Privacy policy

Positive Carbon ("we", "us", or "our") is dedicated to protecting the privacy of our clients, users, and visitors ("you" or "your"). This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you visit our website www.positivecarbon.org (the "Website"), use our app (the "App"), or engage with us through commercial relationships.

By accessing or using our Website and App, or by engaging with us, you agree to the terms of this Privacy Policy. Positive Carbon is located at 60 Baggot Lane, Dublin 4, D04 HK27, Ireland. You can reach us via email at info@positivecarbon.org or by phone at (+3531) 567 2084.

Our Data Protection Officer (DPO) is Mark Kirwan, who can be reached at mark@positivecarbon.org.

This Privacy Policy applies to personal data collected through our Website and App, which is accessible exclusively through existing commercial relationships, and personal data collected offline in the context of our commercial engagements. This policy covers all jurisdictions in which we operate, including but not limited to the European Economic Area (EEA), California, Canada, South Africa, and Brazil.

We may collect and process the following categories of personal data: information you provide directly, such as contact and account information from Website and App usage, and business and financial information from commercial relationships. We also collect data automatically, including usage data, technical data, and data from cookies and similar technologies. Furthermore, we may receive personal data from third parties like analytics providers (Google Analytics, Mixpanel), service providers (Webflow), and publicly available sources.

Your personal data is used for several purposes, including: service delivery and operations (Website and App functionality, account management, service provision); communication and marketing (customer support, promotional communications, surveys); analytics and improvements (performance analysis, research and development); and legal and compliance (regulatory compliance, enforcement). Our legal basis for processing personal data varies by jurisdiction. For EEA residents under GDPR, processing is based on consent, contractual necessity, legal obligation, or legitimate interests. For California residents under CCPA, Canadian residents under PIPEDA, South African residents under POPI, and Brazilian residents under LGPD, specific legal bases and rights apply, as detailed in the "Your Rights" section.

We use cookies and similar tracking technologies to enhance your experience on our Website and App. These include essential, performance, functionality, and targeting cookies. You can manage cookies through your browser settings, though disabling some may affect functionality. We utilise third-party services such as Google Analytics, Mixpanel, and Webflow to enhance our services, and we may engage other service providers for payment processing and email communication. These providers are obligated to protect your personal data.

We may share your personal data with third-party service providers (IT, payment processors, marketing partners) who perform services on our behalf. We may also share data for legal reasons, such as complying with laws or protecting our rights and safety, or in the event of business transfers like mergers or acquisitions. We implement appropriate technical and organisational measures, including encryption, access controls, and regular testing, to protect your personal data. We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal obligations, dispute resolution, and business needs.

Depending on your jurisdiction, you may have various rights regarding your personal data. Under GDPR (EEA residents), these include rights to access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. Under CCPA (California residents), you have rights to know, delete, opt-out of sale, and non-discrimination. PIPEDA (Canadian residents), POPI (South African residents), and LGPD (Brazilian residents) also grant specific rights, such as access, correction, withdrawal of consent, and objection. To exercise your rights, please contact us at info@positivecarbon.org or 60 Baggot Lane, Dublin 4, D04 HK27, Ireland. We may request identity verification for security purposes. You also have the right to lodge a complaint with your local data protection authority.

We do not engage in automated decision-making or profiling that produces legal effects concerning you. Providing personal data is voluntary; however, choosing not to provide certain data may prevent us from entering into commercial relationships, providing access to certain features of our Website or App, or responding to inquiries. Our Website and App may contain links to third-party websites, which have their own privacy policies for which we are not responsible. Our Website and App are not intended for individuals under 16, and we do not knowingly collect data from children under this age.

We may update this Privacy Policy periodically to reflect changes in our practices or for legal or regulatory reasons. Updates will be posted on this page with an updated "Last Updated" date. For material changes, we will notify you via email or through a notice on our Website or App. Your continued use of our Website, App, or services after modifications constitutes your acknowledgment and agreement to the modified policy.

For any questions, comments, or concerns about this Privacy Policy or our practices, please contact us at info@positivecarbon.org, (+3531) 567 2084, or 60 Baggot Lane, Dublin 4, D04 HK27, Ireland. You can also contact our Data Protection Officer, Mark Kirwan, at mark@positivecarbon.org.

Additional notices for California, Canadian, South African, and Brazilian residents are provided. We do not sell personal information as defined under the CCPA. Your personal information may be transferred outside of Canada. We process personal information in accordance with POPI in South Africa and LGPD in Brazil. In the event of a data breach posing a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority. This Privacy Policy is governed by the laws of Ireland, and in case of inconsistency, the English version shall prevail. Your privacy is important to us, and we are committed to safeguarding your personal data and ensuring transparency. Thank you for trusting Positive Carbon.