PRIVACY NOTICE

(Last Updated on 5.11.2024)

This Privacy Notice Outlines Revaluate180’s approach to privacy to fulfill its obligations under applicable privacy laws.

APPLICABLE PRIVACY LAWS

This Privacy Notice is published in compliance with the following privacy laws:

  • USA - California Consumer Protection Act. (CCPA)
  • United Kingdom’s General Data Protection Regulation. (UK GDPR)
  • European Union’s General Data Protection Regulation. (EU GDPR)
  • The Indian Information Technology (Amendment) Act, 2008, and The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011.
  • India’s Digital Personal Data Protection Act, 2023. (DPDPA)

This Privacy Notice applies to all your Personal Data processed by us, this may be collected through (including but not limited to) our Revaluate180 website, social media, marketing events/ campaigns.

Revaluate180 is committed to keeping your Personal Data private. We process any Personal Data we collect from you in accordance with the applicable laws and regulations mentioned above and the provisions of this Privacy Notice. Please read the notice carefully to understand our views and practices regarding your Personal Data and how we treat it.

Throughout this document, the terms “we”, “us”, “our” & “ours” refer to Revaluate180. And the terms “you”, “your” & “yours” refer to YOU (as the Data Subject whose personal information we are processing).

WHAT PERSONAL DATA DO WE COLLECT & PROCESS?

The categories of Personal Data that we collect, and process are as follows:

  • Demographic & Identity Data (for e.g., name, age, email address, contact number)
  • Knowledge & Belief Data (for e.g., gender, religion, ethnicity)
  • Professional & Education Data (for e.g., highest education, company name, designation)
  • Online Identifiers and other Technical Data (for e.g., session data collected through our website cookies, IP Address)
  • Communication Data (for e.g., email ID, contact number)
  • External Personal Identifiers (for e.g., Location as detected through IP address, country, region)
  • Observed Data (for e.g., Website visitor information, Website visitor’s device details, Frequency, time and duration of service usage, Data traffic)

WHERE DO WE OBTAIN YOUR PERSONAL DATA FROM?

Most of the Personal Data we process is provided by you directly to us when you send us a query using our Revaluate180 website or fill out our digital forms when using our service. Website data collection will also include the Personal Data collected automatically and in the background by us when you use our website. We also collect certain personal data elements through various marketing campaigns with prior and valid consent from you.

HOW DO WE USE YOUR PERSONAL DATA?

We use your Personal Data for the following purposes:

  • To verify your identity
  • To deliver our services
  • To enable us to get in touch with you for any support-related communication
  • To conduct data analysis for reporting purposes
  • To communicate with you regarding existing services availed by you, including notifications of any alerts or updates
  • To evaluate, develop, and improve our services
  • To handle inquiries and complaints
  • To comply with legal or regulatory requirements

LAWFUL BASIS OF PROCESSING YOUR PERSONAL DATA

We process your Personal Data by relying on one or more of the following lawful basis:

  • You have explicitly agreed to/consented to us processing your Personal Data for a specific purpose that falls within the ambit of the above-mentioned purposes.
  • The processing is necessary for compliance with a legal obligation we have.
  • The processing is necessary for the purposes of a legitimate interest pursued by us.
  • The processing is as per contractual obligations that have been mutually agreed to by both parties.

Where the processing is based on your consent, you have the right to withdraw your consent at any point in time. Please note that should the withdrawal of consent result in us not being able to continue offering our services to you, we reserve the right to withdraw or cease our services to you upon your withdrawal. You may withdraw consent by contacting us with a written request to the contact details specified below in the ‘Contact Us’ section. Upon receipt of your request to withdraw your consent, the consequences of withdrawal will be communicated to you. Upon your agreement to the same, your request for withdrawal will be processed.

WHEN DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?

We may use third parties in the provision of our services to you. We may share your Personal Data with such third parties. We have appropriate contracts in place with all such third parties. This means that they are not permitted to do anything with your Personal Data which is outside of the scope specified by us. They are committed to hold your Personal Data securely and retain it only for the period specified in our contracts with them.

