Privacy Policy
Last updated: 10 June 2026
AlliedOffsets (AlliedCrowds Ltd) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with UK GDPR and the Data Protection Act 2018.
Information We Collect
We may collect and process the following categories of personal data:
- Professional Information: Job title, company name, and location (e.g. city or region).
- Contact Information: Email addresses, LinkedIn profile URLs, or other publicly available professional contact data.
- Technical Information: IP address, browser type, operating system, and platform usage statistics.
- User Activity: Details about your interactions with our platform, such as login activity and search history.
How We Collect Information
We collect information through the following means:
- Direct Interactions: When you provide information by filling in forms or corresponding with us.
- Automated Technologies: As you interact with our platform, we may collect technical and usage data using cookies and similar technologies. See Section 9 (Cookies) for full details.
- Third-Party Sources: Publicly available professional sources (e.g. LinkedIn, company websites, industry directories) or third-party data providers who supply professional contact information. This includes the collection of names, job titles, email addresses, and LinkedIn profiles of professionals working in or adjacent to the voluntary carbon market.
Contact Database and Platform Data
As part of our platform offering, AlliedOffsets maintains a database of professional contact information sourced from publicly available channels and industry sources. This database currently contains details of over 1,000 individuals, including names, job titles, company affiliations, email addresses, and LinkedIn profiles.
This information is made available to paying subscribers of the AlliedOffsets platform for legitimate business development and market intelligence purposes. Access to and use of this data by our subscribers is governed by our Service Agreement, which explicitly restricts its use to lawful business development activities only.
Lawful Basis - Legitimate Interests Assessment (LIA)
We process this professional contact data under Article 6(1)(f) UK GDPR — Legitimate Interests. We have conducted a Legitimate Interests Assessment (LIA) and concluded that:
- Our legitimate interest: Providing a comprehensive voluntary carbon market intelligence platform to paying subscribers, who use the data for B2B business development and outreach.
- Necessity: The collection and provision of professional contact data is integral to the platform’s value proposition and cannot reasonably be achieved through less privacy-intrusive means.
- Balancing test: The data is limited to professional information that individuals would reasonably expect to be available in a professional B2B context. It does not include sensitive personal data, and processing is restricted to professional/commercial purposes. Our Terms of Service prohibit misuse.
Individual Notification and Disproportionate Effort
UK GDPR Article 14 requires that individuals whose data is collected from a source other than the individual themselves be informed of such collection. However, where providing such notice would involve disproportionate effort — for example, where the number of individuals affected makes direct notification impractical — UK GDPR permits an alternative approach.
Given the volume of contacts in our database (1,000+), individually notifying each person would involve disproportionate effort. In accordance with Article 14(5)(b) UK GDPR and the ICO’s guidance on this exemption, we rely on transparent public disclosure as an alternative. This Privacy Policy serves as that disclosure, setting out:
- The categories of data we hold;
- Where that data came from;
- Why we hold it and our lawful basis;
- Who has access to it;
- How long we retain it; and
- How individuals can exercise their rights, including the right to opt out.
We maintain an internal data register documenting these details in accordance with our Article 30 record-keeping obligations.
3.3 Subscriber Obligations
All subscribers who access professional contact data through our platform agree, as a condition of their service agreement, to:
- Use the data only for lawful B2B business development, outreach, and market intelligence purposes;
- Not resell, redistribute, or sublicense the data to third parties;
- Comply with all applicable data protection laws, including UK GDPR, in their use of the data;
- Honour any opt-out requests made by individuals.
Purpose of Data Processing
We process personal data for the following purposes:
- Service Delivery: To facilitate business development opportunities for our clients through access to relevant professional contact data.
- Platform Functionality: To maintain, improve, and personalise our platform.
- Legal Compliance: To meet our legal and regulatory obligations.
- Legitimate Business Interests: To evaluate and improve the effectiveness of our services.
