Open Climate Fix ("we," "us," or "our") is a non-profit product lab focused on using data science to reduce greenhouse gas emissions.
Company Name: Open Climate Fix Ltd
Address: [Insert Registered UK Address]
Contact Email: [Insert Privacy/DPO Email Address]
Data Protection Lead: [Insert Name/Role, if applicable]
2. The Data We Collect
We may collect and process the following types of data:
Identity Data: Name, username, or similar identifiers.
Contact Data: Email address and telephone numbers.
Technical Data: IP address, login data, browser type, and time zone settings.
Usage Data: Information about how you use our website, apps, and services.
Special Category Data: In specific research contexts, we may process geolocation data which could indirectly reveal sensitive information. We only do this with explicit consent or for high-impact public interest research.
3. Purpose and Lawful Basis
Under the UK GDPR, we must have a "lawful basis" for processing your data. We typically rely on:
Consent: You have given us clear consent (e.g., signing up for a newsletter).
Contract: Processing is necessary for a contract we have with you.
Legitimate Interests: For our research and development goals, provided your fundamental rights do not override these interests.
Legal Obligation: Where we must comply with UK law.
PurposeType of DataLawful BasisTo register you as a userIdentity, ContactPerformance of a contractTo improve our forecasting modelsTechnical, UsageLegitimate InterestsTo send newsletters/updatesIdentity, ContactConsent
4. How We Use Your Data
We use your information to:
Provide and maintain our climate-fix tools and services.
Conduct non-profit research to optimize renewable energy grids.
Communicate with you regarding updates or open-source collaborations.
Monitor the security and integrity of our digital platforms.
5. Data Sharing
We do not sell your data. We may share data with:
Service Providers: Cloud hosting (e.g., AWS, GCP) or email service providers.
Research Partners: Academic institutions or climate organizations (usually in anonymized or aggregated formats).
Legal Authorities: If required by UK law or to protect our legal rights.
6. International Transfers
If we transfer your data outside the UK (e.g., to servers in the US), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
Transferring to countries deemed to provide an adequate level of protection by the UK Government.
Using specific Standard Contractual Clauses (SCCs) or the International Data Transfer Addendum (IDTA) approved for use in the UK.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, user account data is kept for the duration of the account's activity plus [e.g., 2 years].
8. Your Legal Rights
Under UK data protection laws, you have the following rights:
Access: Request a copy of your personal data.
Correction: Request correction of inaccurate data.
Erasure: Request that we delete your data ("the right to be forgotten").
Object/Restrict: Object to processing based on legitimate interests.
Portability: Request the transfer of your data to you or a third party.
Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
9. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at [Insert Email].
You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.
ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF