How we collect, use, and protect your information on the Envr platform.
Last Updated: April 10, 2026
Compliance Kart Pvt. Ltd. operates a B2B voluntary marketplace, Envr, for trading carbon credits and I-RECs between businesses.
By consenting to this Policy and accepting the Terms of Use, you agree to the collection, use, and transfer of your personal information as outlined. We review this Policy periodically. Registered users will be notified of changes before continuing to use our services.
Business Info
Company name, registration/tax IDs, contact details, address, transaction data, verification documents
Personal Info
Names, business emails, account credentials of authorized representatives
Technical Info
IP addresses, browser/device data, usage patterns, cookies/tracking data
Third-Party Info
Data from carbon registries, I-REC registries, auditors, public sources
| Type | Visitor | Registered User |
|---|---|---|
| Data collected | Cookies, Web Beacon data, Name, Email | IP, KYC (Company Name, Email, PAN, CIN, GST, Bank Details), Project Developer info |
| Purpose | Analytics, lead generation, respond to queries | Security, KYC onboarding, project onboarding |
Right to be Informed
Know how your personal data is collected or used.
Right of Access
Access the personal data you have provided.
Right to Rectification
Amend or update inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data.
Right to Restrict
Stop processing all or some of your data.
Right to Object
Object to processing, especially for direct marketing.
Right to Data Portability
Get a copy of your data in electronic format.
No Automated Decisions
Not be subject to solely automated decision-making.
With service providers under confidentiality agreements
With carbon/I-REC registries or auditors for validation
For legal compliance or protection of rights
During business transactions (e.g., mergers), with safeguards
With your consent
We do not sell your information.
We implement industry-standard technical and organizational measures using SSL, TLS, RSA, and AES encryption. We adhere to the SOC standard for Information Security Management Systems.
Access Control
Access granted only to authorized personnel on a need-to-know basis, logged and monitored.
Data Encryption
AES-256 encryption at rest, TLS in transit for all sensitive personal data.
Network Security
Intrusion detection, monitoring systems, and strict access controls.
Regular Audits
Security audits and assessments to identify vulnerabilities.
Incident Management
Protocols for managing and responding to security incidents and breaches.
Employee Training
Regular training to ensure compliance with security policies.
We store personal data as long as necessary to facilitate your use of Services and for legitimate business purposes — improving Services, technical issues, and disputes.
We may retain data even after deletion requests to comply with legal obligations, resolve disputes, and enforce agreements.
Contact our DPO at dpo@compliancekart.io to exercise your privacy rights.
Access, correct, delete your information. Restrict processing, request data portability, or opt out of marketing.
support@envr.earthWe use essential, analytics, and marketing cookies to improve the Platform. Manage preferences via browser settings or our consent tool.
Your data may be processed globally. We use safeguards (e.g., Standard Contractual Clauses) for international transfers.
We may update this policy and will notify you of material changes. Updates take effect upon posting.
Contact our Grievance Officer for concerns, complaints or feedback pertaining to this Policy.
Organization
Compliance Kart Pvt Ltd
Address
Colmantstraße 15, 53115 Bonn, Germany