Privacy notice.

Last updated: 27 August 2026

1. Who we are

CarbonFitt Ltd is the controller of personal information described in this notice. We are registered in England and Wales under company number 16727291. Our registered office is 1 Milland Cottages, Church Road, Herstmonceaux, Hailsham, England, BN27 1QJ.

Privacy enquiries may be sent to jeremy@carbonfitt.com.

2. Information we may collect

• Identity and business-contact information, including name, role, organisation, email address and telephone number.
• Information supplied in an enquiry, proposal, pilot discussion or business correspondence.
• Technical information required to protect, operate and diagnose the website, such as IP address, device, browser, access time and security logs.
• Project information you choose to provide when discussing a potential CarbonFitt application.

Do not send confidential project information through a general enquiry unless CarbonFitt has agreed an appropriate confidential channel.

3. How we obtain information

We obtain information directly from you when you contact us, from representatives of your organisation, from legitimate public business sources and through necessary website hosting and security services.

4. Why we use it and our lawful bases

• Enquiries and business relationships: our legitimate interests in responding, developing partnerships and administering business activity.
• Pre-contract discussions and contracts: taking steps at your request and performing agreed obligations.
• Security and administration: our legitimate interests in protecting the website, systems, intellectual property and users.
• Legal compliance: meeting legal, regulatory, tax, accounting or law-enforcement obligations.
• Optional marketing: consent where required, or another lawful basis permitted by applicable direct-marketing rules.

5. Who we may share information with

We may share information only where necessary with hosting and information-technology providers, professional advisers, project partners acting under appropriate duties, public authorities where legally required, and a purchaser or investor conducting legitimate due diligence subject to suitable safeguards.

BioTrack is a separate platform. Project information will not be transferred into BioTrack automatically; the project scope, access and responsibilities must be defined.

6. International transfers

Some service providers may process information outside the United Kingdom. Where this occurs, CarbonFitt will use an applicable lawful transfer mechanism and proportionate contractual or technical safeguards.

7. Retention

We retain enquiry and business records only for as long as reasonably required for the relevant purpose, legal obligations, dispute management and protection of legitimate interests. Routine unsuccessful enquiries will normally be reviewed for deletion after 24 months. Contract, finance and material project records may be retained for longer where law, assurance or the project evidence plan requires it.

8. Your rights

Depending on the circumstances, you may have rights to access, correct or erase personal information; restrict or object to processing; receive portable information; and withdraw consent. These rights are not absolute.

9. Complaints

Please contact CarbonFitt first so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

10. Changes

We may update this notice when the website, enquiry process, service providers or legal requirements change. The date above identifies the current version.

The enquiry form records the information submitted so CarbonFitt can assess and respond to the proposed project. This notice must be reviewed again before adding analytics, marketing cookies, customer accounts or an automatic public BioTrack integration.