Privacy Policy — EcoAppraise™

Effective date: September 24, 2025
Last updated: September 24, 2025

EcoAppraise™ is operated by Carbon Blue Solutions Limited LLC (“EcoAppraise,” “we,” “us,” “our”). This notice explains what we collect, why we collect it, how we use/share it, and your rights under UK/EU and US laws. A cookie banner (powered by Usercentrics) appears on first visit to manage your choices.

1) Who we are & how to contact us

Controller: Carbon Blue Solutions Limited LLC (EcoAppraise)
Registered office (USA): 1135 Marseille Drive, Suite 1, Miami Beach, FL 33141, USA
UK contact address: c/o Steve Mayer, 167–169 Great Portland Street, London W1W 5PF, United Kingdom
Email (privacy & security): info@carbonbluesolutions.net

2) Scope

This policy applies to ecoappraise.com and related pages (e.g., Submit, Verify, Privacy Requests, Cookie Settings), to our communications, and to EcoAppraise™ reports we generate. It also covers our Consent Management Platform (Usercentrics) and our contact-form email relay (FormSubmit).

3) What we collect

• Contact details you provide (e.g., name, email, phone).

• Claim/project submissions you provide for appraisal (text, links, optional files).

• Usage data (IP address, device/browser type, pages viewed, timestamps, limited cookies, referral/UTM).

• Support correspondence (emails, contact-form messages).

• Payment data (when enabled): processed by PayPal; we do not store full card numbers.
  Not sought: government IDs, precise geolocation, or special/sensitive categories—please don’t include these in submissions.
  Sources: directly from you; automated site logs; our processors (e.g., payments, analytics—only if enabled by consent).

Contact form via email relay

If you submit our Contact form, the fields you enter (e.g., email, name, message) are transmitted to FormSubmit solely to deliver an email to us. We also keep a copy in our site database for reliability.

4) Why we use data (purposes) & legal bases

Purposes (all regions):

• Provide appraisals, scorecards, verification, and support.

• Operate, secure, and improve the service (debugging, abuse/fraud prevention, analytics).

• Communicate about service updates; marketing only with opt-in consent.

• Comply with law and enforce our Terms.

EU/UK legal bases (where applicable):

• Contract (Art. 6(1)(b)) — to deliver appraisals/verification you request.

• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, product improvement.

• Consent (Art. 6(1)(a)) — non-essential cookies/analytics and any marketing emails.

• Legal obligation (Art. 6(1)(c)) — where required by law.

5) Automated decision-making & profiling (EU/UK Art. 22)

EcoAppraise™ scoring uses automated methods. During beta, a human reviews before finalizing. You may request human review, express your viewpoint, and contest a decision by emailing info@carbonbluesolutions.net. The score may influence how others view a claim’s credibility; it is not used to grant/deny access to our service.

6) Verification privacy (how Verify works)

If a report holder shares a unique reference code, anyone may verify only: the reference number, final score, and issue date. Full reports remain private unless the holder chooses to share them. Verify visibility is generally available for 90 days from issue.

7) Cookies & similar technologies (Usercentrics banner)

We use essential cookies to run the site. Optional analytics/marketing cookies load only after your consent via the Usercentrics banner.

• Consent Management. Usercentrics displays the banner, records your choices, and shows the live vendor/cookie list. Your consent record (time, choice, pseudonymous identifier, device/browser info) is stored by Usercentrics on our behalf.

• Manage choices. Use the “Cookie settings” link in our footer at any time to change or withdraw consent.

• Payments. If you use PayPal, PayPal may set strictly necessary cookies for transactions and fraud prevention.

• Current status. Essential cookies: active. Analytics: off by default; load only if you consent. Marketing pixels: not deployed on public pages unless you consent to enable them.

8) Sharing your data

We do not sell or rent personal data. We share data with service providers acting as processors under contract, strictly for our purposes, including:

• Wix.com (website hosting/CMS, infrastructure)

• Usercentrics (consent management platform/CMP; stores your cookie/consent choices)

• FormSubmit (contact-form email relay; delivers your message to our inbox)

• Payment processors (e.g., PayPal; we do not receive full card numbers)

• Analytics/marketing tools (only if you consent; see Cookie section/banner)

We may also share with authorities where required by law or to protect rights/safety, and with a successor in a merger/acquisition (with equivalent protections).

