Privacy Policy

Last updated: September 20, 2026

1. Who this policy covers

CBAM Calculator ("we", "our", or "us") is operated from within the EU/EEA. The site is not run by a separate registered company, and no further corporate or individual identity is published here beyond the contact address below. If you need a more formal controller identification than this policy currently gives, contact us and we will provide what we can.

This is a deliberately minimal disclosure, not a claim of full compliance with every detail GDPR Art. 13 asks a controller to state.

2. What data exists, and where

The honest answer differs by tool, so this is grouped by what actually happens rather than by a generic list:

Stays in your browser — never sent to us

The calculator, pre-check, HS code lookup, invoice analyzer and executive audit tools all compute entirely on your device. The product code, quantity, origin, emissions figures and invoice text you type or paste into these tools are never transmitted anywhere — there is no server that receives them. The invoice analyzer only reads plain-text (.txt) files you open locally; it does not upload PDFs or images, and cannot process them at all. Your cookie choice (see §7) is stored the same way, in your browser's localStorage.

Submitted only if you fill in a form

Four forms send data to us, and only when you choose to submit them: the contact form (name, email, company, subject, message); the supplier data form (company and contact details, installation, product and energy data a supplier enters); the supplier kit request (your email, company, and supplier's country); and the short "what would you want?" response shown under a calculator or executive audit result (your message, an optional email, and the calculation you were looking at — never a company name unless you type one into the message). All four are delivered through Formspree, a third-party form processor; see §4.

Collected automatically, only if you accept analytics

We use Google Analytics (GA4) for standard visit and usage statistics — but only once you choose "Accept All" in the cookie banner. If you choose "Essential Only", analytics stays switched off for that browser; see §7 for how to change this at any time.

3. Why, and on what legal basis

Each purpose below is paired with the GDPR Art. 6(1) basis that actually applies to it:

  • Running the tools in your browser — no legal basis is needed, because nothing of yours is processed by us; the computation never leaves your device.
  • Responding to a form you submitted — Art. 6(1)(a), consent: submitting the form is the consenting act, for exactly what that form says it is for.
  • Analytics — Art. 6(1)(a), consent, given or withheld through the cookie banner and revisable at any time.
  • Responding to a lawful request from an authority — Art. 6(1)(c), legal obligation, should one ever be made. This has not happened; it is stated as a standing possibility, not a report of anything that occurred.

4. Who we share data with

We do not sell data, and we do not have "business partners" data is shared with — that line was in an earlier version of this policy and was not true. What is actually true:

  • Formspree processes every form submission on our behalf. It is a separate company with its own privacy policy and retention practices, which we do not control — see Formspree's privacy policy.
  • Google operates Analytics, used only if you consent. Google's own policies govern that data — see Google's privacy policy.
  • A lawful authority, if legally compelled to disclose.

5. How long data is kept

An earlier version of this policy stated "calculator usage data is retained for up to 24 months". That figure did not correspond to anything real — calculator inputs are never sent to us in the first place, so there is nothing of that kind for us to retain, for 24 months or any other period. What we can honestly say:

  • Calculator, pre-check, HS lookup, invoice analyzer, executive audit and savings inputs: not retained by us, because never received by us.
  • Form submissions: retained inside Formspree's system for however long Formspree's own policy provides — we do not operate that storage and do not set its retention period.
  • Analytics data, if you consented: retained per Google Analytics' own configured retention setting, not a duration we set ourselves.
  • Your cookie choice: stays in your browser's localStorage until you clear your browser data or change it yourself (see §7).

6. Your rights (GDPR)

Under EU GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability
  • Withdraw consent at any time

For anything submitted through a form, we can act on this for our own copy of it; deleting it from Formspree or Google's systems may also require contacting them directly, since we do not control their storage. To exercise these rights, contact us using the information below.

7. Cookies

We use one essential cookie-like storage entry to remember your consent choice, and Google Analytics cookies if you accept them. You can change your choice at any time using the "Cookie Settings" link in the footer of every page — it reopens the same banner you saw on your first visit. For more detail, see our dedicated Cookie Policy.

8. Contact us

For privacy-related inquiries, please email us at [email protected] or use our contact form.