  • Reasons for sharing your Personal Data with third parties:

    We may disclose your Personal Data to third parties only where it is lawful to do so. This includes instances where we or they:

    • need to provide you with services
    • have asked you for your consent to share it, and you have agreed
    • have a legitimate business reason for doing so
    • have a legal obligation to do so. For e.g., to assist with detecting and preventing fraud
    • have a requirement in connection with regulatory reporting, litigation, or asserting or defending legal rights and interests
    • We may also disclose your Personal Data to appropriate authorities if we believe that it is reasonably necessary to comply with a law, regulation, or legal process; protect the safety of any person; address fraud, security, or technical issues; or protect our rights or the rights of those who use our services.

  • With whom your Personal Data may be shared:

    We may disclose your Personal Data to the following third parties:

    - any sub-contractors, or service providers who work for us or provide services or products to us which in turn enable us to provide you with your required services

    - law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party appointed or requested by applicable regulators to carry out investigations or audits of our activities

LAWFUL BASIS OF PROCESSING YOUR PERSONAL DATA

We process your Personal Data by relying on one or more of the following lawful basis:

  • You have explicitly agreed to/consented to us processing your Personal Data for a specific purpose that falls within the ambit of the above-mentioned purposes.
  • The processing is necessary for compliance with a legal obligation we have.
  • The processing is necessary for the purposes of a legitimate interest pursued by us.
  • The processing is as per contractual obligations that have been mutually agreed to by both parties.

CROSS-BORDER DATA TRANSFER

Personal Data we hold about you may be transferred to other countries outside your country of residence for any of the purposes described in this Privacy Notice. Any Personal Data that we transfer will be protected in accordance with this Privacy Notice.

Revaluate180 has all its servers within a stipulated location that is allowed as per the EU and UK GDPR. The personal data from these servers will be accessed in locations that are outside the boundaries of EU and UK for which we have appropriate data transfer mechanisms in place.

USE OF COOKIES AND OTHER TRACKING MECHANISMS

We may use cookies and other tracking mechanisms on our website and other digital properties to collect data about you.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information about your actions to the owners of the website. Most web browsers allow you some control of cookies through browser settings.

We may also use trackers (such as web beacons, tags, and pixels) on our website and other digital properties to collect data about you.

HOW DO WE SECURE YOUR PERSONAL DATA?

We are committed to protecting your Personal Data in our custody. We take reasonable steps to ensure appropriate physical, technical, and managerial safeguards are in place to protect your Personal Data from unauthorized access, alteration, transmission, and deletion. We ensure that the third parties who provide services to us under appropriate contracts take appropriate security measures to protect your Personal Data in line with our policies.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We keep the Personal Data we collect about you for as long as it is required for the purposes set out in this Privacy Notice and for legal or regulatory reasons. We take reasonable steps to delete or permanently de-identify your Personal Data that is no longer needed.

CHILDREN’S PRIVACY

Revaluate180 does not provide services to children. None of the services provided or channels through which the data is collected is directed or targeted at children. The collection of Children’s personal data is not a requirement and the target audience for the services is organizations, Revaluate180 is in no way responsible for verifying the age of the data subjects at the time of data collection.

LINKS TO OTHER WEBSITES

Our website may contain links to websites of other organizations. This privacy notice does not cover how those organizations process your Personal Data. We encourage you to read the privacy notices on the other websites you visit.

YOUR PRIVACY RIGHTS

You have the following rights, and we commit to provide you with the same:

  • You have a right to access the data that you have provided. You also have a right to update or make corrections to the data that you have provided. The accuracy of such data is solely your responsibility.
  • You may also request for Revaluate180 to delete your data. All systems will be scanned and your personal data that resides with us will be deleted in line with your right to deletion.
  • All Carbon offset certificates issued by Revaluate180 and made publicly available as part of the Climate Registry/ Carbon Footprint Registry cannot be deleted as publicly available data does not fall within the applicability of Data Privacy regulations.
  • If you wish to make a request to exercise any of your rights, you can contact us using the details in the ‘Contact Us’ section of this notice.

NOTIFICATION OF CHANGES

We regularly review and update our Privacy Notice to ensure it is up-to-date and accurate. Any changes we may make to this Privacy Notice in the future will be posted on this page.

CONTACT US

For any further queries and complaints related to privacy, or exercising your rights, you can reach us at:
Contact Email Address: [email protected]