Privacy Policy

This privacy policy explains how Terrea Services Limited (“Térrea”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you use our carbon accounting platform at terrea.earth (the “Service”).

Terrea Services Limited is a company registered in England and Wales (company number 16167772) with its registered office at 66 Paul Street, London, England, EC2A 4NA, United Kingdom.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Account information

When you create an account, we collect your name, email address, organisation name, and role. Authentication is handled by our identity provider, Clerk.

Carbon and emissions data

You may upload or connect data relating to your organisation's carbon emissions, including energy consumption, fleet vehicle usage, fuel purchases, and other environmental data necessary for emissions calculations.

Financial data

If you connect accounting integrations (such as Xero), we access transaction data including dates, descriptions, amounts, and vendor information to categorise expenses for carbon reporting purposes. We do not store payment card details — payments are processed securely by Stripe.

Usage data

We collect information about how you interact with the Service, including pages visited, features used, and actions taken. This data is collected via Vercel Analytics only when you have consented to analytics cookies.

Cookies and tracking data

We use cookies to manage consent preferences and, with your permission, to collect analytics data. See Section 9 for details on our cookie categories.

• Providing the carbon accounting service, including calculating greenhouse gas emissions using published emission factors
• Generating compliance reports (SECR, PPN 06/21, Carbon Reduction Plans)
• Categorising expenses to identify carbon-relevant activities
• Improving the accuracy and features of the Service
• Communicating with you about your account, the Service, and important updates
• Ensuring the security and integrity of the Service

We process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you have subscribed to
• Legitimate interests: Improving the Service, ensuring security, and conducting analytics (where this does not override your rights)
• Consent: For analytics cookies, marketing communications, and optional tracking tools
• Legal obligation: Where we are required by law to process or retain certain data

We share your data with the following third-party service providers, each acting as a data processor on our behalf:

• Clerk — Authentication and user management
• Convex — Database and backend infrastructure
• Vercel — Hosting and analytics (consent-gated)
• Stripe — Payment processing
• Xero — Accounting data integration (user-initiated connection only)

We do not sell your personal data. We may share anonymised, aggregated data for research or benchmarking purposes where individual organisations cannot be identified.

Some of our service providers are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO) or reliance on adequacy decisions.

We retain your personal data for as long as your account is active and as necessary to provide the Service. Upon account closure or deletion request, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining financial records).

Carbon emissions data and reports may be retained in anonymised form for benchmarking purposes after account deletion.

Under the UK GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request that we limit how we process your data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time via the consent preferences on our website

To exercise any of these rights, please contact us at contact@terrea.earth. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use a consent management tool to allow you to control which cookies are placed on your device. Our cookie categories are:

• Necessary: Essential for the Service to function (authentication, consent preferences). These cannot be disabled.
• Measurement: Help us understand how visitors use the Service (Vercel Analytics). Requires your consent.
• Marketing: Used for visitor identification and marketing purposes. Requires your consent.

You can update your cookie preferences at any time using the consent banner or preferences dialogue accessible from the footer of our website.

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security reviews and monitoring
• Secure development practices aligned with industry standards

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. The “last updated” date at the top of this page indicates when this policy was last revised.

If you have any questions about this privacy policy or how we handle your data, please contact us:

Terrea Services Limited
66 Paul Street, London, England, EC2A 4NA
Email: contact@terrea.earth
Company number: 16167772