Privacy Policy
Last updated: January 27, 2026
Your privacy is important to us. This policy explains how Carbon Data Registry ("we", "us", "the Service") collects, uses, and protects your information.
1. Information We Collect
We collect the following information when you use our Service:
Business Information
- Company or trading name
- State/Territory of operation
- Energy consumption data (electricity kWh, fuel litres)
Contact Information
- Email address (collected during payment for receipt delivery)
Technical Information
- Browser type and version
- IP address (for fraud prevention)
- Pages visited and interactions (via analytics)
2. How We Use Your Information
Your data is used solely for:
- Service Delivery: Calculating emissions and generating your certificate
- Transaction Processing: Processing payments and sending receipts via Stripe
- Record Keeping: Maintaining your Registry record for future access
- Product Improvement: Anonymous analytics to improve the user experience
We do not sell, rent, or share your personal or business data with third parties for marketing purposes.
3. Data Storage and Security
Your data is stored securely using Supabase, an enterprise-grade database platform with:
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- SOC 2 Type II compliant infrastructure
- Data hosted in Australian or Singapore regions
4. Payment Information
All payments are processed securely by Stripe, a PCI DSS Level 1 certified payment processor. We do not store, process, or have access to your full credit card number. For more information, see Stripe's Privacy Policy.
5. Analytics
We use PostHog for privacy-friendly analytics. PostHog is configured to:
- Anonymize IP addresses
- Respect "Do Not Track" browser settings
- Not use cookies for tracking (session-based only)
6. Your Rights
Under the Australian Privacy Act 1988, you have the right to:
- Access: Request a copy of the data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
To exercise these rights, contact us at privacy@carbondataregistry.com.au
7. Data Retention
We retain your emissions records and certificates indefinitely to support future verification requests. Payment records are retained for 7 years as required by Australian tax law.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users where possible.
9. Contact Us
For privacy-related inquiries: