Privacy Policy
This privacy policy explains how Carbon Benchmark Ltd, trading as Capital Benchmark, collects and uses personal information when you visit our website, download our research, request or use Research Portal access, or otherwise communicate with us.
1. Who we are
Capital Benchmark is a trading name of Carbon Benchmark Ltd, a company registered in England and Wales under company number 15321719.
For the purposes of UK data protection law, Carbon Benchmark Ltd is the controller of the personal information described in this policy.
2. Information we collect
Information you provide to us
Depending on how you use the site, we may collect:
- your name and professional email address;
- organisation, role or other professional information where you choose to provide it;
- information required to create and manage a Research Portal account;
- records of research downloads, access requests and participation enquiries; and
- information you include when you contact us.
Technical and usage information
When you use the website or portal, our systems and service providers may process technical information such as IP address, browser and device type, operating system, referring page, pages visited, timestamps, and security or diagnostic logs. We use this information to operate, secure and improve the service.
Sensitive information
We do not intentionally request or process special-category or other sensitive personal information through the public website or Research Portal.
3. How we use your information
We may use personal information to:
- provide research downloads and Research Portal access;
- create, authenticate and administer user accounts;
- review requests for research access and manage participation in our research programme;
- respond to enquiries and provide support;
- send service-related or administrative communications;
- communicate about relevant Capital Benchmark research or participation opportunities where permitted;
- protect the security and integrity of our website, portal and systems;
- understand how our research and website are being used and improve them; and
- meet legal, regulatory, accounting or other compliance obligations.
We do not use website-user personal information to make automated credit decisions about those users.
4. Legal bases for processing
Where UK GDPR or similar legislation applies, we rely on one or more of the following legal bases:
- Contract or pre-contractual steps — where processing is necessary to provide a service you have requested.
- Legitimate interests — for example, operating and securing the service, understanding engagement with our research, responding to business enquiries, and developing our research programme, where those interests are not overridden by your rights.
- Consent — where we specifically ask for consent, including for certain optional communications or cookies.
- Legal obligation — where processing is necessary to comply with applicable law.
6. International data transfers
Some service providers may process information outside the United Kingdom or European Economic Area. Where required, we use appropriate safeguards for international transfers, such as recognised adequacy arrangements or approved contractual protections.
7. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing portal access, maintaining appropriate research-participation and business records, resolving enquiries, protecting our systems, and meeting legal or regulatory obligations.
When information is no longer required, we will delete or anonymise it where reasonably practicable, subject to appropriate backup and legal-retention requirements.
8. Security
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or loss. No internet service can guarantee absolute security, so users should also take appropriate care with account credentials and devices.
9. Your privacy rights
Depending on where you are located, you may have rights in relation to your personal information. Under UK and EEA data protection law these can include rights to:
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- request deletion of information in certain circumstances;
- request restriction of processing;
- object to certain processing based on legitimate interests;
- receive certain information in a portable format; and
- withdraw consent where processing is based on consent.
You also have the right to complain to the UK Information Commissioner's Office or, where applicable, another competent data protection authority.
10. Communications
If we send optional research or marketing communications, you can ask us to stop at any time. We may still send messages that are necessary to administer an account, respond to an enquiry or provide a service you requested.
12. Children
Capital Benchmark is a business-to-business service and is not directed at children. We do not knowingly seek to collect personal information from children through the website or Research Portal.
13. Changes to this policy
We may update this policy from time to time to reflect changes in our services, technology, legal requirements or business practices. The date at the top of the page shows when it was last updated.
14. Contact us
For questions about this policy, or to exercise a privacy right, contact us at: