Envr Ledger

Data protection

Privacy Policy

How we collect, use, and protect your information on the Envr platform.

Last updated: 27-10-2026

Compliance Kart Pvt. Ltd. operates Envr Ledger, a B2B platform for carbon accounting and sustainability reporting, helping businesses and financial institutions track their emissions and meet disclosure requirements

By consenting to this Policy and accepting the Terms of Use, you agree to the collection, use, and transfer of your personal information as outlined. We review this Policy periodically. Registered users will be notified of changes before continuing to use our services.

01Information We Collect

Business Info

Company name

Personal Info

Names, business emails, phone number

Technical Info

IP addresses, browser/device data, usage patterns, cookies/tracking data
TypeVisitor
Data collectedCookies, Web Beacon data, Name, Email
PurposeAnalytics, lead generation, respond to queries

02Your Rights as a Data Subject

Right to be Informed

Know how your personal data is collected or used.

Right of Access

Access the personal data you have provided.

Right to Rectification

Amend or update inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data.

Right to Restrict

Stop processing all or some of your data.

Right to Object

Object to processing, especially for direct marketing.

Right to Data Portability

Get a copy of your data in electronic format.

No Automated Decisions

Not be subject to solely automated decision-making.

We do not collect special categories of personal data or data from children. Contact our DPO at dpo@compliancekart.io to exercise your rights.

03How We Share Your Information

  • With service providers under confidentiality agreements
  • For legal compliance or protection of rights
  • During business transactions (e.g., mergers), with safeguards
  • With your consent

We do not sell your information.

04Data Security

We implement industry-standard technical and organizational measures using SSL, TLS, RSA, and AES encryption. We adhere to the SOC standard for Information Security Management Systems.

Access Control

Access granted only to authorized personnel on a need-to-know basis, logged and monitored.

Data Encryption

AES-256 encryption at rest, TLS in transit for all sensitive personal data.

Network Security

Intrusion detection, monitoring systems, and strict access controls.

Regular Audits

Security audits and assessments to identify vulnerabilities.

Incident Management

Protocols for managing and responding to security incidents and breaches.

Employee Training

Regular training to ensure compliance with security policies.

05Data Retention

We store personal data as long as necessary to facilitate your use of Services and for legitimate business purposes — improving Services, technical issues, and disputes.

We may retain data even after deletion requests to comply with legal obligations, resolve disputes, and enforce agreements.

Contact our DPO at dpo@compliancekart.io to exercise your privacy rights.

06Your Rights

Access, correct, delete your information. Restrict processing, request data portability, or opt out of marketing. support@envrledger.com

07Cookies

We use essential, analytics, and marketing cookies to improve the Platform. Manage preferences via browser settings or our consent tool.

08International Transfers

Your data may be processed globally. We use safeguards (e.g., Standard Contractual Clauses) for international transfers.

09Policy Updates

We may update this policy and will notify you of material changes. Updates take effect upon posting.

10Grievance Officer

Contact our Grievance Officer for concerns, complaints or feedback pertaining to this Policy.

Organization
Compliance Kart Pvt. Ltd.
Address
Colmantstraße 15, 53115 Bonn, Germany