Lawtomation Ltd t/a The Climate Court is registered as a Data Controller with the Information Commissioner’s Office (reg. no. ZA507953).
We may update this policy from time to time. Please check this page regularly for notification of any significant changes in the way we treat your personal information.
This policy gives you information about how we treat personal information received from our customers and visitors to our website, www.theclimatecourt.com (the “Website”).
What is personal information?
Personal information is defined as information that may be used to identify a living individual, such as their name, address, email address and phone number.
How is personal information collected?
Rest assured we will only collect and process your personal information where we have a lawful basis to do so. We may process your personal information if you have provided explicit consent for use to do so, if it is pursuant to a contract between us, if we have a legal obligation to do so, or where we have a legitimate interest to process it that does not materially impact your rights, freedoms or interests.
We collect personal information in the following ways.
- When you visit our Website or use our services, we collect information sent to us by your computer, mobile phone, or other access device. This information may include your IP address, device information including, but not limited to, identifier, name and type, operating system, location, mobile network information and standard web log information, such as your browser type, traffic to and from our site and the pages you accessed on our Website.
- In order to provide feedback on the Website or our services or if you are a sustainable partner of ours, you may be required to send us some personal information. This information may include your name, email address, physical address and phone number.
- Where you sign-up to receive marketing materials from us using the sign-up form on the Website.
How is personal information used?
We may use your personal information:
- to process any feedback you may provide to us;
- to customise and improve our services and to improve the content and user experience of our Website and other services;
- where you are a registered sustainable partners of ours, to identify and manage your user account and to perform any obligations arising from any contract entered into between you and us;
- to detect and prevent any unlawful, illegal or unauthorised use of the Website; and
- to provide you with targeted marketing from time to time about our services or the services offered by our sustainable partners. However, we will only do this if you have given us express permission to do so. You can use the unsubscribe link in emails we send to you or contact us to opt out of any further marketing communications.
How is personal information stored and protected?
- We store, control and process your personal information on servers in the UK. We protect it by maintaining physical, electronic and procedural safeguards in compliance with the Data Protection Laws. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to personal information only for those employees who require it to fulfil their job responsibilities.
How is personal information shared?
We may use trusted service suppliers to whom we may pass your personal information. These service suppliers help us to provide you with access to the Website and our other services. Rest assured that we require these service suppliers to protect your personal information to the same or a higher standard than we treat it. Apart from the sharing with these trusted service suppliers, we will not share your personal information with anyone without your express permission.
Sensitive personal information
- Sensitive personal information includes information relating to your ethnic origin, your political opinions, your religious beliefs, whether you belong to a trade union, your physical or mental health or condition, your sexual life, and whether you have committed a criminal offence. It is very unlikely that we will receive or ask you to provide sensitive personal information. If we request such information, we will explain why we are requesting it and how we intend to use it. We will only collect your sensitive personal information with your explicit consent.
- If you are under 16 years of age, please ask your parent’s or guardian’s permission to provide your personal information to us.
- Most modern web browsers offer users controls to give you the option to delete or disable cookies. You can usually find out how to do so by referring to the ‘Help’ option on the menu bar of your browser, or by visiting the browser developer’s website. This will usually tell you how to prevent your browser from accepting new cookies, notify you when you receive new cookies, and disable cookies altogether. Please note that disabling cookies may stop you accessing any private areas of the Website.
Transfers of personal information out of the EEA
It is very unlikely that we will seek to transfer your personal information out of the UK. However, if there was a need to do so, we would ensure that any such transfer was executed subject to a GDPR-compliant guarantee (such as the model contract clauses issued by the European Commission from time to time) that will safeguard your privacy rights and give you remedies in the unlikely event of a security breach.
- We only keep your personal information as long as necessary for the purpose for which it was obtained.
- If you are a sustainable partner of ours and set up a user account, we shall retain your personal information until either (i) you delete your account, (ii) ask us to delete your account, or (iii) two years have passed since the last referral between us.
