Privacy Notice
Use of your personal information
This Privacy Policy outlines how Net Zero Group handles your personal information. When you use our services, you trust us with your data, and we take that responsibility seriously. This document explains how we collect, use, and protect your personal information.
Introduction
This Privacy Policy covers Net Zero Group and its associated websites, including netzero.co.uk, ioffset.io, and the carbon management platform NetScope.pro (together referred to as “our Websites”).
All of our Websites are owned and operated by Net Zero Group Ltd, a privately owned company registered in England & Wales. Our registered office is located at: 121–122, 3 Hardman Square, Spinningfields, Manchester, M3 3HF, United Kingdom.
By using our Websites, you agree to the way we handle and protect your personal information as described in this Privacy Policy.
Under the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), Net Zero Group Ltd is the data controller responsible for your personal data across our Websites
This Privacy Policy explains how we collect, use, store, and share business and personal data when providing carbon accounting and reporting services through the NetScope platform. We are committed to protecting the privacy and security of your information in accordance with all applicable data protection and privacy laws.
Data Protection Legislation
For the purposes of this Privacy Notice, “Data Protection Legislation” means: All applicable data-protection and privacy legislation in force from time to time in the UK, including the retained EU-law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR); the Data Protection Act 2018 (DPA 2018) (and regulations made thereunder); and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) as amended.
About NetScope
NetScope enables organisations to measure and report their carbon footprint by collecting and analysing business activity data — for example, utilities, fuel usage, waste, business travel, and procurement — and converting that into greenhouse-gas emission figures in accordance with established standards such as the GHG Protocol.
Data We Collect
To deliver comprehensive carbon accounting and reporting covering Scope 1 (direct), Scope 2 (indirect energy) and Scope 3 (other indirect) emissions, NetScope collects and processes a range of business and limited personal data which enables us to calculate and report emissions for your business operations.
This below is illustrative and not exhaustive — the exact data required depends on the agreed reporting scope.
Business & Operational Data:
We may collect data such as, but not limited to:
- Utility consumption (electricity, gas, water, heating and cooling)
- Fuel usage for company-owned or leased vehicles, equipment, refrigerants, on-site generation
- Waste generation, disposal weights, recycling treatment methods
- Business travel logs, accommodation records, employee commuting modes (if applicable)
- Procurement and purchase-ledger data (spend and supplier information) to estimate emissions from purchased goods and services (Scope 3.1) and other supply-chain activities
- Transportation / distribution records (logistics, freight, courier)
- Capital-goods, investment and asset-register data (as applicable)
Financial & Supplier Data
We may process:
- Purchase-ledger, accounts-payable or procurement-system records
- Supplier-provided environmental / sustainability data (emission factors, life-cycle assessments)
- Operational metadata (cost centres, project codes)
This information is used solely to support emissions estimation and reporting, and never for unrelated business purposes.
Personal Data
While NetScope primarily handles business data, limited personal data may be included in the information provided by clients, such as:
- Contact details of client representatives (name, email, job title)
- Employee travel or expense data relevant to emissions reporting
All personal data is minimised and used only for the purposes described in this notice. Under the Data Protection Legislation, we must always have a lawful basis for using personal data. The following table describes how we may use your personal data, and our lawful bases for doing so:
| What We Do | What Data We Use |
| Supplying our products and services to you. | Name, email and card details. |
| Managing payments for our products and services. | Card details |
| Personalising and tailoring our products services for you. | Your full name to create ambassador pages. |
| Communicating with you. | Email address. |
| Supplying you with information by email and that you have opted-in-to (you may opt-out at any time by selecting to do so) | Email address. |
How We Use the Data
We process data to:
- Calculate and report carbon emissions for our clients’ business operations
- Provide sustainability insights, benchmarking and compliance reporting
- Maintain and enhance the accuracy and performance of NetScope
- Communicate with clients regarding their account, services or updates
- Comply with our legal and regulatory obligations
Cookies
What are cookies:
As is common practice with almost all professional websites netzerogroup.io uses cookies, which are tiny files that are downloaded to your computer, to improve your experience. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or break certain elements of the site’s functionality.
How We Use Cookies:
We use cookies for a variety of reasons detailed below. Unfortunately, in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.
Disabling Cookies:
You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of this site. Therefore it is recommended that you do not disable cookies.
The Cookies We Set:
When you submit data through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence. In order to provide you with a great experience on this site we provide the functionality to set your preferences for how this site runs when you use it. In order to remember your preferences we need to set cookies so that this information can be called whenever you interact with a page that is affected by your preferences.
First Party Cookies:
- Cookie Name: XSRF-TOKEN
- Description: Cookie used to help prevent Cross-site request forgery
- Expiration Time: 2 hours
Third Party Cookies:
In some special cases we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site. Net Zero Group Services use Google Analytics which is one of the most widespread and trusted analytics solutions on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.
Lawful Basis for Processing:
We rely on the following legal bases under the UK GDPR:
- Contractual necessity: To deliver carbon-reporting services to our clients
- Legitimate interests: To operate, maintain and improve our software and services
- Legal obligation: To comply with applicable environmental or financial regulations
- Consent: Where explicitly required (e.g. for marketing communications)
Processing Data and Data Subject:
We hold and process NetScope Enterprise Data as a Controller, which means we must have a lawful basis for doing so under the Data Protection Legislation.
When relying on legitimate interest, we believe the processing is necessary for our legitimate business purposes — namely, to operate and develop our services.
We consider that:
- The use goes no further than data subjects or client data processors would reasonably expect;
- It aligns with the interests of the client (by supporting a sustainable business model); and
- It is unlikely to adversely affect the rights and freedoms of data subjects.
Data Sharing and Transfers:
Data may be shared only with:
- Service providers supporting NetScope’s operations (e.g. secure cloud hosting, IT support, analytics)
- Net Zero Group’s services are hosted by Amazon Web Services (AWS) in London, UK.
- Regulatory authorities or auditors (where legally required)
- Internal team members of Net Zero Ltd bound by confidentiality agreements
Data Retention:
We retain data only for as long as necessary to fulfil the purposes described in this notice or to meet legal requirements. When data is no longer required, it is securely deleted or anonymised
Data Security:
We implement appropriate technical and organisational measures to protect data against unauthorised access, alteration, disclosure or destruction — including encryption, access controls, and regular security audits.
Cookies and Website Data:
When you use our website, we may collect website-use information as set out in our website privacy policy, such as IP address, browser type, referring URL and exit URL. We use cookies to improve functionality and user experience; you may disable certain cookies via browser settings, though this may affect site performance.
Hosting:
NetScope (and all Net Zero Group Services) is hosted on Amazon Web Services (AWS) infrastructure, specifically within the Amazon Relational Database Service (RDS) environment located in London, United Kingdom.
AWS acts as a secure, industry-standard hosting provider with ISO 27001, ISO 27017, ISO 27018 and SOC 1/2/3 certifications. All NetScope data is stored and processed within UK-based data centres, ensuring that your data remains subject to UK data-protection law. We continually review our hosting arrangements to maintain compliance, resilience and data-security best practices.
Your Rights:
Under applicable data-protection laws you have the right to:
- Access and receive a copy of your personal data
- Request correction or deletion
- Restrict or object to processing
- Request data portability (where applicable)
- Withdraw consent (where processing is based on consent)
Contact us
Data protection Officer
Net Zero Group Ltd
121–122, 3 Hardman Square,
Spinningfields, Manchester
M3 3HF
Email address: privacy@netzero.co.uk
Telephone number: +44 (0)161 464 4946
Updates to This Notice:
We may update this Privacy Notice periodically to reflect changes in our practices, technology or legal obligations. The latest version will always be available within the NetScope platform and on our website.
