A

Data breach notification

We have processes in place to respond to a suspected or actual data breach in line with the Notifiable Data Breaches (NDB) scheme under the Privacy Act. Where a breach involving personal information is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by law.

Access, correction and complaints

You may request access to, or correction of, the personal information we hold about you by contacting our Privacy Officer, Ajay ([email protected]). We will acknowledge your request promptly and respond within a reasonable time, generally within 30 days.

If you have a complaint about how we have handled your personal information, please contact our Privacy Officer, Ajay ([email protected]), first so we can investigate and respond in writing. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner: www.oaic.gov.au | 1300 363 992.

Contact us: [email protected] | 1300 181 191 | 1, Level 8/1341 Dandenong Rd, Chadstone VIC 3148

Collection notices

In addition to this Policy, we provide a short-form collection notice at the point personal information is collected, including on website enquiry and quote forms, in installation contracts, on finance-referral forms, at the start of a recorded call, and when we request supporting documents (such as identity documents). Each notice summarises what is being collected, why, and links back to this Policy.

Cookies and website data

Our website uses cookies and similar technologies, including Google Analytics, Google Tag Manager, Meta Pixel, TikTok, LinkedIn and X tracking pixels, and Mautic for marketing automation, to operate essential features, remember your preferences, understand how visitors use our site, and measure the performance of our advertising and marketing. We may also use AI-based tools (such as ChatGPT) to help handle customer enquiries. You can control cookies through your browser settings; disabling cookies may affect some website functionality.

Children’s privacy

Our services are directed at adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Changes to this policy

We may update this Policy from time to time to reflect changes in our practices or the law. The current version will always be available on this page, with the “last updated” date shown above.