Legal
Privacy Policy
How Carbon Verification Limited collects, uses, stores and protects your personal data when you interact with our website or engage our verification services.
Policy Statement
Carbon Verification Limited (“we”, “us”, “our”) is committed to protecting the privacy of individuals whose personal data we process. This Privacy Policy explains how we collect, use, store and protect your personal data when you interact with our website, submit enquiries, or engage our verification services.
Carbon Verification Limited is a company registered in England and Wales (Company No. 07406639) with its registered office at 27 Old Gloucester Street, London. We are the data controller for the personal data described in this policy.
1. Information We Collect
We may collect and process the following categories of personal data:
Information you provide directly. When you complete our quote request form, contact us by email or telephone, or engage our verification services, you may provide: your name, job title, work email address, telephone number, company or organisation name, and details about your organisation’s size, sector and verification requirements.
Information collected automatically. When you visit our website, we may collect technical data including your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and date and time of access. This data is collected through server logs and, where applicable, cookies or similar technologies.
Information received from third parties. We may receive your contact details from professional referrals, industry events, or publicly available business directories where you have made your professional contact information available.
2. How We Use Your Information
We process your personal data for the following purposes:
To respond to your enquiries and provide quotes. When you submit a quote request or contact us, we use your information to assess the scope of your verification needs and provide a tailored proposal. The legal basis for this processing is our legitimate interest in responding to business enquiries, or the performance of a contract where you have engaged our services.
To deliver our verification services. Where you or your organisation engages us for verification, we process the personal data of your designated contacts as necessary for the performance of our contract with you. This may include the names, roles and contact details of individuals involved in the verification process.
To administer our business relationship. We use your information to manage our contractual relationship, issue invoices, maintain records required for professional and regulatory compliance, and communicate with you about matters relating to our services. The legal basis is the performance of a contract and our legitimate interests in business administration.
To comply with legal and professional obligations. As an independent verification body operating under ISO 14064‑3, we are required to maintain records of our verification engagements, including the identity of client contacts. We may also process personal data to comply with our obligations under company law, tax legislation, and professional standards. The legal basis is compliance with a legal obligation or our legitimate interests in maintaining professional standards.
To improve our website. We use technical data collected automatically to monitor website performance, identify technical issues, and improve the user experience. The legal basis is our legitimate interest in maintaining and improving our website.
We do not use your personal data for automated decision-making or profiling.
3. Cookies
Our website uses a minimal number of cookies necessary for its operation. We do not use advertising cookies, social media tracking cookies, or third-party analytics platforms that track individual users across websites.
If we introduce any non-essential cookies in future, we will update this policy and provide you with clear information and the ability to consent or refuse before any such cookies are placed.
4. Who We Share Your Data With
We do not sell, rent or trade your personal data to third parties.
We may share your personal data with the following categories of recipient, only to the extent necessary for the stated purpose:
Service providers. We may share data with providers who support our business operations, including our website hosting provider, email service provider, and accounting software provider. These providers process data only on our instructions and are bound by contractual obligations to protect your data.
Professional advisors. We may share data with our solicitors, accountants, or insurers where necessary for the management of our business.
Regulatory or legal authorities. We may disclose personal data where required by law, regulation, legal process, or enforceable governmental request.
We do not transfer personal data outside the United Kingdom unless adequate safeguards are in place in accordance with the UK GDPR.
5. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose for which it was collected:
Enquiries that do not proceed to engagement. We retain your contact details and enquiry information for up to 24 months from the date of your last contact, after which it is securely deleted unless you ask us to retain it.
Verification engagement records. We retain records relating to verification engagements, including client contact details, for a minimum of 7 years from the date of the verification opinion. This retention period reflects our professional obligations, the potential for regulatory review, and the limitation periods applicable to professional services under English law.
Website technical data. Server logs and technical data are retained for up to 12 months.
6. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
Right of access. You may request a copy of the personal data we hold about you.
Right to rectification. You may request that we correct any inaccurate or incomplete personal data.
Right to erasure. You may request that we delete your personal data, subject to our legal and professional retention obligations.
Right to restrict processing. You may request that we restrict the processing of your personal data in certain circumstances.
Right to data portability. Where processing is based on consent or contract performance, you may request your data in a structured, commonly used, machine-readable format.
Right to object. You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at privacy@carbonverification.org. We will respond within one month.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls on our systems, and secure storage of physical records.
No method of electronic transmission or storage is completely secure. While we take all reasonable steps to protect your personal data, we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by updating the effective date at the bottom of this page. We encourage you to review this policy periodically.
9. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:
Data Controller: Carbon Verification Limited
Email: data@carbonverification.org
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113
Document reference: CVL-POL-PRV-001
Version: 7.0
Effective date: 1st April 2026
Review date: 31st March 2027
Approved by: Glenn Wilkinson, Technical Director, Carbon Verification Limited