Introduction
At CarbonCross, we are committed to protecting and respecting your
privacy. This Privacy Policy explains how we collect, store, and use
personal data in compliance with UK data protection legislation,
including the Data Protection Act 2018 (DPA 2018) and the General Data
Protection Regulation (UK GDPR).
By using our website and services, you agree to the terms outlined in
this Privacy Policy. If you do not agree, please refrain from using
our services.
Information We Collect
-
Information provided by you: Such as your name,
email address, phone number, and any other information you submit
via forms on our website.
-
Technical data: Including IP address, browser type,
version, time zone settings, and operating system.
-
Usage data: Information about how you interact with
our website, such as pages viewed, and time spent on the site.
How We Use Your Data
-
To provide our services: Responding to your
inquiries, processing requests, and delivering services as per our
contractual obligations.
-
Improvement of our website: To analyze how users
engage with our site and improve our services.
-
Marketing and communication: Sending you
newsletters and promotional content, subject to your consent under
the Privacy and Electronic Communications (EC Directive) Regulations
2003.
-
Legal obligations: We may process your data to
comply with our legal obligations, including those under the
Companies Act 2006 and other applicable legislation.
Legal Basis for Processing
-
Consent: If you have given clear consent for us to
process your personal data for specific purposes.
-
Contractual obligation: When processing your data
is necessary for the performance of a contract with you, as outlined
in Article 6(1)(b) of the UK GDPR.
-
Legal obligation: When we are required to process
your data to comply with a legal obligation, as per Article 6(1)(c)
of the UK GDPR.
-
Legitimate interest: When it is necessary for our
legitimate interests or the legitimate interests of a third party,
provided your fundamental rights do not override those interests,
under Article 6(1)(f) of the UK GDPR.
Data Sharing
We do not sell or trade your personal data. However, we may share your
information with:
-
Service providers: Third-party vendors assisting us
in operating our website and providing services, in line with the
Data Protection Act 2018.
-
Legal requirements: When required to do so by law,
such as under the Police and Criminal Evidence Act 1984 (PACE) or
the Proceeds of Crime Act 2002.
Data Security
We implement appropriate security measures, including encryption and
access controls, in compliance with the UK GDPR and the DPA 2018, to
protect your personal data against unauthorized access, alteration,
disclosure, or destruction.
Retention of Data
We will retain your personal data only for as long as is necessary to
fulfill the purposes outlined in this Privacy Policy, in accordance
with the principle of data minimization under Article 5(1)(e) of the
UK GDPR.
Your Rights
Under the UK GDPR, you have the following rights:
-
Access: The right to request access to the personal
data we hold about you, under Article 15 of the UK GDPR.
-
Rectification: The right to request correction of
inaccurate or incomplete data, under Article 16 of the UK GDPR.
-
Erasure: The right to request the deletion of your
personal data, subject to certain conditions, as per Article 17 of
the UK GDPR.
-
Restriction of processing: The right to request the
restriction of processing under certain conditions, as per Article
18 of the UK GDPR.
-
Data portability: The right to receive your
personal data in a structured, commonly used, and machine-readable
format, as per Article 20 of the UK GDPR.
-
Objection: The right to object to the processing of
your data under Article 21 of the UK GDPR.
To exercise any of these rights, please contact us at
legal@carbon-cross.com.
You also have the right to lodge a complaint with the Information
Commissioner's Office (ICO), the UK's supervisory authority for data
protection issues (www.ico.org.uk).
Cookies
We use cookies and similar tracking technologies to enhance your
experience on our website. For more information on how we use cookies,
please refer to our Cookie Policy, in compliance with
the Privacy and Electronic Communications (EC Directive) Regulations
2003.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes
in our practices or relevant laws, including the Data Protection Act
2018 and UK GDPR. Any updates will be posted on this page, and we
encourage you to review it regularly.