Legal

    Privacy Policy

    How Zero to Green Pledge collects, uses and protects personal data under UK GDPR and the Data Protection Act 2018.

    Last updated: 1 January 2026

    Who we are

    Zero to Green Pledge operates this platform, which lets individuals and organisations publish verified climate commitments and produce Carbon Reduction Plans. For the personal data described below we act as the data controller.

    What we collect

    • Account data — name, email address and authentication identifiers, used to create and secure your account.
    • Pledge content — the commitments, targets, initiatives and organisation details you choose to publish. Content marked public is intended to be visible to anyone, including search engines.
    • Verification data — company or charity registration numbers checked against Companies House and the Charity Commission, and email verification codes.
    • Technical data — device, browser and usage events needed to operate the service, detect abuse and diagnose faults.

    Why we process it

    We process account, verification and technical data to perform our contract with you and on the basis of our legitimate interests in running a secure, credible platform. Published pledge content is processed on the basis of your consent, which you give when you choose to publish and can withdraw by unpublishing or deleting the pledge.

    Sharing and processors

    We do not sell personal data. We share it only with the processors needed to run the service — our hosting and database provider, our transactional email provider, and the public registries used for organisation verification. Each is bound by a data processing agreement and processes data only on our instructions.

    Retention

    Account and pledge data are retained while your account is active. When you delete your account we remove or anonymise personal data within 30 days, except where we must keep records to meet a legal obligation. Verification audit logs are retained for six years.

    Your rights

    You have the right to access, correct, erase, restrict or port your personal data, to object to processing, and to withdraw consent. You can exercise most of these directly from your privacy settings, or by contacting us through the support centre. You may also complain to the Information Commissioner's Office.

    Cookies

    We use strictly necessary cookies to keep you signed in and to protect the service against abuse. We do not use advertising cookies or cross-site tracking.