Privacy Policy

This privacy notice explains how Carbon Chains collects, uses and protects personal data when you visit carbonchains.co, request a quote, place an order or otherwise contact us.

For the purposes of applicable data protection law, the data controller is Carbon Chains, Melbourne, AU. We can be reached at hello@carbonchains.co.

This notice applies to personal data we process through our website, our online shop, our quotation and contact forms, and related business correspondence. It does not apply to third-party websites we link to, which operate under their own policies.

Depending on your location and ours, processing may be governed by the EU General Data Protection Regulation (GDPR), the UK GDPR and the Data Protection Act 2018.

Information you provide

Contact & identity — name, company, job title, email, telephone and postal address when you request a quote, enquire or order.
Order & specification — product, diameter, grade, quantity, delivery details and any specification you send us.
Account — login credentials and preferences, if you create a shop account.
Correspondence — the content of messages, emails and call notes.

Information collected automatically

Technical data — IP address, browser type, device and operating system, and referring pages.
Usage data — pages viewed, time on site and interactions, via cookies and similar technologies.
Security logs — server and content-delivery logs used to keep the site available and secure.

Information from third parties

We may receive limited data from payment providers, freight and logistics partners, and analytics services, where you have engaged with them in connection with our services.

We do not intentionally collect special-category data and ask that you do not send it to us through the website.

We use strictly necessary cookies to operate the website and shop (for example, session, cart and security cookies). With your consent, we may also use analytics and preference cookies to understand how the site is used and to improve it.

You can manage non-essential cookies through our cookie banner and in your browser settings.

Some of our processors may store or process data outside your country, including outside the EEA or the UK. Where this happens, we put appropriate safeguards in place — such as adequacy decisions or Standard Contractual Clauses — so your data remains protected.

We keep personal data only for as long as necessary for the purposes set out above, then delete or anonymise it. Order and transaction records are retained to meet tax and accounting obligations for 7 years; enquiry and quote data is held for 6 months; marketing consents until withdrawn.

We maintain appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access — including encryption in transit (TLS), access controls and secure hosting. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

We may update this notice from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be highlighted on this page and, where appropriate, communicated to you directly.