Transparabl

Privacy Policy

Last updated: September 2025

1. Introduction

Transparabl Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our CSRD reporting platform and associated services.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.

2. Data Controller

The data controller responsible for your personal data is:

Transparabl Ltd

Email: privacy@transparabl.com

For any queries related to this Privacy Policy or your personal data, please contact us at the email address above.

3. Personal Data We Collect

3.1 Information you provide to us

  • Account information: name, email address, phone number, and password
  • Company information: organisation name, industry, size, and registration details
  • Climate and emissions data submitted through the platform
  • Payment information (processed by third-party payment providers)
  • Communications: messages, support requests, and correspondence with our team

3.2 Automatically collected information

  • Usage data: features accessed, pages visited, actions taken within the platform
  • Technical information: IP address, browser type, device type, and operating system
  • Log data: access times, error reports, and diagnostic information
  • Cookies and similar tracking technologies (see our Cookie Policy)

4. How We Use Your Data

Service delivery

  • Managing your account and providing platform access
  • Processing CSRD and ESG reporting functions
  • Processing payments and managing subscriptions
  • Generating reports, audit trails, and compliance documentation

Communication

  • Responding to support requests and queries
  • Sending service updates and important notices
  • Sharing information about new features (with your consent where required)

Improvement & security

  • Analysing platform usage to improve features and performance
  • Detecting, preventing, and addressing technical issues and security threats
  • Conducting internal research and analytics

5. Legal Basis (GDPR)

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Contract performance: processing necessary to fulfil our agreement with you
  • Legitimate interests: improving our services, fraud prevention, and platform security
  • Consent: where you have given explicit consent for specific processing activities
  • Legal obligation: where we are required to process data to comply with applicable law

6. Sharing Personal Data

We may share your personal data with the following categories of recipients:

Service providers

  • Hosting infrastructure: Supabase website hosting and Microsoft Azure (EU region) for software services
  • Payment processing: Stripe for handling payment transactions securely
  • Email services: for sending transactional and service communications
  • Analytics providers: to help us understand platform usage

Legal requirements: We may disclose your data if required by law, court order, or governmental authority.

With your consent: We may share data with third parties where you have given explicit consent.

All service providers are contractually bound to protect your data and process it only for specified purposes.

7. Data Storage & Security

Your personal data is stored on servers located within the EU/EEA. We implement robust technical and organisational measures to protect your data, including:

  • Encryption in transit (TLS) and at rest
  • Strict access controls and role-based permissions
  • Regular security audits and vulnerability assessments
  • Automated backups and disaster recovery procedures
Account dataWhile account is active, plus 30 days after deletion request
Climate and emissions data5 years from submission date
Billing and transaction records5 years (legal requirement)
System and access logs12 months

Data retention periods:

8. Your Rights (GDPR)

As a data subject under GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your data in certain circumstances
  • Right to restriction: request that we limit how we use your data
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@transparabl.com. We will respond to all requests within 30 days. In some cases, we may need to verify your identity before processing your request.

9. Cookies

We use cookies and similar technologies on our platform. The categories we use include:

  • Strictly necessary cookies: required for security and core platform functionality. Cannot be disabled.
  • Functional cookies: remember your preferences and settings (e.g., language, dashboard layout).
  • Analytics cookies: help us understand how you use the platform to improve it. Collected with your consent.

You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy.

10. Children

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us at privacy@transparabl.com so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by sending an email notice or by posting a prominent notice within the service. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

Email: contact@transparabl.com

We are committed to working with you to resolve any concerns about your privacy.