Privacy Policy
How Torch Media Consulting Inc. collects, uses and protects your personal data when you shop at Solar Grove.
Last updated:
1. Who is responsible for your data
Solar Grove is a shop operated by Torch Media Consulting Inc. That company is the seller, the data controller for personal data processed through https://solargrove.site, and the name that appears on your card statement and invoice.
- Registered address: 4738 Blufton Road, Crozet, VA, 22932, US
- Privacy contact: +1 (757) 634-5230
2. Which laws apply
We apply the strictest applicable standard to every customer, wherever you are. In practice this means:
- the EU General Data Protection Regulation (GDPR) if you are in the European Economic Area;
- the UK GDPR and Data Protection Act 2018 if you are in the United Kingdom;
- the Lei Geral de Proteção de Dados (LGPD, Lei 13.709/2018) if you are in Brazil;
- US state privacy laws, including the CCPA/CPRA, if you are in the United States.
3. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, shipping and billing address, phone | Fulfilling your order and delivering it | Performance of a contract |
| Payment details | Taking payment. Card data goes directly to Stripe; we never see or store it | Performance of a contract |
| Order history | Support, warranty, refunds, and our tax and accounting duties | Contract and legal obligation |
| IP address, browser and device data | Security, fraud prevention and keeping the site working | Legitimate interest |
| Country and approximate location | Showing correct prices, shipping options and taxes | Legitimate interest |
| Affiliate or campaign referral code | Crediting the partner who referred you | Consent |
| Analytics about how you use the store | Improving the store | Consent |
We do not collect special category data, and we do not knowingly collect data from children under 16.
6. International transfers
Our processors are largely established in the United States, so your data may be transferred outside your country.
Transfers out of the EEA and UK rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework where the recipient is certified. Transfers out of Brazil rely on the standard contractual clauses approved by the ANPD.
You can request a copy of the safeguards in place by contacting us at +1 (757) 634-5230.
7. How long we keep data
- Order and invoice records: retained for as long as tax and commercial law requires, which is generally between 5 and 10 years depending on the country.
- Support correspondence: 3 years from the last contact.
- Consent records: 3 years from the decision, as evidence that consent was validly obtained.
- Analytics data: 14 months at most.
After these periods data is deleted or irreversibly anonymised.
8. Your rights
You may ask us to: give you access to your data; correct it; delete it; restrict or object to how we use it; give you a portable copy; or withdraw consent you previously gave. Withdrawing consent does not affect processing that already happened.
If you are in Brazil, the LGPD additionally gives you the right to confirm processing, to know with whom we share data, and to be informed about the consequences of refusing consent.
If you are in California, you may request disclosure or deletion of personal information and are entitled not to be discriminated against for exercising those rights.
Use the Your Privacy Rights page, or contact us at +1 (757) 634-5230. We answer within 30 days (15 days under the LGPD), free of charge.
You also have the right to complain to your supervisory authority — your national data protection authority in the EEA, the ICO in the UK, or the ANPD in Brazil.
9. Security
The site is served over HTTPS only. Payment data is handled entirely by Stripe, a PCI DSS Level 1 provider. Access to customer data is restricted to staff who need it, and our backend enforces row-level access controls.
If a breach is likely to result in a risk to your rights, we will notify the competent authority within 72 hours and inform you where the law requires it.
10. Changes to this policy
We will post any change on this page and update the date below. Material changes affecting how we use your data will be notified before they take effect.