Privacy Policy

1. Introduction

This Privacy Policy explains how Mobius Carbon ("Mobius," "we," "our," or "us") collects, uses, shares, and safeguards personal data when you interact with our website, products, and services. It also describes your rights and choices regarding your personal data.

2. How We Collect and Use Your Information

We collect personal data from a variety of sources depending on how you interact with our platform and services:

• Directly from you – when you submit information via forms, create an account, or contact our team;
• From your use of the platform – including energy performance data, property information, and usage logs as you interact with features;
• From integrated third-party systems – such as energy providers, software tools, and data services that you or your organisation authorise to connect with our platform;
• Automatically – through cookies, logs, and similar technologies used to track activity, diagnose issues, and enhance functionality.

If we process or access personal data from outside the United Kingdom or European Economic Area (EEA), we ensure that appropriate safeguards—such as standard contractual clauses or adequacy decisions—are in place in accordance with data protection law.

3. How We Share Your Information

We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

• Analytics providers (e.g., usage tracking, diagnostics)
• Data processing partners (e.g., cloud infrastructure, secure data transfers)
• Service integrators (where applicable)

We require such third parties to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required to fulfill the stated purpose.

We may also disclose your personal information in the following cases:

• To comply with applicable law, regulation, court order, or other legal process;
• To enforce your agreements with us, including this Privacy Policy;
• To respond to claims that your use of the Service violates any third-party rights.

If the Service or our company is merged or acquired by another entity, your information may be one of the assets transferred to the new owner.

4. Our Legal Bases for Processing

We rely on the following legal bases under the UK General Data Protection Regulation (UK GDPR):

• Contract – where processing is necessary to provide the services you request;
• Legal obligation – where we are required to comply with legal or regulatory obligations;
• Legitimate interests – where we use data to create aggregated insights, benchmarking indices, or statistical models that do not identify individuals, we do so based on our legitimate interests in product improvement, decarbonisation leadership, and service development.

This processing is subject to rigorous safeguards, including aggregation and pseudonymisation techniques, and supported by internal assessments such as our Data Protection Impact Assessment (DPIA) and Legitimate Interests Assessment (LIA).

5. Your Rights

Under applicable data protection law, you may have the right to:

• Access the personal data we hold about you;
• Request rectification or erasure of your personal data;
• Restrict or object to our processing of your personal data;
• Withdraw consent at any time, where applicable;
• Lodge a complaint with a supervisory authority.

Right to Object: You may object to our use of your personal data where we rely on legitimate interests as our legal basis. If you do so, we will assess your objection and cease processing where required by law. To exercise this right, email us at privacy@mobiuscarbon.com.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. We do not retain identifiable personal data used for benchmarking or cohort analytics. Aggregated, anonymised statistical outputs may be retained indefinitely for analytical and product development purposes, provided they do not and cannot be used to identify any individual.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Email: privacy@mobiuscarbon.com

Postal Address:
Mobius Carbon
Suite 4, Queripel House
1 Duke of York Square
London
SW3 4LY