Gilead Energy
Gilead Energy
Shop Hardware → Book Site Inspection → Contact Us →
Services & Solutions
Residential Solar EPC Commercial Microgrids Our Completed Projects 30% Down Solar Financing Refer and Earn Solar Calculator Compare Equipment Warranty & SLAs
Get a Quote Create Account → Login
NDPA 2023 & NDPR Compliant

Privacy Policy & Data Protection

How Gilead Energy Solutions collects, encrypts, and safeguards your personal identity, building load telemetry, and financial information.

Last Updated: August 2026 • Effective Date: January 1, 2026

1. Regulatory Scope & Introduction

Gilead Energy Solutions ("Gilead", "we", "our", or "us", formerly operating as ICMENERGY / Sanniphil Company Limited) is committed to safeguarding the privacy and integrity of personal and technical data collected through our web portals, customer self-service suites, SCADA remote IoT nodes, and field engineering interactions in Nigeria.

This Privacy Policy is formulated in strict adherence to the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019 issued by the Nigeria Data Protection Commission (NDPC), and internationally recognized data privacy frameworks.

2. Categories of Information We Collect

To provide tailored solar EPC engineering, financial underwriting, and post-installation monitoring, we collect:

  • Contact & Identity Data: Full name, residential/commercial delivery address, phone number, and email address provided during quotation requests, bookings, and customer account registration.
  • Facility & Electrical Load Profiles: Estimated or measured daily kWh usage, generator capacity (kVA), daytime vs. night duty cycles, appliance counts, and roof structural specs captured during on-site energy audits.
  • Financial & Underwriting Data: Bank Verification Number (BVN) validations, bank statements, or utility bills submitted when applying for Flexible Solar Financing (BNPL) or commercial equipment leasing.
  • SCADA IoT Telemetry: Real-time inverter output (kW), battery State of Charge (SoC %), voltage fluctuations, daily solar yield (kWh), and ambient inverter temperature transmitted via Wi-Fi/GSM IoT dongles for preventive maintenance.

3. Purpose & Legal Basis of Data Processing

We process your personal and telemetry data under lawful bases recognized by the NDPA 2023:

Contractual Fulfillment

To engineer Single Line Diagrams, process equipment waybills, coordinate installation teams, and fulfill 5–25 year warranty mediation.

Consent & Financing

To transmit customer pre-qualification data to licensed financial partners (Solar Financing) upon explicit customer application.

SCADA IoT Diagnostics

To alert field engineers to battery cell imbalance, grid surge trips, or inverter fault codes before catastrophic failure occurs.

Legal & Regulatory

To maintain tax records, dispatch waybills, VAT ledgers, and comply with the Federal Inland Revenue Service (FIRS).

4. Third-Party Data Sharing & Protection

Gilead Energy Solutions never sells, rents, or monetizes customer data. Information is shared strictly with verified technical and institutional partners under Non-Disclosure Agreements (NDAs):

  • Solar Financing & Financing Underwriters: Transmitted through TLS 1.3 encrypted API conduits for credit scoring and loan disbursement.
  • Payment Processors (Paystack): Card and bank account details are tokenized directly on PCI-DSS Level 1 certified gateways. Gilead does not store raw card numbers.
  • OEM Equipment Cloud Platforms (Deye Cloud, Huawei FusionSolar, Felicity): Anonymized inverter MAC addresses and telemetry are synced for manufacturer firmware upgrades and RMA validation.

5. Your Legal Rights Under NDPA 2023

As a data subject, you hold the following unconditional rights:

  • Right to Access & Portability: You may request a machine-readable export of all customer statements, telemetry logs, and invoices stored on your account.
  • Right to Rectification: You may update erroneous facility locations, load specifications, or billing contact names through the Customer Portal.
  • Right to Erasure ("Right to Be Forgotten"): You may request deletion of non-statutory personal data upon decommissioning of solar equipment and expiration of warranty terms.
  • Right to Object: You may opt-out of promotional SMSLive247 updates, WhatsApp announcements, and marketing newsletters at any time.

Data Protection Officer (DPO) Inquiries

For inquiries regarding this privacy framework, data audits, or exercising your statutory NDPR rights, contact our Data Protection Compliance Team:

✉️ privacy@gileadenergy.com 🏢 Corporate Office: Victoria Island, Lagos