Privacy Policy

Privacy Policy

Last updated: 09/12/25
Owner & Data Controller: RfM Business Consulting Ltd
Website: www.carbonnow.co.uk

CarbonNow (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you engage with us, including through our website, services, and communications.

We act as an independent Data Controller under the UK General Data Protection Regulation (UK GDPR).

1. Who we are

RfM Business Consulting Ltd
Registered in: United Kingdom
Address: Unit 1, Guest House Farm, Runshaw Lane, Euxton, Chorley PR7 6HD
Email: hello@carbonnow.co.uk

We determine the purposes and means of processing the personal data we collect when delivering our carbon audits, consultancy services, and website interactions.

2. How to contact us

For any privacy questions or requests, contact:

Data Protection Officer
RfM Business Consulting Ltd
Unit 1 Guest House Farm

Runshaw Lane

Euxton

Chorley

PR7 6HD

Email: hello@carbonnow.co.uk

3. What personal data we collect

We collect personal data in the following categories:

A. Data you provide directly

• Name

• Job title / role

• Business name and contact details

• Email address and telephone number

• Information necessary to perform carbon audits (e.g., fuel usage, utility data, travel records, business operations data)

B. Data collected automatically through our website

• IP address

• Browser type and device information

• Pages visited, links clicked, time spent on site

• Cookies and tracking data (see our Cookie Policy)

C. Marketing and communication preferences

• Newsletter and marketing subscription data

• Consent records

• Interaction with marketing campaigns

D. Financial information

(Only where necessary to process payments)

• Transaction details

• Payment confirmations (handled securely via third-party processors)

We do not collect special category data unless explicitly provided for a clear purpose.

4. How we use your personal data

We process your data for the following purposes and lawful bases:

A. To deliver our services (UK GDPR: Article 6(1)(b) – Contract)

• Conducting carbon audits

• Communicating with you about projects

• Preparing reports, assessments, recommendations

B. To manage our business (Article 6(1)(f) – Legitimate Interests)

• Improving our services and customer experience

• Analysing website performance

• Internal business reporting

• Preventing fraud and maintaining security

C. To send marketing communications (Article 6(1)(a) – Consent)

• Newsletters

• Service updates

• Events

• Relevant offers
  You may withdraw consent at any time.

D. To meet legal obligations (Article 6(1)(c))

• Record keeping

• Responding to lawful requests

• Financial compliance

5. Cookies & tracking

We use cookies to improve your experience and analyse site usage.
You can manage cookie preferences at any time.
Please refer to our separate Cookie Policy for full details.

6. Who we share your data with

We only share your data when necessary and lawful.

A. Professional service providers

• IT providers

• Email delivery systems

• Analytics tools

• Payment processors
  (Each bound by confidentiality and data protection commitments.)

B. Partners or third parties assisting in service delivery

(e.g., tools used to process emissions data)

C. Social media platforms (only with your marketing consent)

Such as Facebook Custom Audiences.

D. Legal and regulatory bodies

Where required by law, or to protect the rights and safety of CarbonNow or others.

We do not sell your personal data.

7. International transfers

If we transfer data outside the UK, we ensure one of the following safeguards is applied:

• UK adequacy regulations

• Standard Contractual Clauses (SCCs)

• Equivalent approved mechanisms

We will inform you if such transfers occur.

8. How long we keep your data

We retain personal data only for as long as necessary for the purposes described.

Typical retention periods:

• Client project data: 7 years

• Financial & tax records: 6 years (legal requirement)

• Website analytics: 26 months

• Marketing data: until you withdraw consent

Data may be anonymised for research or reporting purposes.

9. How we protect your data

We use industry-standard security measures, including:

• SSL encryption

• Access controls and role-based permissions

• Secure servers and encrypted storage

• Staff confidentiality agreements

• Regular security reviews

Where passwords are required, you must keep them confidential.

10. Your rights under UK GDPR

You have the right to:

• Access your data

• Request correction

• Request erasure

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent (for marketing or other consent-based activity)

To exercise your rights, email: hello@carbonnow.co.uk

We will respond within one month.

11. Complaints

You may complain directly to us using the contact details above.

You also have the right to contact the UK regulator:

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk

12. Changes to this policy

We may update this Privacy Policy from time to time.
Any changes will be posted on this page with a new “Last updated” date.