Summary
- We collect your email only if you subscribe, download our checklist, send an enquiry or contact us.
- Ads and analytics cookies run only with your consent in the EEA, UK and Switzerland.
- You can change your choice anytime via Cookie settings at the bottom of every page.
1. Who we are
HowToBuyCarbonCredits.com is operated by Agochar Tech LLP, Rajkot, India, which also runs BuyCarbonOffsets.org. Agochar Tech LLP decides how and why your personal data is used on this site (under the GDPR and UK GDPR it is the “controller”; under India’s Digital Personal Data Protection Act, 2023 it is the “Data Fiduciary”Source 3).
To ask about your data, use our contact form.
2. What we collect
| Data | Why | Kept for |
|---|---|---|
| Email, and first name if you give it | Sending The Carbon Market Brief newsletter | As long as you stay subscribed |
| Sending the buyer’s checklist you asked for, and related emails | As long as you stay on that list | |
| Name, email, topic and message | Replying to your message through the contact form | As long as needed to deal with your message |
| Name, company, email, country, estimated tonnes, timeline, project preferences and message | Answering your corporate enquiry (sent to the BuyCarbonOffsets.org team) | As long as needed to answer and follow up on your enquiry |
| Usage data | GA4, Clarity (with consent) | As long as set in each tool’s retention settings |
With each form we also record the page you sent it from, any campaign tags in the link you followed (UTM parameters), whether you agreed to marketing emails, and the date and time.
We don’t ask for payment details, and we don’t sell your personal data.
Data collected automatically
- Security and spam protection. Our forms use Cloudflare Turnstile, which collects signals such as your IP address and browser details to check that you’re not a botSource 8. Each form also has a hidden spam trap and a limit on how many times it can be sent from one address.
- Analytics. With your consent where it’s required, Google Analytics 4 and Microsoft Clarity record how pages are used, such as pages viewed, clicks and scrolling. We set Clarity to mask what you type into forms and calculators.
- Server and network logs. Our hosting provider and Cloudflare process technical data such as IP addresses to deliver pages and protect the siteSource 7.
Our calculators run in your browser. The footprint calculator keeps your answers in your browser’s session storage so they survive a page reload; they aren’t sent to us. With analytics consent, we record only that a tool was used and a rough range for the result.
3. Why we use it, and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Newsletter and checklist emails | Your consent, which you can withdraw anytime with the unsubscribe link |
| Replying to messages and enquiries | Our legitimate interest in answering people who contact us |
| Analytics and ad cookies in the EEA, UK and Switzerland | Your consent, given through the consent message |
| Keeping the site and forms secure | Our legitimate interest in protecting the site from abuse |
These bases are set out in Article 6 of the GDPRSource 1. Where India’s DPDP Act applies, we process your data for the purpose you gave it to us for, and you can withdraw your consent at any timeSource 3.
4. Cookies, analytics and ads
In the European Economic Area, the UK and Switzerland, analytics and advertising storage stays off until you choose otherwise in the consent message. We use Google’s consent message, which Google requires for serving personalised ads in those regionsSource 5, and we pass your choice to Microsoft ClaritySource 6.
Outside those regions, analytics and ad storage is on by default. You can turn off personalised Google ads and use Google’s opt-out toolsSource 4, or block cookies in your browser.
We don’t show ads yet. If we do, Google AdSense may use cookies as described in our cookie policy, which lists every cookie and links to each provider’s own documentation.
5. Who processes data for us
We use these service providers. They process personal data on our behalf, or for the purposes described in their own policies.
| Provider | What they do for us | Their policy |
|---|---|---|
| Google (Google Analytics 4, AdSense, consent message) | Site analytics, advertising and recording your cookie choices | How Google uses information from sites that use its services |
| Microsoft (Clarity) | Analytics on how pages are used | Clarity cookies |
| Cloudflare (network and Turnstile) | Delivering the site, security and spam protection on forms | Cloudflare privacy policy |
| Zoho (ZeptoMail and Zoho Campaigns) | Sending form notifications and emails, and managing our mailing lists | Zoho privacy policySource 9 |
| Contabo (hosting) | Hosting the website and the database where form submissions are stored | Contabo privacy policySource 10 |
Corporate enquiries are passed to the BuyCarbonOffsets.org team, which is part of Agochar Tech LLP.
6. How long we keep it
We keep personal data only as long as we need it for the purpose you gave it for, and then delete it:
- Mailing lists. Until you unsubscribe, after which we stop sending you emails.
- Messages and enquiries. As long as needed to answer you and follow up.
- Analytics data. For the period set in each tool’s data retention settings.
We may keep some data longer where the law requires it.
7. International transfers
Agochar Tech LLP is based in India, and our service providers process data in several countries. This means your data may be processed outside the country where you live, including outside the EEA and the UK. Where the GDPR or UK GDPR applies, we rely on the safeguards those laws allow for such transfersSource 1.
8. Your rights
Depending on where you live, you have rights over your personal data.
Under the GDPR and UK GDPRSource 1Source 2, you can:
- be told how your data is used, which is what this policy does;
- get a copy of your data;
- have it corrected or deleted;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw consent at any time, without affecting what was done before.
You can also complain to your data protection authority. In the UK that’s the Information Commissioner’s Office.
Under India’s Digital Personal Data Protection Act, 2023Source 3, you can:
- get a summary of your personal data and how we process it (section 11);
- have it corrected, completed, updated or erased (section 12);
- have your grievances handled by us first, before going to the Data Protection Board of India (section 13);
- nominate someone to exercise your rights if you die or can’t act (section 14).
To use any of these rights, send us a message through our contact form and choose the topic General. We may need to confirm your identity before we act on a request.
9. Children
This site is written for adults and isn’t directed at children. We don’t knowingly collect personal data from children. Under India’s DPDP Act a child is anyone under 18Source 3. If you believe a child has sent us personal data, contact us and we’ll delete it.
10. Changes to this policy
When we change this policy, we update it on this page and change the “Last updated” date at the top.