Privacy Policy
Introduction
VerC (“we”, “our”, “us”) provides Carbon Procurement Intelligence (CPI) and related financial-verification services for procurement and finance teams.
Your privacy matters to us.
We handle all data — including supplier emissions declarations, RFQs, and financial exposure information — with the same level of integrity, traceability, and confidentiality that we apply to our verification work.
This Privacy Policy explains how we collect, use, store, and protect your information in compliance with GDPR, EU privacy regulations, and industry best practices.
What Data We Collect
We only collect the minimum amount of information required to deliver our services.
A. Information You Provide Directly
-
Name, job title, company name
-
Email address & phone number
-
RFQ documents
-
Supplier emissions declarations
-
Procurement data required for the OSS Brief
-
Consultation booking information
-
Messages submitted through forms or email
B. Automatically Collected Data (Standard Website Tracking)
-
IP address
-
Browser type
-
Device & operating system
-
Pages visited
-
Time spent on site
-
Referring URLs
Collected via:
-
Wix analytics
-
Google Analytics
-
Cookie-based tracking tools
C. Sensitive or Confidential Data
Data provided during our CPI or OSS workflow — including supplier emissions factors, sourcing details, financial exposure and carbon pricing assumptions — is treated as confidential business information, never as “personal data.”
How We Use Your Data
We only use your data for clear, legitimate business purposes:
To deliver VerC services
-
Running ACE (Applied Carbon Economics™) analysis
-
Producing TCO calculations
-
Generating the OSS Brief
-
Validating supplier inputs
-
Providing the 30-min Carbon Cost Risk Assessment
To communicate with you
-
Scheduling consultations
-
Sending service updates
-
Replying to inquiries
To operate and improve our website
-
Analytics
-
Performance monitoring
-
Security
To comply with law
-
Audit readiness
-
Regulatory compliance
-
Legal obligations
We do not:
❌ Sell your data
❌ Train AI models using your data
❌ Share information without your explicit consent
Legal Basis for Processing (GDPR)
We process data under the following lawful bases:
-
Contractual necessity — to provide CPI/OSS services
-
Legitimate interest — for security, analytics, and fraud prevention
-
Consent — for newsletter or content subscriptions
-
Legal obligation — when required by law or regulation
How Your Data Is Stored & Protected
We use enterprise-grade security standards, consistent with the VerC brand promise of financial-grade defensibility:
A. Technical Safeguards
-
Encryption (HTTPS, SSL, TLS)
-
Encrypted data storage (Wix, GDrive, or equivalent secure cloud)
-
Access control and authentication
-
Continuous monitoring
B. Operational Safeguards
-
Confidentiality commitments
-
Limited access (founder-only, unless stated otherwise)
-
Data minimization
-
Document retention protocols
C. Data Retention
We retain data only for as long as necessary to:
-
Deliver services
-
Meet legal obligations
-
Resolve disputes
-
Maintain accounting records
You may request deletion at any time (see Section 8).
Sharing of Data
We only share your data with:
A. Essential service providers
-
Wix (website hosting)
-
Google Workspace (email + document storage)
-
Scheduling tools
-
Analytics services
These providers act as data processors under GDPR and follow strict privacy requirements.
B. Legal or regulatory authorities
Only when legally required.
We never share your data with:
❌ Advertisers
❌ Data brokers
❌ Third-party marketers
International Data Transfers
Your information may be stored on servers outside your country (e.g., US, EU, India), depending on the hosting environment (Wix, Google, etc.).
All transfers comply with GDPR:
-
Standard Contractual Clauses (SCCs)
-
Adequacy decisions
-
Equivalent safeguards
Your Rights (GDPR)
You have the right to:
-
Access your data
-
Correct inaccurate information
-
Request deletion
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent (at any time)
-
File a complaint with your data protection authority
To exercise your rights:
Cookies
We use cookies to:
-
Improve site performance
-
Understand website interactions
-
Enhance user experience
You can adjust or disable cookies through your browser settings.
Children’s Privacy
VerC services are intended for business professionals only.
We do not knowingly collect data from individuals under 16.
Changes to This Policy
We may update this Privacy Policy from time to time.
Updates will be posted on this page with a revised date.