Privacy Notice

Last Updated: January 2024

1. Introduction

Net Zero One ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Notice explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Net Zero One is the data controller responsible for your personal data. You can contact us regarding any data protection matters at info@netzeroone.com.

3. Information We Collect

We collect the following types of personal information:

Contact Information:

  • Name and job title

  • Email address and phone number

  • Company name and address

  • Professional details relevant to our services

Service-Related Information:

  • Sustainability data and metrics

  • Environmental performance information

  • Business information relevant to our consultancy services

  • Communication records and project documentation

Website Usage Data:

  • IP address and browser information

  • Pages visited and time spent on our website

  • Referral sources and search terms

4. How We Use Your Information

We use your personal information for the following purposes:

  • Providing sustainability consultancy services

  • Communicating about projects and deliverables

  • Billing and payment processing

  • Improving our services and website functionality

  • Compliance with legal and regulatory requirements

  • Marketing communications (with your consent)

5. Legal Basis for Processing

We process your personal data based on:

  • Contract performance: To deliver our consultancy services

  • Legitimate interests: For business development and service improvement

  • Legal compliance: To meet regulatory requirements

  • Consent: For marketing communications and cookies

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Trusted service providers who assist in delivering our services

  • Professional advisors (lawyers, accountants, auditors)

  • Regulatory bodies when required by law

  • Potential business partners (with your explicit consent)

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

  • Encryption of data in transit and at rest

  • Regular security assessments and updates

  • Access controls and authentication measures

  • Staff training on data protection

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this notice, comply with legal obligations, and resolve disputes. Typically:

  • Client data: 7 years after contract completion

  • Marketing data: Until you withdraw consent

  • Website analytics: 26 months

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase your data in certain circumstances

  • Restrict processing of your data

  • Data portability

  • Object to processing

  • Not be subject to automated decision-making

10. Cookies

Our website uses cookies to improve user experience and analyze website performance. You can control cookie preferences through your browser settings. Essential cookies are necessary for website functionality and cannot be disabled.

11. International Transfers

If we transfer your data outside the UK/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the relevant authorities.

12. Changes to This Notice

We may update this Privacy Notice periodically. We will notify you of significant changes via email or website notice. The updated version will be posted on our website with the effective date.

13. Contact Us

For questions about this Privacy Notice or to exercise your rights, contact us at:

Net Zero One
Email: info@netzeroone.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.