Privacy Policy

INTRODUCTION TO OUR PRIVACY POLICY

At Carbon Integration Ltd, also known as Carbon Integration in the UK, we are proud to uphold strong privacy practices. Our priority is to maintain transparency about the personal information we collect, how we use it, and the limited circumstances in which we may disclose it. To honour this commitment, we have created this Privacy Policy. The policy ensures that any personal information you share with us, including through our website, will be collected, used, and disclosed only as described herein. Throughout this policy, the “user”, “you”, and “your” refer to you as the individual whose personal information we collect.

IMPORTANT INFORMATION AND WHO WE ARE

Carbon Integration is the Data Controller and is responsible for your personal data. If you have any questions in relation to this Privacy Policy or any requests concerning the exercise of your legal rights, please write to:

Data Protection Officer

Carbon Integration

Office 17, Hillingdon House

Wren Ave

Uxbridge

UB10 0FD

If you have any grievances regarding data protection, you have the right to file a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us initially.

THE DATA WE COLLECT ABOUT YOU

Personal information, also known as data, refers to any data that enables the identification of an individual. However, anonymous data where identification is impossible is not included

We have categorised the various forms of personal data we may gather, use, store, and transfer about you as follows:

Identity Data: this includes the first and last names, any website username or similar identifier.

Contact data: this includes the includes billing address, delivery address, email address and telephone numbers.

Technical Data: this includes your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

Profile Data: this includes your username and password, interests, preferences, feedback and survey responses.

Usage Data: this includes information about how you use our website, products and services.

Marketing and Communications Data: this includes your preferences in receiving marketing from us and our third parties and your communication preferences.

We also collect, utilise, and distribute Aggregated Data, such as statistical or demographic data, for any purpose. This data may be derived from your personal data, but it is not considered personal data under the law as it does not reveal your identity directly or indirectly. For example, we might use your Usage Data to determine the percentage of users accessing a specific website feature.

However, if we combine or link Aggregated Data with your personal data in a way that directly or indirectly identifies you, we will treat the combined data as personal data, which will be used in accordance with this privacy policy. We do not collect any special categories of personal data about you, including information about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, or any other such information.

If we are required by law or have a contract with you that necessitates collecting personal data and you fail to provide the requested data, we may be unable to fulfil the contract that we have with you or are attempting to enter into (for instance, to offer you products or services). If this occurs, we may have to terminate a product or service you have with us. However, we will inform you if this is the case at the time.

YOUR CONSENT

This Privacy Policy governs how Carbon Integration Ltd and its affiliates collect, use and disclose personal information. By accessing or using our website (regardless of where you visit it from), or otherwise providing us with personal information, you agree with the terms of this Privacy Policy as it may be modified from time to time and consent to the collection, use and disclosure of personal information in accordance with the terms of this Privacy Policy. As our business evolves, this Privacy Policy may change, so check back to this page periodically to make sure you understand how your personal information will be treated.

HOW YOUR PERSONAL DATA IS COLLECTED

We gather information from and about you using various methods, including:

Direct interactions:

You may provide us with your Identity and Contact Data by filling out forms or communicating with us through the mail, phone, email, or other means. This includes personal data that you provide when you:

• Apply for our products or services.
• Create an account on our website.
• Subscribe to our services or publications.
• Request marketing materials to be sent to you.
• Participate in a competition, promotion, or survey.
• Provide us with feedback.

Automated technologies or interactions:

We may gather Technical Data about your equipment, browsing actions, and patterns through automated technologies or interactions as you engage with our website.

We collect this personal data using cookies, server logs, and other similar technologies. Additionally, we may obtain Technical Data about you if you visit other websites that use our cookies.

We collect Technical Data regarding your equipment, browsing actions, and patterns through automated technologies or interactions while you are interacting with our website. We gather this personal data using server logs, cookies, and other similar technologies. Moreover, we may receive Technical Data concerning you from other websites that use our cookies. Additionally, we might receive personal data related to you from different third-party sources and public sources as mentioned below:

• Analytics providers such as Google may provide us with Technical Data, and they are based outside the EU.
• Publicly available sources such as Companies House and the Electoral Register that are based inside the EU might provide us with Identity and Contact Data.

