Privacy Policy

1. Who We Are

GreenKPO is operated by KPO Data Limited, a company registered in Ireland.

Privacy enquiries: dataprotection@greenkpo.com

2. What Data We Collect

Account and Business Information

• Company name and company number
• Business address
• Organisational structure
• Account holder information
• Billing information

Platform Data

• Commuting patterns
• Business travel
• Devices used
• Work locations
• Utility usage

IT Data

• Hardware devices
• Energy usage
• IT infrastructure information

Financial Data

• Invoice information
• Asset ledger data
• Expense summaries
• Spend categories

Uploaded Documents

• Utility data
• Expense data summaries

3. Personal Data

Some information processed through the platform may include:

• Employee names
• Employee email addresses

Where possible, data may be pseudonymised to reduce identification risk.

4. How We Collect Data

• Forms and surveys
• File uploads
• API integrations
• Usage analytics

5. Why We Collect Data

• Calculate carbon emissions
• Generate reports
• Provide platform functionality
• Manage billing and accounts
• Improve services
• Communicate with users

6. Legal Basis For Processing

• Contract performance
• Legitimate interests
• User consent where required

7. Data Sharing

Data may be shared with trusted service providers including:

• Stripe (payments)
• AWS (hosting)
• MongoDB (database services)
• Google Analytics
• SendGrid

We do not sell personal data.

8. Data Storage and Transfers

• Data is stored within the EU.
• No international transfers outside the EU.

9. Data Retention

Data is retained for up to three years to support ongoing services and legal obligations.

10. Your Rights

Access

You may request access to your personal data.

Deletion

Deletion requests should be made through your organisation's administrator.

Data Portability

Individual users cannot directly export data but may submit a formal access request.

11. Security

• Encryption
• Access controls
• Secure hosting infrastructure

12. Cookies and Tracking

• Essential cookies
• Analytics cookies
• Marketing cookies where applicable

13. Children's Data

GreenKPO is not intended for users under 18 years of age and does not knowingly collect children's data.

14. Contact and Complaints

dpo@greenkpo.com

clientservices@greenkpo.com

15. Changes To This Policy

We may update this Privacy Policy from time to time and notify users of significant changes where appropriate.