Privacy
This page explains what information the public site collects, why each category is processed, and how visitors can exercise their data rights — including under the DPDP Act, 2023 (India).
A2Z Carbon Solutions Pvt. Ltd. ("we", "us") is the Data Fiduciary for personal data collected through this public website, within the meaning of the Digital Personal Data Protection Act, 2023 (DPDP Act). Where GDPR, CCPA, or another law applies to you instead, the equivalent terms ("controller", "business") apply in the same sense.
Each category below is collected for the specific purpose listed next to it. We do not use one category of data for a purpose that isn't listed here without asking again.
Contact and identity details
What: Name, work email, phone number, job title, company name.
Why: To respond to the specific request you submit (demo, scoping call, or privacy request).
Basis: Consent, captured at the point of submission and recorded with a timestamp and policy version.
Cookie and site-preference data
What: Analytics/marketing cookie choices you make on the public site.
Why: To operate the public website and honour the preferences you set before loading non-essential trackers.
Basis: Consent for non-essential cookies; strictly necessary cookies rely on legitimate interest in operating the site.
Demo and scoping-request context
What: Sector, product/CN code, export tonnage, and estimate figures you provide in the CBAM calculator.
Why: To qualify and follow up on the specific scoping or demo request you asked for.
Basis: Consent, tied to the same request.
Marketing-communication preference
What: Whether you opted in to receive regulatory-update and product-news communications.
Why: To send you communications beyond the specific request, only if you separately opted in.
Basis: Separate, specific consent — not bundled with the consent above. You can withdraw it at any time.
Privacy and data-rights requests
What: Your name, email, the right you are exercising, jurisdiction, and your request description.
Why: To verify your identity and process an access, correction, erasure, grievance, or consent-withdrawal request.
Basis: Necessary to comply with our obligations under applicable data protection law.
If the DPDP Act applies to you, you have the right to access a summary of your data (Section 11), correct or erase it (Section 12), raise a grievance with us (Section 13), nominate someone to exercise these rights on your behalf (Section 14), and withdraw consent at any time. If GDPR, CCPA, or LGPD applies to you instead, the request form offers the equivalent rights under that law. Withdrawing consent does not affect the lawfulness of processing that already happened before you withdrew it.
If you are not satisfied with how we have handled your data, or a request you submitted, you can raise it directly with our Grievance Officer:
Uttiya Paul
Founder & Grievance Officer
privacy@carbonsolutionsa2z.com
[Add registered business address — required for DPDP publication]
We aim to acknowledge grievances within 3 business days and resolve them within 30 days. Under DPDP Rules 2025 (Rule 14(3)), the statutory maximum is 90 days. If you are not satisfied with our response, or do not receive one within the statutory period, you may escalate to the Data Protection Board of India.
You can reject non-essential cookies from the landing-page consent banner at any time, opt out of marketing communications separately from your essential request when you submit a form, or use the request form to exercise any right listed above.