HOW WE USE YOUR PERSONAL DATA

We will only utilise your personal data when permitted by law. Typically, we will use your personal data in the following situations:

• When we need to perform the contract that we are about to enter into or have already entered with you.
• When it is necessary for our legitimate interests (or those of a third party), and your interests and fundamental rights do not outweigh those interests.
• When we need to comply with legal or regulatory requirements.

Generally, we do not rely on your consent as the legal basis for processing your personal data, except concerning sending third party direct marketing communications to you through email or text message. You have the right to withdraw your consent to marketing at any time by contacting us.

Purposes for Which we Will Use Your Personal Data

Please find below a detailed description of how we intend to use your personal data, along with the legal bases we rely on to do so. We have also mentioned our legitimate interests, where applicable. Please note that we may process your personal data for more than one lawful ground, depending on the specific purpose for which we are using your data. We have provided information regarding the lawful basis of the processing of such data, including the basis of legitimate interest.

If you require information about the specific legal basis we are relying on to process your personal data, where more than one ground has been listed below, please feel free to contact us.

• To register you as a new customer, we will use your identity and contact information for the purpose of the performance of a contract with you.
• To process and deliver your order, we will use your identity and contact information for the purpose of the performance of a contract with you
• To manage payments, fees and charges, and to collect and recover any monies that may be owed to us, we will use your financial, transaction, marketing and communications data, and this is necessary for our legitimate interests and for the purpose of the recovery of debts that may be due to us.
• To manage our relationship with you, which will include notifying you of any changes to the terms of our privacy policy, or to ask you leave a review or take a survey, we will use your identity, contact, profile, marketing and communications data. The purpose of the use of such information shall be for the performance of a contract with you, where it is required to comply with a legal obligation, or necessary for our legitimate interests (e.g. to keep our records updated and to analyse how customers use our products/services).
• To enable you to partake in a prize draw, competition or to complete a survey, we may use your identity, contact, profile, usage, marketing and communications data. This may for the purposes of the performance of a contract with you or where it is necessary for our legitimate interests, e.g. to examine how customers use our products/services, to develop them and grow our business.
• To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data). For this purpose, your identity, contact, and technical data may be used. This will be necessary for our legitimate interests, such as for running our business, the provision of administration and IT services, network security, to prevent fraud and in the context of business reorganisation or restructuring, or where it is necessary for the purpose of compliance with a legal obligation.
• To deliver advertising and marketing material that is relevant to you, we may use your contact, profile, and usage information. This will be necessary to examine how customers use our products/services, to develop them, grow our business and inform our marketing strategy.
• To use data analytics, and improve our website, products/services, marketing, customer relationships and experiences, we may use your contact, profile, and usage data. This well be necessary for our legitimate interests (e.g. to define customer types for our products and services, to maintain our website, to develop our website and to inform our marketing strategy).
• To make suggestions and recommendations to you regarding products or services that may be of interest to you, we may use your identity, contact, usage, profile and technical data. This will be necessary for our legitimate interests, to develop our products and services and to grow our business.

At Carbon Integration, we believe in giving you the power to control some of the ways in which we use your personal data, especially with regard to marketing and advertising. To this end, we have put in place the following mechanisms for you to exercise this control:

Promotional Offers: 

We may use your data to identify products, services, and offers that we

think may be of interest to you. You will receive marketing communications from us if you have requested information from us, purchased goods or services from us, or previously provided us with your details, and you have not opted out of receiving such marketing.

Opting Out:                  

If you wish to stop receiving marketing messages from us, you can

simply follow the opt-out links on any marketing message sent to you or contact us at any time. Please keep in mind that opting out of marketing messages will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience, or other transactions.

Cookies:                     

You can choose to refuse or accept some or all browser cookies by configuring your browser settings. If you choose to disable or refuse cookies, some parts of our website may not function correctly.

Change of Purpose:   

We will only use your personal data for the purposes for which we collected it, unless we consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will inform you of the legal basis that allows us to do so.

