Privacy Policy

This policy explains how Carbon Strategic Management Group Ltd ("CSMG", "we", "us") collects and uses personal data when you use this website or enquire about our services. CSMG is the trading name we use in day-to-day business. We are the data controller for the information described here.

Who we are

Carbon Strategic Management Group Ltd (company number 14475481), registered office 15 Cambridge Road, Granby Industrial Estate, Weymouth, Dorset DT4 9TJ. Our correspondence address is 15 Cambridge Road, Granby Industrial Estate, Weymouth, Dorset DT4 9TJ. You can reach us at info@csmg.org.uk or on 0800 0803 200.

Data protection enquiries can be directed to Paul Hines, Director, at info@csmg.org.uk or 15 Cambridge Road, Granby Industrial Estate, Weymouth, Dorset DT4 9TJ.

What we collect

Depending on the service you ask about, we may collect:

• Contact and business details you give us directly, such as your name, job title, business name, email address, telephone number, site address and anything you include in an enquiry message.
• Information needed to compare energy tariffs or manage a switch, such as your current supplier, tariff, consumption figures, meter details (MPAN or MPRN) and copies of recent bills.
• Supply contract information we hold or process on your behalf when arranging an energy switch.
• Information needed to quote for or deliver installation work (solar, EV charging, or mains electrical), such as building and roof details, site survey notes, photos, access arrangements and technical specifications.
• Property and building information needed for an EPC assessment, including layout, construction, heating, lighting and any documents you provide for the visit.
• Information needed to explore finance options, where you choose to do so, such as business details and information required by the finance provider for an application. Finance is always optional.
• Records of our correspondence with you by phone, email or post.
• Anonymous, aggregated website usage statistics from our host (Netlify Analytics), such as page views and referrers. This does not identify you personally and is not used to track you across other websites.

We do not knowingly collect personal data from anyone under 18. Our services are aimed at businesses and business decision-makers.

Why we use it, and our lawful basis

• To respond to enquiries and prepare quotes, because doing so is necessary to take steps at your request before entering a contract.
• To deliver services you have engaged us for, including comparing tariffs, processing supply contracts on your behalf, liaising with suppliers, finance partners and installers, and carrying out EPC work, as performance of a contract.
• To meet legal and regulatory obligations, such as lodging EPC certificates on the national register, as a legal obligation.
• To improve the website and our services, in our legitimate interests in running the business effectively.
• To ask for feedback or a testimonial after work is complete, in our legitimate interests in understanding how we did and promoting our services. You are never obliged to respond.
• To send marketing where you have asked us to, on the basis of consent, which you can withdraw at any time. We do not currently run a newsletter or promotional mailing list.

Who we share it with

We share information only where it is needed to provide the service you have asked for. That may include energy suppliers we are comparing on your behalf or switching you to, specialist finance providers where you choose to explore funding, accredited assessors carrying out EPC work, and installation subcontractors. We also use service providers who host this website and handle form submissions (Netlify). We do not sell your data.

Third-party websites

This website may link to other sites, including energy suppliers, finance partners, and social media pages. Those sites have their own privacy policies and we are not responsible for how they handle your information. We encourage you to read their policies before providing personal data on those sites.

How we contact you

We may contact you by email, telephone, or post when that is needed to respond to information you have asked for, to fulfil a contract with you, or for other purposes described in this policy where we have a legitimate interest in doing so (for example, following up on an enquiry, keeping you informed about work in progress, or asking whether you would be willing to provide feedback or a testimonial).

International transfers

Some of our service providers store or process data outside the UK, including Netlify (United States), which hosts this website and handles form submissions. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the provider's standard contractual clauses or equivalent protections required by UK data protection law.

How long we keep it

Enquiries that do not lead to work are kept for up to two years so we can pick up the conversation if you come back to us. Client records are kept for the duration of the relationship and then for six years, in line with standard business and tax record-keeping requirements. EPC records are retained as required by the national register.

If we sell or restructure the business

If CSMG or its assets are sold, merged, or the business is restructured or wound up, personal data we hold may be transferred to the successor organisation as part of that process, subject to the same protections described in this policy.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to ask us to transfer it to another provider. Where we rely on consent, you can withdraw it at any time. Contact Paul Hines, Director, at info@csmg.org.uk or write to us at 15 Cambridge Road, Granby Industrial Estate, Weymouth, Dorset DT4 9TJ. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies and analytics

We do not use third-party analytics or advertising cookies on this site. We do not use Google Analytics, Meta Pixel, or similar tracking tools. We do not embed third-party widgets such as chat tools, maps, or social media feeds that set their own cookies.

The site may use cookies or similar technology that are strictly necessary for hosting and for the contact form to work (for example, security and session cookies provided by Netlify). Those are essential for the service and do not require consent.

For understanding how the site is used, we use Netlify Analytics. That is a first-party, privacy-focused analytics service run by our host. It provides anonymous, aggregated statistics (such as page views) without using client-side tracking scripts that identify individual visitors, and it does not require a cookie consent banner. We do not use it to build profiles of you or to track you on other sites.

If we ever introduce non-essential cookies or third-party tracking, we will update this policy and ask for your consent where the law requires it.

Security

We take appropriate technical and organisational measures to protect personal data, including encrypted connections to this website and restricted access to enquiry records.

Changes to this policy

We may update this policy from time to time. Any changes take effect when published on this page. The date at the top shows when it was last revised.