Legal

Privacy Policy

Updated at 2026-07-04

How Nordic Carbon collects, uses, and protects information across our website, platform, and professional services.

Introduction

Nordic Carbon ("we," "our," or "us") provides an AI-native Sustainability Operating System and related professional services for enterprise customers. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit nordiccarbon.tech, contact us, or use our platform and services.

This policy applies to our marketing website, customer-facing applications, and related support channels. It does not replace customer agreements that govern processing of customer-controlled sustainability and operational data within the platform.

Who we are

Nordic Carbon is the controller of personal information collected through our website and sales and support channels. For customer platform data, we typically act as a processor on behalf of the customer organization under a separate agreement.

Questions about this policy can be sent to hi@nordiccarbon.tech.

Information we collect

We collect information you provide directly and information collected automatically when you use our website or services.

  • Contact and account details: name, business email, phone number, job title, company name, and message content when you request a strategy session, subscribe to updates, or open a support request.
  • Business context you share: facilities, reporting obligations, systems, and sustainability goals described in forms, emails, or discovery calls.
  • Usage and device data: IP address, browser type, device identifiers, pages viewed, referring URLs, and approximate location derived from IP.
  • Cookies and similar technologies used for essential site operation, preferences, and limited analytics where enabled.
  • Customer platform data: sustainability metrics, facility and supplier records, documents, evidence, workflow activity, and audit logs processed on behalf of customer organizations under contract.

How we use information

We use personal information to:

  • Respond to inquiries, schedule discovery calls, and deliver professional services.
  • Provide, secure, maintain, and improve the Nordic Carbon platform.
  • Authenticate users, enforce access controls, and prevent abuse or fraud.
  • Send service-related communications and, where permitted, product updates relevant to your organization.
  • Comply with legal obligations and enforce our agreements.

Customer data and the platform

Sustainability and operational data uploaded or connected by a customer remains under that customer's control. We process it only to provide the services configured for that customer, including ingestion, knowledge management, workflows, reporting, and AI-assisted tasks subject to governance controls.

We do not sell customer data. Model providers and other subprocessors receive only the data required to perform contracted processing, under confidentiality and security obligations, and only when configured for the customer environment.

Legal bases (where applicable)

Where GDPR or similar laws apply, we process personal information based on one or more of: performance of a contract or pre-contractual steps; legitimate interests such as securing our services and responding to business inquiries; consent where required for optional cookies or marketing; and legal obligations.

Sharing of information

We share personal information only as needed to operate our business:

  • Service providers that host infrastructure, deliver email, provide analytics, or support operations under written agreements.
  • Professional advisors such as legal or accounting counsel when required.
  • Authorities when required by law or to protect rights, safety, and security.
  • A successor entity in connection with a merger, acquisition, or asset transfer, subject to appropriate protections.

International transfers

We may process information in countries other than where you are located. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms for cross-border transfers.

Retention

We retain personal information only as long as needed for the purposes described in this policy, including to provide services, maintain security and audit records, resolve disputes, and meet legal requirements. Customer platform retention is governed by the customer agreement and configured retention policies.

Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, tenant isolation, and audit logging. No method of transmission or storage is completely secure. For platform-specific controls, see our Security page.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, to object to certain processing, and to data portability. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact hi@nordiccarbon.tech. We may need to verify your identity before fulfilling a request. If we process data on behalf of a customer, we may direct you to that customer as the controller.

Cookies

We use cookies and similar technologies that are necessary for the website to function, and may use limited analytics cookies to understand how the site is used. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

Children

Our website and services are directed to business users and are not intended for children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. The updated date at the top of this page reflects the latest revision. Material changes will be posted on this page.

Contact

For privacy questions or requests, contact us: