Privacy Policy

1. Who we are

Carbonhogs (“we”, “us”, “our”) is operated by OYNK Ltd, a company registered in England and Wales. Our registered address is iCon Innovation Centre, Daventry, Northamptonshire, NN11 0QB. We provide carbon reduction plan services for UK businesses via carbonhogs.com and plan.carbonhogs.com.

If you have questions about this policy, contact us at privacy@carbonhogs.com.

2. What data we collect

We collect the following personal data:

• Account information: name, email address, company name when you register
• Questionnaire responses: company details, energy usage, travel data, supply chain information, and other data you provide to generate your carbon reduction plan
• Readiness score data: answers to the free readiness quiz and your email address
• Payment information: processed securely by Stripe. We do not store card numbers on our servers
• Technical data: IP address, browser type, and pages visited (via server logs)

3. How we use your data

We use your personal data to:

• Generate and deliver your carbon reduction plan
• Calculate your carbon readiness score
• Process payments via Stripe
• Send you your plan and related documents by email
• Provide customer support
• Improve our service

We will not sell your personal data to third parties. We will not send you marketing emails unless you explicitly opt in.

4. Legal basis for processing

Under the UK GDPR, we process your data on the following bases:

• Contract: processing necessary to deliver the service you purchased
• Legitimate interest: improving our service, preventing fraud, and maintaining security
• Consent: where you opt in to marketing communications

5. Third-party services

We use the following third-party services that may process your data:

• Supabase (database and authentication) — hosted in the EU
• Stripe (payment processing) — PCI DSS Level 1 certified
• Resend (transactional email delivery)
• Google (OAuth sign-in, if you choose to sign in with Google)

6. Data retention

We retain your account data and questionnaire responses for as long as your account is active. Purchase records are retained for 7 years to comply with HMRC requirements. You may request deletion of your account and associated data at any time by contacting us.

7. Your rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email privacy@carbonhogs.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. Essential cookies cannot be disabled as they are necessary for the service to function.

9. Security

We take appropriate technical and organisational measures to protect your personal data, including HTTPS encryption, secure password hashing, and access controls. Payment data is handled entirely by Stripe and never touches our servers.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. The latest version will always be available at this page.

11. Contact & complaints

For privacy-related enquiries: privacy@carbonhogs.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.