- If you have signed up to receive marketing materials from us, we shall retain your personal information until you ask us to stop sending marketing materials to you by clicking the unsubscribe link in any email we send or by contacting us – see ‘How to Contact Us’ section below.
- After the relevant data retention period, we shall either:
- delete the personal information permanently from our servers; or
- anonymise the personal information if we still wish to use it for analytical purposes in anonymous and aggregated form.
Your Rights under the Data Protection Laws
The Data Protection Laws provide you with a number of rights in respect of entities that process your personal information. These are summarised below. Please note that you can make all requests free of charge, but it may take us up to 30 days to respond to or act on your request (or longer in some circumstances – see ‘Time Extensions and Refusals’ section below).
Right to request a copy of your personal information
You can request a copy of your personal information which we hold (this is known as a subject access request). If you would like a copy of some of it, please follow the steps in the ‘How to Exercise Your Rights’ section below and let us know the information you want a copy of, including any account or reference numbers, if you have them.
Right to correct any mistakes in your information
You can require us to correct any mistakes in your personal information which we hold. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and let us know the personal information that is incorrect and what it should be replaced with.
Right to ask us to stop contacting you with direct marketing
You can ask us to stop contacting you for direct marketing purposes. If you would like to do this, please either click on the ‘unsubscribe’ button at the bottom of marketing emails from us or follow the steps to contact us in the ‘How to Exercise Your Rights’ section below. If you are unhappy with a specific way we have been contacting you only (for example, you may be happy for us to contact you by email but not by telephone), please let us know what method of contact you are not happy with.
Right to erasure
You can request that we delete all personal information relating to you. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and provide us with the justification for the erasure request (e.g. you are withdrawing your consent, you no longer believe that we should be processing the personal information for the original purpose for which it was obtained, there is a legal reason for erasure etc.). Except where this is a legal or regulatory right or obligation in respect of retention, we will erase the personal information as requested.
Right to Restrict Processing
You can request that we restrict processing of some of your personal information. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and provide us with details of what personal information you would like us to restrict the processing of (e.g. where you contest the accuracy of some personal information, we shall restrict the processing of it whilst its accuracy is verified). If we agree to restrict the processing of the personal information, we will inform you as soon as we have put in place the restriction.
Right to Object
You can object to us processing any of your personal information. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and provide us with details of what personal information you object to us processing.
Right to Data Portability
You can request that we provide some or all of your personal information we hold to a third party free of charge. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and provide us with sufficient details of the third-party entity to which you would like your data transferred. Assuming we can process your request, we shall provide your personal information to the requested third party in a commonly used machine-readable format.
Rights relating to automated decision making and profiling
If we use software that automatically processes personal information for us, we shall ensure that processing using this software is fair. We shall implement all appropriate technical and organisational measures to ensure inaccuracies are minimised. If you are concerned about the use of such software, you have the right to ask for more details about the processing and request that we stop using the software to process your data. If you would like to do this, please follow the steps in the ‘How to Exercise Your Rights’ section below and provide us with details of your concerns and the categories of personal information you believe are being processed by automated software. Please note that if the automated processing is necessary for the performance of a contract between you and us, if you request that the software is no longer used to process your data, we may not be able to provide you with services anymore.
Right to complain to the supervisory authority
How to exercise your rights
If you would like to exercise any of your rights set out above, please:
- email us (see ‘How to contact us?’ below); and
Time Extensions and Refusals
We reserve the right to extend the time period to respond to any of the requests listed above by up to 60 days where a request is complex or a large number of requests are made. If we fail to respond to you by the deadline we set, you have a right to complain to the supervisory authority or seek a judicial remedy (see – ‘Right to complain to the supervisory authority’ above).
We may also refuse a request where there are legitimate reasons to do so. These include, but are not limited to:
- where a request is manifestly unfounded, excessive or repetitive; or
- where personal information is being processed: (i) in order to comply with a legal obligation, (ii) in the public interest, (iii) in the exercise or defence of a legal claim, or (iv) in the exercise of the right to freedom of expression and information.
How to Contact Us
Please feel free to email us at firstname.lastname@example.org or using the contact form available on the Website.