Legal Basis for Processing
Our processing activities are based on the following legal grounds under UK GDPR:
- Legitimate Interests (Article 6(1)(f)): For professional contact data and platform analytics, where our interests are not overridden by your fundamental rights. See Section 3.1 for our LIA summary.
- Consent (Article 6(1)(a)): Where required, such as for non-essential cookies or direct email marketing.
- Contractual Necessity (Article 6(1)(b)): To fulfil obligations under subscriber agreements.
- Legal Obligation (Article 6(1)(c)): To comply with applicable laws and regulations.
Data Sharing and Third Parties
We may share personal data with:
- Platform Subscribers: Paying customers who access professional contact information via the AlliedOffsets platform for B2B business development purposes. Subscribers act as independent data controllers and are contractually bound to use the data only as permitted under our Terms of Service.
- Service Providers (Data Processors): Trusted third-party providers who assist in the operation of our platform (e.g. HubSpot, Metabase, hosting providers). These parties process data under our instruction and are bound by data processing agreements.
- Legal Authorities: Where required by law, court order, or regulatory authority.
Your Rights
Under UK GDPR, you have the following rights:
- Access (Article 15): Request a copy of your personal data.
- Rectification (Article 16): Request correction of inaccurate or incomplete data.
- Erasure (Article 17): Request deletion of your personal data (‘right to be forgotten’).
- Objection (Article 21): Object to processing based on legitimate interests or for direct marketing.
- Restriction (Article 18): Request that we restrict processing of your data.
- Portability (Article 20): Request your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
Opt-Out Mechanism
If you wish to opt out of having your professional details included in our platform and made available to our subscribers, you can do so at any time by:
- Emailing us at [email protected] with your full name, job title, and the email address associated with your record;
- Submitting a data removal request via our website contact form.
Upon receipt of a valid opt-out request, we will remove your details from the platform within 30 days and flag your record to prevent re-inclusion. We will also notify any affected subscribers where practicable.
Cookies and Similar Technologies
We use cookies and similar tracking technologies on our website and platform. This section explains what cookies we use, why, and how you can manage your preferences.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They help the site remember information about your visit, such as your login status and preferences. Similar technologies include web beacons, pixels, and local storage.
Categories of Cookies We Use
Managing Your Cookie Preferences
You can manage or withdraw your consent to non-essential cookies at any time by:
- Using our cookie preference centre (accessible via the cookie banner on our site);
- Adjusting your browser settings to block or delete cookies — note that disabling strictly necessary cookies may affect platform functionality;
- Opting out of Google Analytics tracking at: https://tools.google.com/dlpage/gaoptout
Please note that AlliedOffsets does not currently respond to Do Not Track (DNT) browser signals, as there is no consistent industry standard for how to interpret these signals.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes set out in this policy. Our general retention approach is:
- Platform contact database: Reviewed annually. Records are removed upon a valid opt-out request or when the data is no longer accurate or relevant to our platform’s purpose.
- Account and user data: Retained for the duration of a subscription plus 7 years (for legal and tax compliance purposes).
- Cookie and analytics data: Retained in accordance with the durations set out in Section 9.2.
- Correspondence: Retained for up to 3 years from the date of last contact unless required longer for legal purposes.
Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, disclosure, or misuse. These include access controls, encryption in transit, and regular security reviews. However, no system can guarantee absolute security, and we cannot be held liable for unauthorised access beyond our reasonable control.
International Data Transfers
Your personal data may be processed or stored outside the UK or EEA. Where this occurs, we ensure that appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs), to ensure your data is protected to an equivalent standard.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or regulatory guidance. The ‘Last updated’ date at the top of this policy will be revised accordingly. We encourage you to review this policy periodically.
Contact Us
If you have any questions, concerns, or requests about this Privacy Policy or how we handle your personal data, please contact us:
Email: [email protected]
Company: AlliedCrowds Limited (dba AlliedOffsets)