My Account
Contact Us

Privacy Policy

 

Privacy Policy

 

 

1. Who We Are

Carbon Heroes Ltd (“Carbon Heroes”, “we”, “us”, “our”) is a UK-based company headquartered at 20-22 Wenlock road, London N1 7GU United Kingdom. We provide a digital platform that enables businesses and individuals to sponsor local authority–managed urban trees.

We are committed to protecting your personal data and ensuring your privacy, in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant UK privacy laws.

2. Data We Collect

We collect only the data necessary to deliver our services. This may include:

 

    • Identity & Contact Data: name, organisation, job title, email address, phone number, billing details.

    • Account Data: login credentials, sponsorship activity, certificates generated.

    • Transaction Data: payment history, invoices, and receipts.

    • Technical Data: IP address, browser type, device type, cookies, and analytics.

    • Communication Data: correspondence with us via email, phone, or the platform.

We do not collect sensitive personal data unless explicitly required and consented to.

3. How We Use Your Data

Your personal data is used to:

 

    • Provide access to our platform and services.

    • Process sponsorships, issue certificates, and maintain the tree sponsorship registry.

    • Communicate with you about your sponsorship, reporting, and updates.

    • Comply with our legal, regulatory, and contractual obligations.

    • Improve our platform through anonymised analytics.

    • (Where consent is given) send you marketing or updates about our services.

We will never sell your data to third parties.

4. Lawful Basis For Processing

We process your data under one or more of the following lawful bases:

Consent: where you have opted-in to marketing or non-essential cookies.

Contractual necessity: to provide services you request (e.g. processing sponsorships, providing reports).

Legitimate interests: to maintain platform security, improve services, and communicate with users.

Legal obligation: to comply with tax, regulatory, or audit requirements.

5. Sharing Your Data

4.1 How we calculate
We may share your personal data with:

 

    • Local Authorities (where you sponsor their trees, for reporting and transparency).

    • Payment processors (e.g. Stripe, PayPal) to process secure transactions.

    • IT and hosting providers (e.g. WordPress Engine) who maintain our secure platform.

    • Regulators, auditors, or legal authorities where required by law.

All third-party service providers are contractually bound to comply with GDPR and handle your data securely.

5. Use of Certificates and Communications

5.1 You may use our Certificates and metrics in:

 

    • public sector tender responses;

    • ESG, CSR and annual reports; and

    • related marketing materials about your environmental and social impact,

    • provided that you do so in a way that is accurate, not misleading and consistent with these Terms.

5.2 You must not:
a) Present our sponsorship as the purchase of carbon credits or offsets;
b) Claim that our sponsorship alone makes your organisation “net zero”, “carbon neutral” or similar;
c) Over-claim health, environmental or social outcomes beyond what is supported by our documentation;
d) Imply that Carbon Heroes guarantees you will win any tender or contract;
e) State or imply that the monetary valuation of air pollution removal is set, mandated or endorsed by government, an external standards body or a third-party certification scheme – it is based on a proprietary Carbon Heroes proxy metric;
f) Suggest that all monetised ecosystem values are derived from the same type of external standard, where this is not the case (for example by presenting the proprietary pollution metric as if it shared the same external standard basis as CO₂ and greenspace).

6. International Transfers

6.1 Prices are shown exclusive of VAT unless stated otherwise. VAT will be added where applicable.

6.2 Payment terms (e.g. “due on order” or “30 days from invoice”) will be specified on the order page or proposal and form part of these Terms.

6.3 Refunds
Because we commit funds quickly to local delivery partners and Local Authorities, sponsorship packages are generally non-refundable once we have accepted your order and begun allocation. Any exceptions will be clearly stated in your order or agreed in writing.

7. Data Retention

We will keep your personal data only as long as necessary:

Technical and analytics data: anonymised or deleted after 24 months.

Sponsorship and account data: retained for the life of your account + 6 years (to meet legal and accounting requirements).

Marketing data: retained until you withdraw consent.

8. Your Rights

Under UK GDPR, you have the right to:

 

    • Access your personal data.

    • Rectify inaccurate or incomplete data.

    • Request erasure of your data (“right to be forgotten”).

    • Restrict or object to processing of your data.

    • Data portability (receive a copy in machine-readable format).

    • Withdraw consent to marketing or non-essential cookies at any time.

Requests can be submitted via email: contact@carbon-heroes.com.

9. Data Security

We take data security seriously:

Encryption of personal data in transit (SSL/TLS) and at rest.

Platform hosted securely with WordPress Engine, with daily backups.

Access to data restricted to authorised staff under strict role-based access controls.

Commitment to ISO 27001 certification in 2026 for best-practice information security management.

Encryption of personal data in transit (SSL/TLS) and at rest.

10. Cookies and Tracking

We use cookies to:

 

    • Enable platform functionality.

    • Collect anonymised analytics to improve user experience.

    • (With consent) deliver targeted marketing.

You can manage your cookie preferences at any time via your browser or our cookie banner.

11. Complaints

If you are unhappy with how we handle your data, please contact us at contact@carbon-heroes.com.

You also have the right to lodge a complaint with the UK regulator:
Information Commissioner’s Office (ICO)
www.ico.org.uk | Tel: 0303 123 1113

12. Policy Review

This policy will be reviewed annually, or sooner if required by changes in law, regulation, or our business practices.