Please note that we may process your personal data, without your knowledge or consent, in compliance with the rules mentioned above, where this is required or legally permitted.

DISCLOSURE OF YOUR PERSONAL DATA

For the purposes set out in the previous section, it may be necessary for us to share your personal data with the following parties:

• Internal parties.
• Third parties to whom we may choose to sell, transfer, or merge parts of our business or assets, or with whom we may seek to merge or acquire new businesses. In the event of such change, the new owners may use your personal data in the same way as described in this privacy policy.

We require all third parties to respect the security of your personal data and comply with the relevant laws. We do not permit our third-party service providers to use your personal data for their own purposes, and we only allow them to process your personal data for specific purposes and in accordance with our instructions.

INTERNATIONAL TRANSFERS

It may be necessary to transfer your data outside of the European Economic Area (EEA). The General Data Protection Regulation (GDPR) places limitations on the transfer of personal data to third-party countries or international organisations outside of the European Union. This is in order to ensure that the GDPR’s level of protection for individuals is not compromised.

To ensure the security of your data, we strive to implement at least one of the following safeguards whenever we transfer your personal data out of the EEA:

• Transfer to countries that the European Commission has approved as providing an adequate level of protection for personal data.
• Use of specific contracts, codes of conduct, or certification mechanisms that have been approved by the European Commission and which are deemed to provide personal data with the same level of protection as in Europe.
• Transfer to US-based providers that are part of the EU-US Privacy Shield, as they have implemented equivalent safeguards.

DATA SECURITY

To safeguard your personal data, we have implemented adequate security measures to prevent its accidental loss, misuse, unauthorised access, alteration, or disclosure. Furthermore, we restrict access to your personal data to only those employees, agents, contractors, and third parties who require it to carry out their job duties. They will only process your personal data according to our instructions and are bound by confidentiality obligations.

We have developed procedures to address any suspected personal data breaches and will inform you and the relevant regulatory body of any breaches where required by law.

DATA RETENTION

We will only keep your personal data for as long as it is necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, or regulatory requirements. To determine the appropriate retention period for personal data, we consider various factors such as the nature, amount, and sensitivity of the data, the potential risk of unauthorised access or disclosure, the purposes for which we process the data, and the possibility of fulfilling such purposes through other means. In certain circumstances, you may request the deletion of your data; please contact us to request further details.

In some cases, we may anonymise your personal data for research or statistical purposes. This means the data can no longer be associated with you, and we may use it indefinitely without further notification to you.

THIRD PARTY LINKS

Our website may contain links to third-party websites, plug-ins, and applications. Enabling those connections or clicking on those links may allow third parties to collect or share data about you. We do not have control over these third party websites and are not accountable for their privacy policies. We advise you to review the privacy policy of every website you visit after leaving our website.

COOKIES

In case you choose to disable or reject cookies, please note that certain parts of this website may not be accessible or function correctly. You can configure your browser to reject all or some of the browser cookies, or to alert you when websites access or set cookies.

YOUR LEGAL RIGHTS

Data protection laws provide you with various rights concerning your personal data, including the right to request access, correction, erasure, restriction, transfer, portability of data, and the right to object to processing. Additionally, where your personal data is processed based on your consent, you have the right to withdraw such consent.

More information on these rights is available at:

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual- rights/

Should you wish to exercise any of the aforementioned rights, please write to us at the abovementioned address. You have the right to access your personal data and exercise any of the other rights free of charge.

However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or refuse to comply with your request.

To confirm your identity and ensure that your personal data is not disclosed to unauthorized individuals, we may require specific information from you.

We may also contact you for further information to expedite our response to your request.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy was last updated on 5^th March 2023.

Carbon Integration may modify our Privacy Policy at our discretion to align with current acceptable practices. We will take reasonable measures to keep users informed about any changes through our website. Your continued use of this website after any modifications to this policy will indicate that you accept our privacy practices and use of personal data. As this Privacy Policy may be updated periodically, we recommend reviewing it each time you provide us with personal information.