Privacy Policy Carbon Credit Platform

Privacy Policy for CO2NEX

Effective Date: 01 January 2025

Last Updated: 15 April 2025

Welcome to CO2NEX (“we”, “us”, or “our”), a nonprofit platform dedicated to transparent and reliable carbon credit verification, certification, issuance, and exchange. Your privacy and data security are critically important to us. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our platform or use our services.

1. Information We Collect

We may collect the following categories of data, depending on how you interact with our platform:

A. Personal Information

• Full Name
• Email Address
• Phone Number
• Mailing/Billing Address
• Government-issued IDs (for KYC/AML compliance)
• Company Information (name, industry, address)

B. Project Data

• Project name and description
• Location/geographic data (GPS coordinates)
• CO2 baseline and emission reduction data
• Photos, reports, and certification documents

C. Financial Information

• Banking/payment details (for buyers, sellers, and donations)
• Transaction history
• Invoicing and accounting records

D. Technical Information

• IP address
• Browser type, OS, and device information
• Usage data and analytics
• Log files and cookies

2. How We Use Your Information

We collect and process information for the following purposes:

A. Platform Operation & Services

• Verify and certify carbon offset projects
• Issue and register carbon credits
• Match buyers and sellers
• Track credit ownership and transfers

B. Legal & Compliance

• Conduct KYC/AML checks
• Meet regulatory requirements
• Prevent fraud, abuse, and illegal activities

C. Communication

• Send transaction confirmations and alerts
• Notify about platform updates or policy changes
• Respond to customer support requests

D. Improvement & Research

• Analyze platform performance
• Improve algorithms for certification and credit valuation
• Conduct impact assessments and environmental research

3. Legal Basis for Processing

If you’re located in the EU or other regulated regions, we rely on these lawful bases:

• Consent (e.g., marketing emails)
• Contractual necessity (e.g., processing transactions)
• Legal obligation (e.g., KYC compliance)
• Legitimate interest (e.g., fraud prevention, platform optimization)

4. Sharing of Information

We do not sell your personal data. We may share your information only with:

A. Authorized Third Parties

• Payment processors
• Cloud hosting providers
• Data analytics services

B. Verification & Certification Bodies

• Accredited auditors
• Environmental authorities
• International standards organizations

C. Marketplace Participants

• Verified project data and issued credits may be shared with buyers/sellers, in accordance with transparency standards.

D. Legal Disclosures

We may disclose your information to law enforcement, regulatory bodies, or courts if:

• Required by law or legal process
• Necessary to protect rights, safety, or enforce our policies

5. Data Security

We employ robust security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS) and at rest.
• Access Control: Strict role-based permissions for platform access.
• Monitoring: Regular audits, penetration testing, and security updates.
• Incident Response: Dedicated protocol for breach detection and response.

6. Data Retention

We retain personal and project-related data only as long as necessary to:

• Fulfill the purpose for which it was collected
• Comply with legal obligations
• Resolve disputes or enforce agreements

You can request deletion of your account or data unless we’re legally required to retain it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (“right to be forgotten”)
• Object to or restrict processing
• Withdraw consent
• Data portability (EU GDPR)
•  

Please contact us at [email protected] to exercise your rights.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Platform functionality
• User authentication
• Analytics and performance
• Fraud detection

You can manage or disable cookies in your browser settings.

9. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for their privacy practices. We recommend reviewing their policies before engaging.

10. Children’s Privacy

CO2NEX is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

11. International Data Transfers

If you access our platform from outside Switzerland, your data may be transferred to and stored in countries with different data protection laws. By using the platform, you consent to such transfers.

12. Changes to this Policy

We may update this Privacy Policy from time to time. You will be notified via email or platform alert when changes are material. Please review it regularly.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact us:

CO2NEX Nonprofit Organization

Email: [email protected]

Phone: +55 65 99347 2966