Toro Solar Privacy Policy

Three Bulls Consulting Pty Ltd trading as Toro Solar (Toro Solar, we, us) provides a quoting, sizing and compliance platform for solar and battery installer businesses (each a Company) at torosolar.app (the Service). This policy explains how we collect, hold, use and disclose personal information, in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Two categories of personal information pass through the Service: (a) information about people who use the Service directly — Platform Admins, Company Owners and Company Users; and (b) information a Company enters about its own end customer to generate a quote or proposal (Customer Data). For Customer Data, the Company is the party responsible for that record and we act as its service provider, processing it on the Company's instructions to provide the Service. If you are a Company's customer and have a question about your own information, we suggest you contact that Company first, since it controls the record; we will still assist directly if you contact us.

Account information: name, email address, phone number, job title, employer/Company details, password (stored hashed), and role (Platform Admin, Company Owner or Company User).

Billing information: billing contact details; payment details are collected and processed by Stripe on our behalf and we do not store full card numbers.

Usage information: log data, device and browser type, pages viewed and actions taken within the Service.

Customer Data entered by a Company: a customer's name, address, email, phone number, energy usage, site or roof details, selected system configuration, pricing, and, once available, signature and deposit payment status.

Communications: support requests, survey responses and other feedback sent to us.

To provide, maintain, secure and improve the Service, including sizing, Rule Set application, quote and proposal generation, e-signature and billing;

to communicate with Company Owners and Company Users about their account and the Service, and, where a recipient has not opted out, about product updates;

to bill Companies for their use of the Service, and to detect, investigate and prevent fraud or misuse; and

to produce de-identified, aggregated analytics that cannot reasonably identify an individual or a specific Company, used to improve the Service and our Rule Sets.

We collect, hold and use personal information because it is reasonably necessary for our functions as a quoting and compliance platform for installer businesses, to perform our contract with a Company, and to comply with our legal obligations (including tax and financial record-keeping). Where we send direct marketing to a Company contact, that person may opt out at any time using the unsubscribe link provided or by contacting us.

With subprocessors who help us operate the Service — cloud hosting and database infrastructure, mapping and roof-imagery providers, payment processing (Stripe), and transactional email or SMS delivery — each engaged under terms that protect the information and restrict its use to providing that service to us.

Within a Company's own account: Customer Data and quote records are visible to that Company's own authorised Company Users, as the Company directs.

With our professional advisers, insurers, or a prospective buyer in connection with a corporate transaction, on a confidential basis.

Where required or authorised by law, or to protect the rights, safety or property of Toro Solar, a Company, a Company's customer, or the public.

We do not sell personal information.

Some of our hosting, cloud storage and processing infrastructure is operated by providers that may store or process information outside Australia, including in the United States. Where this occurs, we take reasonable steps to satisfy ourselves that the overseas recipient handles the information consistently with the Australian Privacy Principles, including through that provider's own contractual and security commitments.

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls scoped by role and by Company, and restricted internal access to production data. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of information.

We retain account and Customer Data for as long as the relevant Company's account is active, plus a further period needed to meet our legal, tax, audit and dispute-resolution obligations (typically up to seven years for financial records). If a Company's account closes, we retain quote and proposal records only as long as reasonably necessary for those purposes, and will delete or de-identify data that is no longer needed on request, subject to those obligations.

You may ask us to access or correct personal information we hold about you, or raise a complaint about how we have handled it, by contacting us at privacy@threebulls.com.au. We will respond within a reasonable period, ordinarily within 30 days, and may need to verify your identity first.

If your information was provided to us by a Company as part of a quote or proposal, we will generally direct your request to that Company in the first instance, since it controls that record, but we will still assist directly if you ask us to.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use essential cookies to operate the Service (for example, to keep you signed in) and limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service from working.

The Service is a business tool for installer companies. It is not directed at, and we do not knowingly collect personal information from, children.

The Service, or a generated proposal, may link to third-party sites, such as a Stripe payment page. We are not responsible for the privacy practices of those third-party sites, and encourage you to review their own privacy notices.

We may update this policy from time to time. The “last updated” date above will change when we do, and we will notify Company Owners of a material change through the Service or by email.