Introduction
CarbonTrail Inc. ("CarbonTrail," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our carbon tracking and offset services.
By using CarbonTrail, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Information from Merchants
When you install CarbonTrail on your e-commerce platform, we collect:
- Store name and domain
- Contact email address
- Warehouse/fulfillment location addresses
- Order data (shipping addresses, product weights, order values)
- Billing information for subscription payments
Information from End Customers
When customers interact with the CarbonTrail widget at checkout, we may process:
- Shipping destination (city/region level only)
- Carbon offset opt-in preferences
- No personally identifiable customer information is stored
Automatically Collected Information
- Usage data and analytics
- Device and browser information
- IP addresses (anonymized)
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Calculate carbon emissions for orders
- Process carbon offset purchases
- Generate reports and analytics
- Improve our services and develop new features
- Communicate with you about your account
- Comply with legal obligations
Data Sharing
We may share information with:
- Carbon offset providers (Patch, Cloverly) to process offset purchases
- Payment processors to handle subscription billing
- Service providers who assist in operating our platform
- Legal authorities when required by law
Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Maintain audit trails for carbon offset verification
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
Order emissions data and offset transaction records are retained indefinitely for audit purposes. You may request deletion of your account data at any time.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Object to or restrict certain processing activities
- Data portability (receive your data in a structured format)
- Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@carbontrail.org.
GDPR Compliance
For users in the European Economic Area, we process data in accordance with GDPR requirements. Our lawful bases for processing include contract performance, legitimate interests, and consent.
CCPA Compliance
California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to opt-out of the sale of personal information (though we do not sell personal information).
Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication requirements
- Employee training on data protection
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@carbontrail.org
- Address: CarbonTrail Inc., [Address]
We will respond to your inquiry within 30 days.