Privacy Notice

Last updated: 9 October 2026

This notice explains how Carbon Verify handles personal information. The data controller is Jesse Seaward, trading as Carbon Verify, Unit 20 Woolton Farm, Bekesbourne Lane, Canterbury, CT4 5EA, United Kingdom. For privacy questions or rights requests, email hello@carbonverify.co.uk.

Carbon Verify information

Figures entered in the calculator, evidence references, imported files and generated documents are processed in your browser. Carbon Verify does not upload that information to its own database. Browser storage is used so work can be restored on the same browser. Clearing the site's browser data removes that local copy, so export anything you need first.

This includes additional-source records and any supplier or separately calculated emissions figures, their methods, dates and evidence references. An evidence reference is a filename, invoice number or note—not an uploaded attachment. Original bills, surveys and calculation files must be retained separately. The guided demo uses locked fictional examples; its review controls do not create your business's own reporting project.

Carbon Verify project data also includes optional organisation or adviser logos, preparer details and document appearance settings. These are processed locally and retained with the project. Save project file downloads a separate .carbonverify snapshot containing the editable work, but no licence key or copies of the original bills. Later browser changes do not update that file. Project files are not encrypted by Carbon Verify: keep them securely and consider their contents before sharing. See saving and opening projects.

Licence information

When a licence is activated or checked, the licence key and a randomly generated device activation identifier are sent to Lemon Squeezy's licensing service. This is necessary to provide the purchased licence, enforce its activation limit and check subscription validity. Carbon-footprint activity data is not included in those requests.

Purchases

Purchases take place on Lemon Squeezy's hosted checkout. Lemon Squeezy acts as merchant of record and handles payment, billing and subscription information. Carbon Verify does not receive card details. See Lemon Squeezy's privacy notice.

Website analytics and support

• On public product, guide and legal pages, Google Analytics is loaded only after you choose Allow analytics. It helps us understand page visits and basic interactions such as scrolling, downloads, outbound links and selected links to the Carbon Verify apps or checkout.
• The Carbon Verify apps at /app/, /try/, /cbam/app/ and /secr/app/ do not load Google Analytics. Calculator inputs, imported files, business records, licence keys and generated documents are not sent to Google Analytics.
• When allowed, Analytics may receive a random browser identifier, the page path without its query or fragment, the referring Carbon Verify path without its query or fragment or only an external site's origin, a broad location derived from the connection, and browser or device information. Advertising storage, Google Signals and ad-personalisation signals are disabled in our configuration.
• The hosting provider may create routine security and access logs containing an IP address, browser details, requested page and timestamp.
• If you email support, the message and contact details are used to answer the request and maintain an appropriate business record.

Purposes, legal bases and retention

• Licence and purchase administration: performance of the contract and legitimate interests in preventing licence misuse.
• Support correspondence: performance of the contract and legitimate interests in supporting and improving the service.
• Hosting security logs: legitimate interests in maintaining a secure and reliable website.
• Optional public-site analytics: your consent. You can decline before Analytics loads and change your choice at any time through Cookie settings.

Support and transaction records are kept only as long as reasonably required for support, accounting, tax, fraud prevention and legal obligations. Hosting and Lemon Squeezy retention periods are controlled by those providers. Locally stored calculator data remains until the browser, user or browser policy deletes it.

International processing

Google, Lemon Squeezy and hosting providers may process personal information outside the UK. Their privacy notices explain the safeguards they use for international transfers. See Google's privacy policy.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase or restrict personal information, object to certain processing, and receive portable data. Email the address above to make a request. You may also complain to the Information Commissioner's Office.

Local storage and cookies

The app uses browser local storage for saved calculator state, a random device identifier and licence details. These are needed for the requested app functions and are not used for behavioural advertising.

Public pages use the local-storage item carbonVerify.analyticsConsent.v1 to remember whether you allowed or declined Analytics. If you allow it, Google Analytics may set cookies including _ga and _ga_* for up to 13 months. If you decline, the Google tag is not requested and Analytics cookies are not set by Carbon Verify. Use the Cookie settings button on a public page to change your choice; withdrawing consent removes the Analytics cookies available to this site and reloads the page without the Google tag.

Lemon Squeezy may use its own storage or cookies when its checkout is opened; those are governed by Lemon Squeezy's notice.

Changes

This notice may be updated when the service, suppliers or legal requirements change. The date at the top shows the current version.