PRIVACY POLICY

Climate Coaction Group ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you visit our website at www.climatecoactiongroup.com ("the Website"), subscribe to our newsletter, contact us, or engage with our services.

By using our Website or providing your personal data to us, you acknowledge that you have read and understood this policy.

1. Who We Are

For the purposes of applicable data protection law, the data controller responsible for your personal data is:

Company Name: Climate Coaction Group

Registered Address: Nairobi, Kenya

Email: consulting@climatecoactiongroup.com

If you have any questions, concerns, or requests regarding this policy or your personal data, please contact us using the details above.

2. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide Directly

Contact and enquiry data — your name, email address, phone number, organisation, and the content of messages submitted through our email;
Newsletter subscription data — your name and email address when you subscribe to our monthly newsletter;
Event and training registration data — your name, email, organisation, role, and dietary or accessibility requirements when registering for our capacity building programmes or events; and
Professional profile data — information you voluntarily share about your role, organisation, and areas of interest when engaging with us.

2.2 Data Collected Automatically

When you visit our Website, we may automatically collect:

Technical data — your IP address, browser type and version, device type, operating system, and time zone;
Usage data — pages visited, time spent on pages, referring URLs, and navigation paths; and
Cookie data — as described in our Cookie Policy in Section 8 below.

2.3 Data We Do Not Collect

We do not intentionally collect sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) through our website. We do not knowingly collect personal data from children under the age of 18.

3. How We Use Your Personal Data

We use your personal data only for legitimate purposes and on appropriate legal bases. The table below sets out our key processing activities:

Purpose - Data Used (Legal Basis)

Responding to enquiries and providing information about our services - Name, email, phone, message content (Legitimate interests / Pre-contractual steps)
Sending our monthly newsletter and market updates - Name, email address (Consent)
Processing event and training registrations - Name, email, organisation, role (Contract performance)
Improving our website and user experience - Technical and usage data, cookies (Legitimate interests)
Complying with legal obligations - Any relevant data (Legal obligation)
Marketing our services to professional contacts - Name, email, organisation, role (Legitimate interests (B2B) / Consent (B2C))
Maintaining records and internal administration - Contact and correspondence data (Legitimate interests / Legal obligation)

4. Newsletter and Marketing Communications

If you subscribe to our newsletter, we will use your name and email address to send you our monthly carbon markets newsletter, which may include market intelligence, policy updates, technical insights, and information about our services and events.

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link at the bottom of any newsletter email, or by contacting us directly at consulting@climatecoactiongroup.com. Unsubscription requests will be processed within five (5) business days.

We will not share your subscription data with third parties for their marketing purposes.

5. How We Share Your Data

We do not sell your personal data. We may share your personal data with:

Service providers and technology partners who process data on our behalf — including website hosting providers, email marketing platforms, and analytics tools — who are contractually bound to protect your data and use it only as instructed by us;
Professional advisers including lawyers, accountants, and auditors where necessary in the course of our business operations;
Regulatory authorities, law enforcement, or courts where we are required to do so by applicable law or legal process; and
Successors in the event of a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy.

Where we transfer your data to service providers located outside your country, we ensure appropriate safeguards are in place in accordance with applicable data protection law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our general retention periods are:

Enquiry and contact data - 3 years from last contact, unless a client relationship develops
Newsletter subscription data - Until you unsubscribe, then deleted within 30 days
Event and training registration data - 3 years from the date of the event
Website usage and analytics data - 13 months (standard analytics retention period)
Legal and compliance records - As required by applicable law (typically 7 years)

When data is no longer required, we securely delete or anonymise it.

7. Your Data Protection Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you;
Right to rectification — to request that we correct inaccurate or incomplete data;
Right to erasure — to request that we delete your personal data in certain circumstances;
Right to restrict processing — to request that we limit how we use your data in certain circumstances;
Right to data portability — to receive your data in a structured, machine-readable format;
Right to object — to object to processing based on our legitimate interests or for direct marketing purposes; and
Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at consulting@climatecoactiongroup.com. We will respond to verified requests within thirty (30) days. We may need to verify your identity before processing your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your country.

8. Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience and understand how the site is used. We use the following types of cookies:

Essential cookies - Necessary for the website to function. Cannot be disabled.
Analytics cookies - Help us understand how visitors interact with the website (e.g. Google Analytics). Data is aggregated and anonymised.
Functional cookies - Remember your preferences and settings to improve your experience.
Marketing cookies - Used to deliver relevant content and track the effectiveness of our communications. Only placed with your consent.

When you first visit our website, you will be asked to consent to non-essential cookies via our cookie banner. You can change your cookie preferences at any time through the cookie settings link in our website footer.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include secure server infrastructure, encrypted data transmission (SSL/TLS), access controls, and staff training on data protection obligations.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.

10. Third-Party Links

Our website may contain links to third-party websites, including carbon market standard programme websites, partner organisations, and publications. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify subscribers by email.

We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:

Email: consulting@climatecoactiongroup.com

We are committed to resolving any concerns promptly and transparently.