Privacy Policy

Last updated: 16.02.2022

This Privacy Notice describes how The Net Zero Index (referred to as either “The Net Zero Index”, “We”, “Us” or “Our”) collects, uses and discloses Personal Data relating to:

Collectively, we refer to Users and Shareholders / Directors as You throughout this Notice, though there are some sections which relate solely to either Users or Shareholders / Directors, and we have identified those by using those specific terms.

The Net Zero Index (The Beehive, City Place, Gatwick, RH6 0PA) is the data controller of Personal Data processed under this Privacy Notice.

Interpretation and Definitions


The words of which the initial letter is capitalised have meanings defined under the following conditions.

The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.


For the purposes of this Privacy Notice:

Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data you provide

While using Our Website, We may ask You to provide Us with certain Personal Data that can be used to contact or identify You. Such Personal Data may include, but is not limited to:

When You pay for a product and/or a service via bank transfer, We may ask You to provide information to facilitate this transaction and to verify Your identity. Such information may include, without limitation:

Personal Data relating to Shareholders / Directors

For Shareholders / Directors whose Personal Data is processed on request by a Client, We may process the following Personal Data:

Note that we will not share any such individual assumed ethnicity, but instead provide Clients (on request) with a company-level tag indicating (where relevant) that a majority of the Directors in that company are assumed to be from an ethnic minority background.

Usage Data

Usage Data is collected automatically when using the Website.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Website that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Website by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Website or when You access the Website by or through a mobile device.

Tracking Technologies and Cookies

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

We use cookies and similar tracking technologies to track the activity on Our Website and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Website.

You can instruct Your browser to refuse all cookies or to indicate when a cookie is being sent. However, if You do not accept cookies, You may not be able to use some parts of our Website.

Cookies can be “Persistent” or “Session” cookies. Persistent cookies remain on your personal computer or mobile device when You go offline, while Session cookies are deleted as soon as You close your web browser. Learn more about cookies: All About Cookies.

We use both session and persistent cookies. For more information about the cookies we use and your choices regarding cookies, please visit our Cookies Policy.

Use of Your Personal Data

The Net Zero Index may use Personal Data collected via the Website for the following purposes:

The Net Zero Index may use Personal Data collected on Directors for the following purposes:

Sharing and Disclosure of Your Personal Data

For Users, We may share/disclose your Personal Data  in the following situations:

For Shareholders / Directors, We may share your Personal Data in the following situations:

For both Users and Shareholders / Directors, We may share your Personal Data in the following situations:

Other legal requirements: We may disclose Your Personal Data in the good faith belief that such action is necessary to: comply with a legal obligation; protect and defend the rights or property of The Net Zero Index; prevent or investigate possible wrongdoing in connection with the Service; protect the personal safety of You or the public; protect against legal liability.

Retention of Your Personal Data

The Net Zero Index will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Notice. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Website, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at The Net Zero Index’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers in a country which is different to the country in which You are located and where the data protection laws may differ.

The Net Zero Index will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Notice and no transfer of Your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of Your Personal Data.

Security of Your Personal Data

The security of Your Personal Data is important to Us. We use appropriate technical and organisational measures to protect Your Personal Data. The measures We use are designed to provide a level of security appropriate to the risk of processing Your Personal Data.

Detailed Information on the Processing of Your Personal Data

Service Providers have access to Your Personal Data only to perform their tasks on Our behalf and are obligated not to disclose or use it for any other purpose.


We may provide paid products and/or services on the Website or otherwise in connection with The Net Zero Index’s Services and Reports. In that case, we may use third-party services for payment processing (e.g. payment processors).

We will not store or collect Your payment card details. That information is provided directly to our third-party payment processors whose use of Your Personal Data is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

When You use our Website to pay a product and/or service via bank transfer, We may ask You to provide information to facilitate this transaction and to verify Your identity.

Legal Basis for Processing Personal Data

Our legal basis for collecting and using the Personal Data described within this Privacy Notice will depend on the Personal Data concerned and the specific context in which We collect it.

However, We will normally collect Personal Data from You only where We need the Personal Data to perform a contract with You, where the processing is in Our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms, or where You have given Your consent to the processing. In some cases, We may also have a legal obligation to collect and process Your Personal Data, or may otherwise process the Personal Data in the public interest or where it is necessary in order to protect Your vital interests or those of another person.

Where The Net Zero Index processes special category personal data (specifically, assumed ethnicity of Shareholders / Directors) this is on the basis of substantial public interest and in particular the equality of opportunity or treatment condition, as permitted under the UK Data Protection Act 2018.

In any case, The Net Zero Index will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract. For more information, please contact us using the details within this Privacy Notice.

Your Data Protection Rights

The Net Zero Index undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

You have the right under this Privacy Notice, to:

You may exercise any of Your data protection rights by contacting us using the details in this Privacy Notice.

Children’s Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect Personal Data from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Website may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Notice

We may update Our Privacy Notice from time to time in response to changing legal, technical or business developments. When We update Our Privacy Notice, We will take appropriate measures to inform You, consistent with the significance of the changes We make. You can see when this Privacy Notice was last updated by checking the “Last updated” date at the top of this Privacy Notice.

Contact Us

If you have any questions about this Privacy Notice, You can contact us: