Privacy Policy

Privacy Policy for SABZA 

Welcome to SABZA — a blockchain-powered platform that simplifies and secures compliance with global carbon trading frameworks, including ITMOs (Article 6.2), Article 6.4 mechanisms, and CORSIA offsets.

Your privacy is important to us. This Privacy Policy explains how sabza.me collects, uses, stores, and protects your personal and transactional data when you visit sabza.me or use any of our related digital services (“Services”).

1. Purpose

This Privacy Policy ensures transparency in how we process your personal and transactional data, including blockchain-recorded activities, in accordance with international data protection laws and carbon compliance frameworks.

2. Information We Collect

We collect personal and technical data to provide secure access to our Services.

2.1 Information You Provide

When you use SABZA, we may collect:

• Full name, organization name, and contact details (email, phone number).
• Account registration information (username, password, KYC/AML verification data).
• Transactional information (carbon credit trades, ITMO purchases, or CORSIA offset records).
• Payment and billing information (handled via secure third-party gateways).
• Any content or communications you submit to us (support requests, feedback, etc.).

2.2 Automatically Collected Information

When you interact with our platform, we automatically collect:

• IP address, browser type, device information.
• Login timestamps, access logs, and activity records.
• Blockchain wallet address (if applicable).
• Usage analytics through cookies and similar tracking technologies.

2.3 Blockchain Data

When you perform a transaction or register a project on SABZA, certain details (e.g., project ID, transaction hash, issuance or retirement of carbon credits) may be recorded immutably on a public or permissioned blockchain.

While this data is transparent, personally identifiable information (PII) is not stored directly on the blockchain.

3. How We Use Your Information

We process your information to:

• Operate, maintain, and improve the SABZA platform.
• Facilitate carbon credit registration, validation, transfer, and retirement.
• Verify user identity and ensure KYC/AML compliance.
• Enable secure blockchain-based transactions.
• Send technical updates, compliance notifications, or marketing communications (with your consent).
• Conduct audits and fulfill legal, regulatory, or contractual obligations.
• Enhance cybersecurity and fraud prevention.
• We never sell your personal data to third parties.

4. Legal Basis for Processing

We process your data under the following legal grounds:

• Contractual necessity — to deliver Services you have requested.
• Legal obligation — to comply with carbon trading, AML/KYC, or taxation laws.
• Legitimate interest — to improve services, maintain security, and prevent fraud.
• Consent — where required for marketing or data analytics.

5. Data Storage & Security

We use end-to-end encryption, multi-layer authentication, and secure cloud infrastructure to protect your data.

While blockchain records are immutable, any off-chain personal data is securely stored and subject to deletion or anonymization upon request (where legally possible).

We implement:

• TLS/SSL encryption for data in transit.
• Encrypted databases for data at rest.
• Access control and logging systems.
• Continuous monitoring for unauthorized access attempts.

6. Data Retention

We retain your data only as long as necessary to:

• Fulfill our legal and contractual obligations.
• Resolve disputes and maintain transaction integrity.
• Comply with audit or regulatory recordkeeping requirements.
• Blockchain data, by its nature, cannot be altered or deleted once recorded.

7. Sharing and Disclosure

We may share information with:

• Regulatory bodies (UNFCCC, national carbon registries, ICAO, etc.) as required for compliance.
• Service providers who help operate our systems (e.g., hosting, payment, analytics).
• Auditors and verifiers authorized under carbon trading frameworks.
• Law enforcement or government agencies, when legally obligated.
• All third parties are bound by confidentiality and data protection obligations.

8. International Data Transfers

Your data may be processed in jurisdictions other than your own (e.g., data centers in the EU or Asia).

We ensure appropriate safeguards — such as Standard Contractual Clauses (SCCs) or equivalent — to protect your data during cross-border transfers.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Obtain a copy of your personal data.
• Rectification: Correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal data (excluding immutable blockchain records).
• Restriction: Limit data processing under certain conditions.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to data processing based on legitimate interest.
• Withdraw Consent: Opt out of marketing or optional data uses at any time.

To exercise your rights, email contact@sabza.me with your request.

10. Cookies and Analytics

SABZA uses cookies and tracking technologies to:

• Improve user experience and performance.
• Collect aggregate analytics data.
• Support secure login sessions.

You can disable cookies in your browser settings, though this may limit site functionality.

11. Children’s Privacy

Our Services are intended for professional users and organizations.

We do not knowingly collect data from children under 18. If we discover such data, we delete it immediately.

12. Updates to this Policy

We may update this Privacy Policy periodically to reflect new technologies, regulatory requirements, or platform changes.

We will post the revised version on this page with a new “Last Updated” date.

Significant changes will be communicated via email or platform notice.

13. Contact Us

For privacy concerns, data access requests, or general inquiries, contact:

📧 contact@sabza.me

🌐 https://sabza.me

🏢 SABZA Ltd., Cariocca Business Park, Sawley Road, Miles Platting, Manchester M40 8BB, United Kingdom