Privacy Policy

1.Information we collect

We collect information you provide directly, information generated as you use our platforms, and limited information from third parties where you have authorised the connection.

• Account information such as name, work email, organisation and role
• Platform activity including transactions, retirements and report generation
• Operational data you upload for carbon accounting or project monitoring
• Technical data such as IP address, device type and browser
• Communications you send us, including support and sales enquiries

2.How we use information

• To provide, operate and secure our platforms and services
• To perform the contracted services set out in your agreement
• To maintain audit trails required for assurance and regulatory purposes
• To communicate service updates, and marketing where you have opted in
• To detect, investigate and prevent fraud or misuse
• To meet legal, tax and regulatory obligations

3.Legal bases for processing

Where data protection law requires a legal basis, we rely on performance of a contract, our legitimate interests in operating and improving our services, compliance with legal obligations, or your consent. Where we rely on consent you may withdraw it at any time.

4.Sharing and disclosure

We do not sell personal information. We share it only as needed to deliver our services or meet legal obligations.

• Service providers who host, process or secure data on our behalf
• Registries and verification bodies where a transaction requires it
• Professional advisers, auditors and assurance providers
• Authorities where disclosure is legally required
• A successor entity in connection with a merger or acquisition

5.International transfers

We operate across multiple jurisdictions, so information may be processed outside the country where it was collected. Where that happens we put appropriate safeguards in place, such as standard contractual clauses or an equivalent transfer mechanism.

6.Data retention

We keep personal information for as long as needed to provide the service and to satisfy legal, accounting and audit requirements. Transaction and retirement records are retained longer than account data because they form part of an auditable environmental claim.

7.Security

We apply technical and organisational measures including encryption in transit and at rest, role-based access control, logging and regular review. No system is perfectly secure, so we also maintain incident response procedures and will notify affected parties and regulators where required.

8.Your rights

Depending on where you live, you may have the following rights over your personal information. To exercise any of them, contact us using the details below.

• Access a copy of the information we hold about you
• Correct information that is inaccurate or incomplete
• Request deletion where we have no continuing lawful basis to retain it
• Object to or restrict certain processing
• Receive your information in a portable format
• Withdraw consent where processing is based on consent
• Complain to your local data protection authority

9.Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences and understand aggregate usage. You can control non-essential cookies through your browser or our cookie settings, though disabling some will affect platform functionality.

10.Changes to this policy

We may update this policy as our services or legal obligations change. We will revise the date above and, where changes are material, notify you directly.