Privacy Policy
Version 1.0, effective [effective date]. Also see our Terms of Service and Disclaimer.
About this policy
This Privacy Policy explains how [Carbon Passport Pte. Ltd.] (Carbon Passport, we, us) collects, uses, discloses and protects personal data when you use our website and the Carbon Passport app. We comply with Singapore's Personal Data Protection Act 2012 and, where they apply to you, the data protection laws of the countries where our clients operate.
Version 1.0, effective [effective date].
1. Personal data we collect
- Account and contact data: name, job title, work email, phone number and preferred language.
- Enquiry data: information you send through our website forms.
- Business documents: invoices, bills, production and purchase records and buyer requests. These are mainly business data, but may contain personal data such as names, signatures or contact details of staff and counterparties.
- Payment data: the name and email of the payer and payment status. Card details are handled by our payment provider and are not stored by us.
- Technical data: log-in times, device and browser information, and records of the terms you accepted.
2. How we use it
- to provide the Service: review documents, calculate results, prepare and send submissions;
- to communicate with you by email and in the app;
- to process payments and keep accounting records;
- to keep the Service secure, prevent fraud and keep records of acceptance and approvals; and
- to comply with legal obligations.
We do not sell personal data, and we do not use it for third-party advertising.
3. Consent
Where required, we rely on your consent, which you give when you create an account, submit a form or tick an acceptance box. You may withdraw consent at any time by emailing hello@carbonpassport.ai. If you do, we may be unable to continue providing the Service.
4. Who we share it with
- the buyers you authorise in the app;
- service providers who help us operate the Service, such as hosting, email and payment providers, under contracts requiring them to protect the data;
- a verifier you ask us to share data with;
- professional advisers such as lawyers and accountants, under confidentiality; and
- authorities where required by law.
5. Transfers outside Singapore
Your data may be processed outside Singapore, for example by our service providers or when sent to buyers in the EU or UK at your request. Where we transfer personal data, we take steps to ensure it receives a standard of protection comparable to that under Singapore law.
6. How long we keep it
We keep account data while your account is open. We keep documents, results and acceptance records for up to 7 years after the end of the reporting period they relate to, because buyers, verifiers and authorities may ask about them later. After that, we delete or anonymise them, unless the law requires longer.
7. Security
We use reasonable security measures, including encryption in transit, access controls limited to staff who need access, and logging of approvals. No system is completely secure, and we will notify you and the relevant authorities of a data breach where the law requires it.
8. Your rights
You may ask to access or correct your personal data, or to withdraw consent, by emailing hello@carbonpassport.ai. We will respond within the time required by law. We may need to verify your identity first.
9. Cookies
Our website does not use advertising or tracking cookies. The app uses your browser's storage to keep you signed in and save your progress.
10. Contact and changes
Our Data Protection Officer can be contacted at hello@carbonpassport.ai. We may update this policy and will post the new version with its effective date. Material changes will be notified by email or in the app.