Last updated: 18 March 2026
This Privacy Policy explains how CBAM-Assured ("we", "us", or "our"), uses, stores, and protects your personal data when you visitor interact with any of our websites:
• cbam-assured.com (parent brand)
• cbam-training.com (CBAM Training — Stage 1)
• cbam-enabled.com (CBAM Enabled — Stage 2)
• cbam-compliant.com (CBAM Compliant — Stage 3)
These websites are collectively referred to as "our Websites" in this policy.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection legislation.
Please read this policy carefully. By using our Websites, you acknowledge that you have read and understood this Privacy Policy.
CBAM-Assured is a specialist Carbon Border Adjustment Mechanism (CBAM) compliance consultancy.
For the purposes of UK data protection law, we are the data controller of your personal information.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Email: privacy@cbam-assured.com
Website: cbam-assured.com
When you complete a contact or enquiry form on any of our Websites (powered by HubSpot), we may collect:
• Your name
• Your email address
• Your telephone number
• Your company name and job title
• Details of your CBAM compliance requirements or queries
• Any other information you voluntarily include in your message
When you visit our Websites, we automatically collect certain technical information, including:
• Your IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and navigation paths
• Referring website or search term
• Date and time of your visit
This data is collected via Google Analytics 4 (GA4) and is used solely for website performance monitoring and improvement.
Our Websites use cookies and similar tracking technologies. Please see Section 9 (Cookies) for full details.
We use your personal data for the following purposes:
• To respond to your enquiries and provide information about our CBAM compliance services
• To deliver services you have requested, including training, consultancy, or compliance assessments
• To manage and maintain our relationship with you as a client or prospective client
• To send you relevant information about CBAM legislation updates, service developments, or our events — where you have given consent or where we have a legitimate interest to do so
• To improve and optimise our Websites using analytics data
• To comply with our legal and regulatory obligations
• To protect the security and integrity of our Websites
Under UK GDPR, we rely on the following lawful bases for processing your personal data:
• Consent — where you have actively submitted a form or opted in to receive communications
• Legitimate Interests — to improve our Websites, respond to business enquiries, and communicate relevant CBAM updates to business contacts
• Contract — where processing is necessary to fulfil a service agreement with you
• Legal Obligation — where we are required to process data to comply with applicable law
Our contact and enquiry forms are powered by HubSpot. When you submit a form on our Websites, your data is transmitted to and stored within HubSpot's CRM platform.
HubSpot acts as a data processor on our behalf. Their processing is governed by HubSpot's Data Processing Agreement, and they are certified to appropriate data transfer standards.
We will only use your HubSpot-collected data in accordance with this Privacy Policy. We do not sell or share your contact data with third parties for marketing purposes.
For more information on HubSpot's data practices, visit: legal.hubspot.com/privacy-policy
We use Google Analytics 4 (GA4) to understand how visitors use our Websites. GA4 collects anonymised usage data to help us improve content and navigation.
Google Analytics operates as a data processor. IP anonymisation is enabled on our Websites. We do not use GA4 to identify individual users or combine analytics data with personally identifiable information.
You can opt out of Google Analytics tracking at any time by using the Google Analytics Opt-out Browser Add-on, available at: tools.google.com/dlpage/gaoptout
For more information on how Google processes data, visit: policies.google.com/privacy
We do not sell your personal data. We may share your data with the following categories of trusted third parties only where necessary:
• HubSpot Inc. — CRM and form processing platform
• Google LLC — website analytics via Google Analytics 4 and Google Search Console
• Webflow Inc. — website hosting and content management
• Professional advisers — such as legal or accounting professionals, where strictly necessary
All third parties are required to process your data in accordance with applicable data protection law and our written instructions.
Cookies are small text files placed on your device when you visit a website. We use the following types of cookies:
These are necessary for the Website to function correctly. They cannot be disabled.
These are set by Google Analytics 4 and help us understand how visitors interact with our Websites. They collect anonymised information such as page views and session duration. These cookies are only set with your consent.
We do not currently use marketing or advertising cookies.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect your experience on our Websites.
For more information about cookies and how to manage them, visit: allaboutcookies.org
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention periods are:
• Enquiry form submissions: up to 3 years from last contact, or until you request deletion
• Client records: up to 7 years following the end of a contract, in line with legal obligations
• Analytics data: up to 26 months (as set within Google Analytics 4)
When data is no longer required, it is securely deleted or anonymised.
As a data subject, you have the following rights regarding your personal data:
• Right of Access — to request a copy of the personal data we hold about you
• Right to Rectification — to request correction of inaccurate or incomplete data
• Right to Erasure — to request deletion of your personal data in certain circumstances
• Right to Restrict Processing — to request that we limit how we use your data
• Right to Data Portability — to receive your data in a structured, machine-readable format
• Right to Object — to object to processing based on legitimate interests
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at privacy@cbam-assured.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk | Telephone: 0303 123 1113
Some of our third-party service providers (including HubSpot and Google) may process your personal data outside of the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as the use of International Data Transfer Agreements (IDTAs) or adequacy decisions.
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure. These measures include:
• Secure HTTPS connections across all our Websites
• Access controls limiting who can view your personal data
• Regular review of our data handling practices
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security.
Our Websites may contain links to external websites. ThisPrivacy Policy applies only to our Websites. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing any personal data.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated"date at the top of this page will be revised accordingly.
We encourage you to review this policy periodically. Continued use of our Websites following any update constitutes acceptance of the revised policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:
CBAM-Assured
Email: privacy@cbam-assured.com
Website: cbam-assured.com
We are committed to resolving any concerns promptly and transparently.
© 2026 CBAM-Assured. All rights reserved.