Last updated: 18 March 2026
This Privacy Policy explains how CBAM-Assured ("we","us", or "our"), uses, stores, and protects your personal data when you visitor interact with any of our websites:
• cbam-assured.com (parent brand)
• cbam-training.com (CBAM Training — Stage 1)
• cbam-enabled.com (CBAM Enabled — Stage 2)
• cbam-compliant.com (CBAM Compliant — Stage 3)
These websites are collectively referred to as "ourWebsites" in this policy.
We are committed to protecting your privacy and complying withthe UK General Data Protection Regulation (UK GDPR), the Data Protection Act2018, and all applicable UK data protection legislation.
Please read this policy carefully. By using our Websites, youacknowledge that you have read and understood this Privacy Policy.
CBAM-Assured is a specialist Carbon Border AdjustmentMechanism (CBAM) compliance consultancy operating under the Auditel franchisenetwork.
For the purposes of UK data protection law, we are the datacontroller of your personal information.
If you have any questions about this Privacy Policy or how wehandle your data, please contact us at:
Email: privacy@cbam-assured.com
Website: cbam-assured.com
When you complete a contact or enquiry form on any of ourWebsites (powered by HubSpot), we may collect:
• Your name
• Your email address
• Your telephone number
• Your company name and job title
• Details of your CBAM compliance requirements or queries
• Any other information you voluntarily include in yourmessage
When you visit our Websites, we automatically collect certaintechnical information, including:
• Your IP address (anonymised where possible)
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and navigationpaths
• Referring website or search term
• Date and time of your visit
This data is collected via Google Analytics 4 (GA4) and isused solely for website performance monitoring and improvement.
Our Websites use cookies and similar tracking technologies.Please see Section 9 (Cookies) for full details.
We use your personal data for the following purposes:
• To respond to your enquiries and provide informationabout our CBAM compliance services
• To deliver services you have requested, includingtraining, consultancy, or compliance assessments
• To manage and maintain our relationship with you as aclient or prospective client
• To send you relevant information about CBAM legislationupdates, service developments, or our events — where you have given consent orwhere we have a legitimate interest to do so
• To improve and optimise our Websites using analyticsdata
• To comply with our legal and regulatory obligations
• To protect the security and integrity of our Websites
Under UK GDPR, we rely on the following lawful bases forprocessing your personal data:
• Consent — where you have actively submitted a form oropted in to receive communications
• Legitimate Interests — to improve our Websites, respondto business enquiries, and communicate relevant CBAM updates to businesscontacts
• Contract — where processing is necessary to fulfil aservice agreement with you
• Legal Obligation — where we are required to processdata to comply with applicable law
Our contact and enquiry forms are powered by HubSpot. When yousubmit a form on our Websites, your data is transmitted to and stored withinHubSpot's CRM platform.
HubSpot acts as a data processor on our behalf. Theirprocessing is governed by HubSpot's Data Processing Agreement, and they arecertified to appropriate data transfer standards.
We will only use your HubSpot-collected data in accordancewith this Privacy Policy. We do not sell or share your contact data with thirdparties for marketing purposes.
For more information on HubSpot's data practices, visit:legal.hubspot.com/privacy-policy
We use Google Analytics 4 (GA4) to understand how visitors useour Websites. GA4 collects anonymised usage data to help us improve content andnavigation.
Google Analytics operates as a data processor. IPanonymisation is enabled on our Websites. We do not use GA4 to identifyindividual users or combine analytics data with personally identifiableinformation.
You can opt out of Google Analytics tracking at any time byusing the Google Analytics Opt-out Browser Add-on, available at:tools.google.com/dlpage/gaoptout
For more information on how Google processes data, visit:policies.google.com/privacy
We do not sell your personal data. We may share your data withthe following categories of trusted third parties only where necessary:
• HubSpot Inc. — CRM and form processing platform
• Google LLC — website analytics via Google Analytics 4and Google Search Console
• Webflow Inc. — website hosting and content management
• Auditel Ltd. — our franchise network, for operationaland compliance purposes
• Professional advisers — such as legal or accountingprofessionals, where strictly necessary
All third parties are required to process your data inaccordance with applicable data protection law and our written instructions.
Cookies are small text files placed on your device when youvisit a website. We use the following types of cookies:
These are necessary for the Website to function correctly.They cannot be disabled.
These are set by Google Analytics 4 and help us understand howvisitors interact with our Websites. They collect anonymised information suchas page views and session duration. These cookies are only set with yourconsent.
We do not currently use marketing or advertising cookies.
You can control and manage cookies through your browsersettings. Please note that disabling certain cookies may affect your experienceon our Websites.
For more information about cookies and how to manage them,visit: allaboutcookies.org
We retain your personal data only for as long as necessary tofulfil the purposes for which it was collected, or as required by law. Ourstandard retention periods are:
• Enquiry form submissions: up to 3 years from lastcontact, or until you request deletion
• Client records: up to 7 years following the end of acontract, in line with legal obligations
• Analytics data: up to 26 months (as set within GoogleAnalytics 4)
When data is no longer required, it is securely deleted oranonymised.
As a data subject, you have the following rights regardingyour personal data:
• Right of Access — to request a copy of the personaldata we hold about you
• Right to Rectification — to request correction ofinaccurate or incomplete data
• Right to Erasure — to request deletion of your personaldata in certain circumstances
• Right to Restrict Processing — to request that we limithow we use your data
• Right to Data Portability — to receive your data in astructured, machine-readable format
• Right to Object — to object to processing based onlegitimate interests
• Right to Withdraw Consent — where processing is basedon consent, you may withdraw it at any time
To exercise any of these rights, please contact us atprivacy@cbam-assured.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK'sdata protection supervisory authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk | Telephone: 0303 123 1113
Some of our third-party service providers (including HubSpotand Google) may process your personal data outside of the United Kingdom. Wherethis occurs, we ensure that appropriate safeguards are in place in accordancewith UK GDPR requirements, such as the use of International Data TransferAgreements (IDTAs) or adequacy decisions.
We take the security of your personal data seriously. Weimplement appropriate technical and organisational measures to protect yourdata against unauthorised access, loss, alteration, or disclosure. Thesemeasures include:
• Secure HTTPS connections across all our Websites
• Access controls limiting who can view your personaldata
• Regular review of our data handling practices
While we take all reasonable steps to protect your data, nomethod of transmission over the internet is completely secure. We cannotguarantee absolute security.
Our Websites may contain links to external websites. ThisPrivacy Policy applies only to our Websites. We are not responsible for theprivacy practices of third-party websites and encourage you to review theirpolicies before providing any personal data.
We may update this Privacy Policy from time to time to reflectchanges in our practices or legal requirements. The "Last updated"date at the top of this page will be revised accordingly.
We encourage you to review this policy periodically. Continueduse of our Websites following any update constitutes acceptance of the revisedpolicy.
If you have any questions, concerns, or requests relating tothis Privacy Policy or the way we handle your personal data, please contact us:
CBAM-Assured
Email: privacy@cbam-assured.com
Website: cbam-assured.com
We are committed to resolving any concerns promptly andtransparently.
© 2026 CBAM-Assured. All rights reserved.