Privacy Policy

This Privacy Policy explains how CarbonSettle Solutions LLP (“CarbonSettle”, “we”, “us” or “our”) handles information about you when you visit carbonsettle.com, contact us, or use our managed CBAM (Carbon Border Adjustment Mechanism) compliance service.

CarbonSettle is an India-based CBAM compliance firm serving exporters of steel, aluminium, cement, fertilizer and related goods to the European Union. For the purposes of applicable data-protection law, CarbonSettle is the data controller of the information described in this policy.

2.1 Information you provide to us

• Contact & enquiry details — your name, company name, work email, phone/WhatsApp number and message when you fill in a form, request a free CBAM report or savings check, or otherwise get in touch.
• Client onboarding & factory data — for clients, the production and operational data needed to calculate emissions and build your CBAM report (e.g. production volumes, electricity and fuel bills, process logs, supplier inputs, photos and documents you share in any format).
• Correspondence — the content of emails, WhatsApp messages, calls and other communications you have with us.

2.2 Information we collect automatically

• Usage & device data — pages viewed, referring links, approximate location, browser and device type, and similar analytics data, collected via cookies and similar technologies (see Section 5).
• Email & message engagement — whether an email or message we send was delivered, opened, or its links clicked, so we can measure and improve our communications.

2.3 Information from other sources

We may collect limited business-contact information (such as company name, role and work email) from public sources, business directories and industry listings in order to reach exporters who are likely subject to CBAM. We use this only for relevant business-to-business outreach, and you can opt out at any time (see Section 10).

• Provide, operate and deliver our CBAM compliance service and reports.
• Respond to your enquiries and provide customer support.
• Send you service-related communications, and — where permitted — relevant information about CBAM and our offer.
• Measure and improve our website, communications, and the accuracy of our emission-calculation methods.
• Maintain the security and integrity of our systems.
• Comply with legal obligations and enforce our terms.

Where data-protection laws such as the EU/UK GDPR apply, we rely on the following legal bases:

• Contract — to provide the service you have requested or entered into with us.
• Legitimate interests — to run and improve our business, secure our systems, and carry out relevant business-to-business outreach, balanced against your rights.
• Consent — where required (for example, certain cookies or marketing messages). You may withdraw consent at any time.
• Legal obligation — where we must process data to comply with the law.

We use cookies and similar technologies to run the site, remember preferences, and understand how the site is used. This includes first-party analytics and third-party analytics providers (such as Google Analytics and PostHog) that help us measure traffic and improve the experience.

You can control cookies through your browser settings — blocking some may affect how parts of the site work. Where required by law, we ask for your consent before setting non-essential cookies.

When you contact us or agree to hear from us, we may communicate with you by email and via the WhatsApp Business Platform (provided by Meta). Messages sent through WhatsApp are processed by Meta in line with its own terms and privacy policy, in addition to this policy.

• We send WhatsApp messages using pre-approved templates and personalise them with your name, company and a link to your tailored CBAM materials.
• We record delivery, read and reply status so we can respond and manage the conversation.

We do not sell your personal information. We share it only as needed to run our service:

• Service providers — vetted vendors who process data on our behalf to host our site and database, send email and WhatsApp messages, and provide analytics. They may only use the data to provide services to us.
• Your EU buyer’s declarant — where you engage us for a CBAM report, and only as needed to deliver and hand off that report on your behalf.
• Legal & safety — where required by law, regulation or legal process, or to protect our rights, users and systems.
• Business transfers — in connection with a merger, acquisition or reorganisation, subject to this policy.

We keep personal data only for as long as needed for the purposes described here — to provide the service, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it. Retention periods vary by data type and legal requirement.

We use reasonable technical and organisational measures to protect your information, including access controls, encryption in transit, and restricting data access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work to protect your data and to respond appropriately if an incident occurs.

Depending on where you live, you may have the right to access, correct, update, delete, or restrict how we use your personal data, to object to certain processing, and to data portability. You can also:

• Unsubscribe from marketing emails using the link in any such email.
• Reply STOP to opt out of WhatsApp messages.
• Adjust cookie preferences in your browser.

To exercise any of these rights, email us at compliance@carbonsettle.com. We will respond within the timeframe required by applicable law. You also have the right to complain to your local data-protection authority.

We operate from India and work with clients and buyers in the EU and elsewhere. Your information may be processed in countries other than your own, whose data-protection laws may differ. Where required, we put appropriate safeguards in place for such transfers.

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the site or services after an update means you accept the revised policy.

If you have questions about this policy or how we handle your data, contact our compliance desk: