CLIMATE BONDS INITIATIVE – PRIVACY POLICY
1. Introduction
This privacy policy (“Policy”) tells you how Climate Bonds Initiative (Registered Charity 1154413) (“Climate Bonds”, “we”, “our” or “us”) processes your personal information, why we do so, how we keep this personal information secure, how long we retain it and what your rights are.
We also set out in this Policy the other key obligations under the UK General Data Protection Regulation (“UK GDPR”) that apply to us. The UK GDPR is the main data protection law that applies to Climate Bonds. For ease of understanding this Policy, we use the term “personal information” throughout, which we use to mean the same as the term used in the UK GDPR, “personal data”.
This Policy supplements any other privacy policy or notice that we send you and is not intended to replace or override them.
We use sub-headings throughout the Policy to help you find specific information that you may be looking for more easily.
2. Further information
If you have any questions about this Policy or if you would like more information, please email us at info@climatebonds.net.
3. Data controller
Unless we notify you otherwise, Climate Bonds will be the “controller” of the personal information that we process. This means that we determine the purpose for which, and the way in which, personal information is processed.
4. The types of personal information we collect from you, why we use it and where we get it from
We collect and process different types of personal information. We set this out in the table below as well as the lawful basis for our use of your information, and where we collect it from.
|
Data we collect |
Purpose/activity |
Lawful basis/condition |
Source(s) of data
|
|---|---|---|---|
|
Personal identifiers/details Name, address, contact details, professional details (job title, name of organisation and sector) |
· To conduct events, training sessions and surveys; · To promote and market Climate Bonds’ training sessions and services; · To monitor how people use our Website, including the use of Climate Bonds’ blog (www.climatebonds.net/blog); and · To maintain our Website accounts. |
Consent (where you expressly provide your consent to us to process your personal information). Necessary for the following legitimate interests:
|
· Our registration, enquiry or contact forms. · Our mailing list(s). · Our communications with you. · Information you provide to us when you subscribe to our blog or participate in our events. · Information you provide when subscribing to any of our newsletters or updates (e.g. from our website or linked to an email signature of one of our staff members). |
|
Portal log-in information for Clients (described in paragraph 5 below) Name, address, contact details, professional details (job title, name of organisation and sector), partner portal log-in and password. |
· To provide access to Partners to the Partner log-in section of our Website; and · To provide services to such partners. |
Consent (where you expressly provide your consent to us to process your personal information). Necessary for our legitimate interests in administering our services. |
· The information you provide to us to set-up a partner portal log-in. |
|
Marketing data Name, contact details, organisation type, role information relating to purchase history of Climate Bonds products and services and history of participation in past events organised by Climate Bonds, gender, dietary requirements |
· To promote and market Climate Bonds’ training sessions and services; · To organise Climate Bonds events effectively and assess information relating to attendance; · To support Climate Bonds in preparing information for analytical and direct marketing purposes; and · To ensure that attendees’ individual dietary requirements are taken into account at events. |
Consent (where you expressly provide your consent to us to process your personal information). Necessary for the following legitimate interests:
|
· Our registration, enquiry or contact forms. · Our mailing list(s). · Our communications with you. · Our subscription form on the website for marketing updates.
|
|
Feedback and opinions Name, contact details, information relating to feedback shared with Climate Bonds. |
· To answer queries and complaints; and · To evaluate the quality and consistency of our events, training sessions and services. |
Necessary for the following legitimate interests:
· To manage our organisation effectively which includes using the information to consider how to develop the services provided by Climate Bonds. |
· Our enquiry or contact forms. · Our mailing list(s). · Our communications with you. |
|
Website and communication usage information Your IP address, details of visits to our Website (including the partner log-in section), browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, the full Uniform Resource Locators (URL), clickstream to, through and from our Website and the date and time of the clickstream, products or services you viewed or searched for, page response times, downloads, download errors, length of visits to certain pages, page interaction information (scrolling, clicks, and mouse-overs), methods used to browse away from the page. |
· To monitor our Website usage; · To ensure that our Website most effectively presents content to you and your computer; · To tailor our Website’s content and manage our Website’s accounts; and · To keep our Website, IT systems and facilities safe and secure. |
Necessary for the following legitimate interests:
|
· Cookies. · Google Analytics (a service from another company that helps us see how visitors interact with our website)
|
|
Customer and donor payment information Bank account number, IBAN, BIC, and, where applicable, your tax reference, sales tax or VAT number, and your purchase and donation history.
|
· To carry out the contracts we have made with you or your employer, and to manage our working relationship; · To monitor our activities (like recording donation statistics, purchases, payments and number of customers and participants); · To improve the quality of our products and services; and · To protect our business interests. |
Performance of a contract with you. Necessary for our legitimate interests in operating, managing and improving our organisation and the services we provide. |
· Our registration or contact forms. · Our mailing list(s). · Our communications with you. |
5. Who we share your personal information with, why and where they process it
We use third party service providers in connection with providing our services to you.
The table below indicates categories of organisations to whom we may disclose personal information about you, the reason we disclose this personal information, what personal information is shared with them, and where these organisations are located. This list contains the information that we share with Climate Bonds’ Partners, third party organisations who are members of Climate Bonds’ three-tiered programme with access to Climate Bonds’ green bond databases (“Partners”).
Where we transfer your personal information to third parties outside of the UK or European Economic Area (“EEA”) we shall do so only where there are adequate provisions to ensure your privacy. Where the jurisdiction is not considered adequate by the relevant data authorities, we will put in place alternative contractual measures, as required by data protection laws, including the standard contract clauses in a form approved by the UK Information Commissioner.
|
Third party recipients |
Information shared |
Purpose of sharing information |
Lawful basis |
Location of third party recipients |
|
Marketing agencies: Mailchimp Eventbrite Interlated Microsoft Whova Zoom
|
Personal identifiers Marketing data |
To provide marketing to users of our services and to make users who have subscribed to receive news from us aware of events and training. |
Consent (when you actively consent, including via email, ticking a form consent box or any other method).
|
UK EEA Australia |
|
Website designers |
Personal identifiers Marketing data Website and communication usage information |
To enable website designers, on an ad hoc basis as required and subject to agreement between Climate Bonds and these designers, to make changes to the design and functionality of our website. |
Necessary for our legitimate interests in managing our services and organising events. |
UK EEA |
|
Videoconferencing companies Webex Zoom Microsoft |
Personal identifiers |
To organise virtual seminars, conferences and events. |
Necessary for our legitimate interests in managing our services and organising events.
|
UK EEA Any applicable jurisdiction in which Climate Bonds uses videoconferencing services.
|
|
Payment processors Paypal |
Personal identifiers Bank details |
To process donation payments and event fees. |
Performance of a contract with you. Necessary for our legitimate interests in operating, managing and improving our organisation and the services we provide. |
UK EEA Any applicable jurisdiction in which Climate Bonds provides its services
|
|
Email hosting platforms Interlated LLC Rimuhosting Mailchimp Microsoft
|
Personal identifiers Marketing data Website and communication usage information
|
To manage our email systems and to communicate with users, donors and partners. |
Consent (when you actively consent, including via email, ticking a form consent box or any other method). |
UK EEA USA
|
|
Analytics providers Google Analytics
|
Personal identifiers Marketing data Website and communication usage information
|
To assist Climate Bonds in the improvement of its website, to understand the engagement by visitors with Climate Bonds’ services and to monitor traffic on our website. |
Necessary for our legitimate interests in administering and managing our organisation. |
UK EEA Any applicable jurisdiction in which Climate Bonds operates its website |
|
IT service providers Microsoft Salesforce
|
Personal identifiers Marketing data Feedback and opinions Website and communication usage information Customer and donor payment information Partner portal log-in information
|
To support and maintain the IT software, platforms and infrastructure we use. |
Necessary for our legitimate interests in ensuring we have adequate assets to support our organisation and protection our information and the information we collect. |
UK EEA Any applicable jurisdiction in which Climate Bonds provides its services
|
|
Sponsors
|
Personal identifiers Marketing data Feedback and opinions Partner portal log-in information
|
To share knowledge and resources with other charities, NGOs and Sponsors on our campaigns.
|
Consent (when you actively consent, including via email, ticking a form consent box (including as part of enrolment in Climate Bonds events)) |
UK Any applicable jurisdiction in which Climate Bonds provides its services or engages with Climate Bonds Sponsors
|
|
Public authorities, regulators or government bodies
|
Personal identifiers Marketing data Feedback and opinions Customer and donor payment information |
Administration of justice, regulatory and compliance |
Compliance with our legal obligations Our legitimate interests in ensuring that we maintain good relationships with relevant government entities |
UK Any applicable jurisdiction in which Climate Bonds provides its services |
|
Professional advisers
|
Personal identifiers Marketing data Feedback and opinions Website and communication usage information Customer and donor payment information |
To receive legal and compliance advice where necessary For audit purposes |
Compliance with our legal obligations Necessary for our legitimate interests in ensuring our organisation is well advised about financial, legal and compliance issues. |
UK Any applicable jurisdiction in which Climate Bonds provides its services
|
We may also disclose your personal information to other third parties from time to time:
- in connection with the transfer of our organisation, or any of our assets, to another organisation. In this scenario we will disclose your personal information to the transferee organisation (and/or their advisers); or
- if we are required to disclose information under applicable law.
6. Use of Cookies
Like lots of other websites, we also use cookies to automatically collect certain information to improve your experience with our website. Cookies are small files sent along with pages of our website and are stored by your browser on the hard drive of your computer or other device. A cookie itself does not contain or collect information. However when it is read by a server via a web browser it can help maintain a website’s functionality and deliver a more user-friendly service. We have set out below in more detail why we collect cookies.
When you visit our website for the first time, you are notified that we use cookies and we will ask for your consent to use cookies.
You can prevent the setting of cookies by adjusting the settings on your browser (see your Browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site.
We a use functions of Google Analytics to monitor usage on our website and to assist in administering our services. Google Analytics uses cookies that are saved to your computer and allow your usage on the website to be analysed.
These cookies track how long you spend on the site and the pages that you visit so we can continue to produce engaging content.
For more information on Google Analytics cookies, see the official Google Analytics page and Google’s data privacy policy. If you’d like to opt out of tracking by Google Analytics, visit the Google Analytics opt-out page.
We also use social media buttons and/or plugins on this site that allow you to connect with your social network in various ways. For these to work the following social media sites including; Facebook, Twitter, LinkedIn, YouTube, will set cookies through our site which may be used to enhance your profile on their site or contribute to the data they hold for various purposes outlined in their respective privacy policies.
You can remove cookies stored in your computer via your browser settings at any time. Alternatively, you can control some third party cookies by using a privacy enhancement platform such as optout.aboutads.info(link is external) or youronlinechoices.com(link is external). For more information about cookies, visit allaboutcookies.org(link is external).
7. How is my data protected?
We take good care to ensure that the information we store on our database is kept secure in order to prevent unauthorised access and comply with our obligations under the UK GDPR. We have implemented appropriate security measures to protect your personal information from unauthorised access, improper use and to prevent it from being accidentally lost, altered or disclosed.
8. Your rights
The UK GDPR gives you various rights in relation to your personal information. We have summarised these key rights below. The rights are not absolute, and may not always apply in your circumstances. Please note that we may only deal with any requests to exercise these rights where they relate to personal information that we process as a controller.
- Access Right – the right of access to the personal information that we are processing about you, including requesting a copy of the personal information of yours that we hold. This is often known as a “data subject access request”. You can also ask for certain other details such as what purpose we process your data for and how long we hold it. To request a subject access report which details all of the information we hold about you, please make this request in writing to Climate Bonds Initiative, First Floor, Queen Street Place, London, EC4R 1BE.
- Correction Right – the right to request that we correct or rectify information that we hold about you that you think is inaccurate or incomplete.
- Erasure Right – the right to request that we erase your personal information held by us, where you can demonstrate that the personal information we hold is no longer needed, if you withdraw your consent on which we process your information or if you feel that we do not have a lawful basis to be processing your information. Your erasure right extends to anyone to whom we have disclosed your personal information. We will take reasonable steps to inform those with whom we have shared your information about your request for erasure.
- Restriction Right – the right to restrict the way we process your personal information in certain circumstances, for example if you contest the accuracy of the personal information that we hold, the lawful basis on which we process it and you have opposed its deletion, where we no longer need your information but you require us to in order to establish, exercise or defend legal claims, or where we are in dispute about the legality of our processing of your personal information.
- Objection Right – the right to object to us processing your data for (i) direct marketing purposes (ii) research or statistical purposes and (iii) purposes of profiling related to direct marketing or based on our legitimate interests. However we are not obliged to stop processing the personal information where we need to continue to do so for specific reasons, such as fraud prevention.
- Data Portability Right – you have the right to have the personal information we hold about you transferred to another controller in some circumstances.
- Right to Withdraw Consent at any time – where we have relied on your consent as the lawful basis for us processing your personal information, you have the right to withdraw this consent at any time. If you wish to exercise this right, you can do this by emailing to info@climatebonds.net. Most emails we send you will include a link you can click on to unsubscribe from that particular type of communication.
- Right of complaint – you have the right to be confident that Climate Bonds Initiative handles your personal information responsibly and in line with good practice. If you have a concern about the way we are handling your information, then in the first instance you should raise this with us. We will take your concern seriously and work with you to try to resolve it. However if you are still unhappy with our response you can raise a concern with the ICO, the UK data protection regulator via the ICO website here: https://ico.org.uk/make-a-complaint/.
9. Retention of your personal information
We will retain and process information about you for as long as you continue to use or express an interest in the services provided by Climate Bonds, log into the partner portal on our website or use our services, and in any case no longer than 7 years (unless we are required by applicable law to retain the information for any longer period).
We will only keep your information for a longer period where necessary in order to comply with our legal obligations.
10. Changes to this Policy
We will review and update this Policy from time to time. It was last updated in September 2024.