Privacy notice

Who we are

Carbon Proof Ltd is registered in England & Wales, company number 17183786. Registered office: 4th Floor Silverstream House, 45 Fitzroy Street, Fitzrovia, London, United Kingdom, W1T 6EB. Carbon Proof Ltd is the data controller for the personal data described in this notice. Registered with the Information Commissioner's Office under registration reference ZC198391.

For any privacy question, or to exercise any of the rights set out below, contact us at info@carbonproof.co.uk or through our contact page.

What we collect

When you contact us, we process the details you provide (such as your name, company name, email address, phone number and message) to respond to your enquiry. Providing these details is voluntary. The form marks the fields we need; without them we cannot reply. We use cookieless website analytics that do not identify you and set no cookies, so this site does not require a cookie-consent banner. When you visit the site, our hosting provider processes technical connection data, including your IP address, to deliver the pages you request and to protect the site from abuse.

When you contact us through the form, your submission passes through an automated spam screen before it reaches us. The screen checks two signals: whether a form field that is invisible to human visitors has been left empty, and how long the page was open before you submitted. It does not read the content of your message.

If the screen identifies a submission as automated, it is not delivered to us. The confirmation shown on the form does not distinguish between a delivered and a discarded submission – so if you send an enquiry and do not hear back, please write to us directly at info@carbonproof.co.uk. We carry out no other processing that could produce legal or similarly significant effects through automated means alone.

Lawful basis and retention

We process the personal data you provide only to respond to your enquiry and manage our correspondence with you. Our lawful basis is legitimate interests, Article 6(1)(f) of the UK GDPR: the interest is the conduct of our business, in responding to enquiries from prospective clients. We do not use your details for marketing, and we do not sell them. Connection data is processed on the same lawful basis, for the interest of operating and securing this website.

We keep enquiry correspondence only for as long as necessary to respond to and manage the enquiry, and delete it when it is no longer needed. If we go on to work together, correspondence is retained under the terms of our client engagement instead.

Who else handles your information

We use third-party website hosting and email providers, who process this information only as our processors and on our instructions. We do not share your information with anyone else.

Some of our providers may process this information outside the United Kingdom. Where that happens, the transfer is protected by safeguards permitted under UK data protection law.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, and may ask us to restrict how we use it. Because we rely on legitimate interests, you also have the right to object to our processing at any time: we will stop unless we can show compelling legitimate grounds that override your interests, rights and freedoms. You may complain to the Information Commissioner's Office (ico.org.uk).