9) International transfers

Some providers process data in countries outside your own (e.g., UK/EU → US). Where transfers occur, we use appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK IDTA/SCCs, and we assess local laws. Copies are available on request.

10) Retention

We keep data only as long as needed for the purposes above or as required by law, then delete or anonymize it.

• Contact form submissions (site database): up to 24 months

• Claims/reports: up to 24 months after completion (earlier deletion on request unless legally required to keep)

• Verify references & minimal verify data: visible for 90 days from issue, then archived/deleted

• Logs/analytics: up to 6 months

• Consent records (Usercentrics): up to 24 months (or until withdrawn)

• Payment records (via PayPal): per payment provider’s retention; we keep only what’s necessary for accounting/legal

11) Your rights

EU/UK (GDPR/UK GDPR): access, rectify, erase, restrict, object, portability, withdraw consent, and request human review of automated decisions.
US state privacy (e.g., CA/CPRA, CO, CT, VA, UT): know/access, correct, delete, portability, and non-discrimination. Appeals (VA/CO/CT): if we deny your request, you may appeal; we’ll respond with reasons and next steps.

How to exercise: email info@carbonbluesolutions.net or use /privacy-requests. We respond within 30 days (EU/UK) or 45 days (US; extendable once where permitted). We may ask for identity verification. You may complain to your local DPA or the UK ICO.

12) Cookie Policy — EcoAppraise™

Who we are. EcoAppraise™ is a service of Carbon Blue Solutions Limited LLC (“we,” “us”). This Cookie Policy explains how we use cookies and similar technologies on ecoappraise.com.

What are cookies? Small files placed on your device. Some are essential for the site to function. Others are optional (e.g., analytics or marketing) and run only with your consent via our Usercentrics banner.

Categories we use:

• Strictly necessary (always on): security, load-balancing, session management, forms, and core Wix platform features; PayPal’s technically necessary cookies during checkout.

• Functional (optional): remember choices like UI preferences.

• Analytics (optional): understand usage to improve the service (e.g., GA4 with IP anonymization).

• Advertising/Marketing (optional): measure campaigns/build audiences only if enabled by you.

Your choices. On first visit, the banner lets you accept, reject, or customize optional cookies. Change or withdraw consent anytime via “Cookie settings” in the footer. The live banner lists current cookies and vendors reflecting your choices.

US “Do Not Sell or Share.” We do not sell personal information. If you are in a state with “Do Not Sell or Share” rules, decline Marketing cookies to opt out of cross-context behavioral advertising. If we later deploy ad pixels, we will provide a “Do Not Sell or Share” link that opens the banner to the Marketing tab.

International transfers. Where providers process data outside the UK/EU, we rely on safeguards (e.g., SCCs/IDTA).

Retention. Cookies persist for their stated lifetime (see the banner) or until you delete them. Analytics data is retained up to 14 months unless configured otherwise.

13) US “Notice at Collection”

Categories collected: identifiers (name, email, phone), internet/activity data (IP, device, pages, timestamps, cookies), user-submitted content (claims, links, files), transaction data via PayPal (when used).
Sensitive personal information: not collected.
Purposes: provide/verify appraisals; security/fraud prevention; debugging/improvement; analytics/marketing (only with consent); communications.
Disclosures: service providers as described above.
Sale/Sharing: We do not sell personal information and do not “share” it for cross-context behavioral advertising unless you enable Marketing cookies. Opt out via Cookie settings (footer).
Retention: as set out in Section 10.

14) Security

We use reasonable technical and organizational measures (encryption in transit, access controls, monitoring). No system is 100% secure. Report issues to info@carbonbluesolutions.net.

15) Children

Our service is not directed to children under 13 (US) / 16 (EU/UK). If you believe a child provided data, contact us to delete it.

16) Third-party links

Third-party sites/services are governed by their own policies.

17) Changes to this policy

We may update this notice as our site or regulations change. Material changes will be highlighted on the site. The Effective date shows when it last changed.

Contact (all regions): info@carbonbluesolutions.net

Processors we use (summary)

We rely on service providers under data-processing agreements. Core processors include: Wix.com (hosting/CMS), Usercentrics (consent management), FormSubmit (contact-form email relay), PayPal (payments), and—if you consent—analytics/marketing tools listed live in the cookie banner. We remain the controller.