Legal
Privacy Policy
How WeCarbon handles personal information across the regions we serve.
Introduction
WeCarbon (“we”, “our”, “us”) builds ClimateTech and AI tools that support sustainable transition. We take a respectful, minimal approach to personal information: we collect what we need, keep it for as long as we need it, and never sell it. This policy describes, in plain language, how we handle the information we receive when you visit our website or interact with us.
If anything here is unclear or you'd like to exercise a right described below, please write to us at info@we-carbon.com — a person will read your message and respond.
Who is responsible for your information
WeCarbon operates through a small group of affiliated entities so we can serve users responsibly across regions. The entity acting as data controller (or equivalent) for your personal information depends on where you are located.
For visitors and users in mainland China, processing is carried out by 蔚碳(上海)科技有限公司 (WeCarbon Shanghai), registered in Shanghai, China. For the European Economic Area, the United Kingdom, and Switzerland, the responsible entity is WeCarbon SAS, registered in Paris, France. For the Middle East and our broader international markets, including the Indian subcontinent, the responsible entity is WeCarbon Technology Ltd, registered in the Dubai International Financial Centre (DIFC), United Arab Emirates.
All WeCarbon entities apply the same privacy commitments described in this policy. If you are unsure which entity is responsible for your information, write to info@we-carbon.com and we will tell you.
Information we collect
We collect information in three broad ways: information you choose to give us, information collected automatically when your browser interacts with our services, and information from a limited set of integrated services that help our site work.
Information you give us
- Messages you send us — for example, inquiries, partnership outreach, press contacts, advisory requests, job applications, or feedback. We receive the contact details you write from and the content of your message.
- Contact form information — your name, work email, phone, organization, position, and any optional details you choose to share. We use it only to respond to your enquiry.
- Account information when you sign in — for example, via an email-based magic-link to our editorial tool, or via an OAuth flow connecting one of our integrated products (such as Formist) to your existing account. We receive the minimum identifiers required for authentication.
Information collected automatically
Like virtually every website, our servers record routine technical information — IP address, browser user-agent, the page requested, response status, and a timestamp. We use these records to operate the site, detect issues, and prevent abuse. Strictly-necessary cookies and a small amount of local browser storage remember preferences such as your language and Low Carbon Mode setting; optional analytics cookies are set only if you accept them (see Cookies below).
Information from integrated services
Some features of our site rely on external services (for example, logo imagery for partner brands, transactional email delivery, or media content credited to a third-party source). When your browser fetches that content, the relevant provider receives connection metadata such as your IP address. We share no more than is necessary for the feature to work.
How we use your information
We use personal information for clear and limited purposes: to respond to you, to provide and improve our services, to evaluate job applications, to operate and secure the site, and to comply with applicable law. We may produce aggregated, non-identifying statistics for internal planning. We do not make solely-automated decisions that produce legal or similarly significant effects on you.
We use Microsoft Clarity to understand how visitors interact with our website at an aggregate level. Clarity is a privacy-respecting analytics product from Microsoft that collects session recordings, heatmaps, and click data through first-party cookies and similar storage; the information is processed by Microsoft under its own privacy commitments and is used only to help us improve usability. We do not use advertising or cross-site tracking. Clarity is optional: it loads only after you choose “Accept All Cookies” in our cookie notice, and not at all if you choose “Accept Necessary Cookies Only”. You can change your choice at any time from the Cookies section of this policy.
We also count page views with Umami, an open-source analytics tool that we host ourselves. It does not use cookies or similar storage on your device and does not collect information that identifies you: it records the page visited, the referring site, browser, operating system, device type, and approximate location (country and region), which it derives from your IP address at the time of the visit without storing the address itself. The data stays on WeCarbon's own servers and is not shared with any third party. Because it sets no cookies and does not identify you, Umami runs without asking for your consent, and your cookie choice does not affect it.
Legal bases for processing
Depending on the applicable law, we rely on one or more of the following bases: performance of a contract or pre-contractual steps; our legitimate interests in operating, securing, and improving our services; compliance with a legal obligation; or your consent — which you may withdraw at any time without affecting processing already carried out on that basis. Under China's Personal Information Protection Law, our principal bases are contract performance, fulfilment of statutory duties, and your separate consent where required.
International data transfers
WeCarbon operates across multiple regions. Personal information may be transferred to, stored in, or accessed from countries outside the one in which you provided it, including the country where the responsible WeCarbon entity is established. When we make such transfers, we use safeguards appropriate to the law that applies — for example, Standard Contractual Clauses for transfers out of the EEA, or the relevant mechanism required by China's Personal Information Protection Law for transfers out of mainland China — and we limit the information transferred to what is necessary.
How long we keep it
We keep personal information only for as long as we have a clear reason to — to respond to you, to maintain a record of our communication or relationship, to defend a legal claim, or to comply with a legal obligation. When we no longer need information, we delete it or anonymize it. You may always ask what we still hold and request earlier deletion.
Security
We take reasonable, industry-standard measures to protect personal information, including encryption in transit, encryption at rest for stored uploads and backups, least-privilege access controls for staff, segregated credentials per service, and regular review of who has access to what. No system is perfectly secure; if we ever experience a personal-data incident likely to result in a risk to your rights, we will notify the relevant authority and, where required, affected individuals, within the timelines set by applicable law.
Your rights and choices
Subject to applicable law, you have the right to ask us to confirm whether we hold information about you, to receive a copy of it, to correct it, to delete it, to restrict or object to certain processing, to withdraw a consent you previously gave, and — where the law provides for it — to receive your information in a portable form. To exercise any of these rights, write to info@we-carbon.com from the address you originally contacted us with, or attach reasonable proof of identity. We will respond within the time required by the law that applies to you, and at the latest within one month.
If you are in mainland China, the People's Republic of China Personal Information Protection Law (PIPL) gives you additional rights to access, copy, correct, delete, restrict, object, withdraw consent, and request portability under conditions set by the Cyberspace Administration. If you are in the European Economic Area, United Kingdom, or Switzerland, the GDPR (and its national equivalents) gives you the same family of rights plus the right to lodge a complaint with your local supervisory authority. Where your personal data is handled by WeCarbon Technology Ltd, which is registered in the Dubai International Financial Centre (DIFC), the DIFC Data Protection Law (DIFC Law No. 5 of 2020) gives you the rights to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, to withdraw consent, and not to be subject to decisions based solely on automated processing, as well as the right to lodge a complaint with the DIFC Commissioner of Data Protection.
Children's privacy
Our website is intended for a professional, adult audience. We do not knowingly collect personal information from children under the age of digital consent in your jurisdiction (for example, 14 in mainland China). If you believe a child has provided us with personal information, please write to info@we-carbon.com and we will delete it.
Changes to this policy
We may update this policy as our practices evolve, when laws change, or simply to make it clearer. The “last updated” date at the top of this page reflects the most recent meaningful change. For material changes, we will take reasonable steps to bring the update to your attention.
How to contact us
The fastest way to reach the right person for any privacy matter — questions, requests, or complaints — is to email info@we-carbon.com.
