What we hold,
and why.

Last updated 12 September 2026

Who we are

Kyroq Ltd ("Kyroq", "we", "us") is a company registered in England and Wales, based in London. We publish the Carbon Loss Register, research on carbon-market evidence, and carry out scoped evidence reviews for buyers, holders, insurers, lenders, advisers and developers.

For the purposes of UK data protection law, Kyroq Ltd is the controller of the personal information described in this policy. You can reach us at contact@kyroq.com.

What this policy covers

This policy explains what personal information we collect when you use this website, send us an enquiry, or work with us; why we use it; who we share it with; how long we keep it; and the rights you have. It covers the website at kyroq.com and our correspondence with you. Work under an engagement letter is also governed by the confidentiality and data handling terms in that letter.

Information you give us

Enquiries. When you send an enquiry from the contact page we record your name, work email address, organisation, the team you belong to, the public identifier or context you give, the question you ask and any timeframe, together with the date and the page the enquiry came from. That record is kept in a Kyroq enquiries sheet in Google Workspace, and a confirmation may be sent to the address you give. The contact page also prepares an email draft you can send instead; if you use it, only what you send reaches us. Enquiries from consumer or temporary mailboxes are not recorded by the form; use the email route for those.

Register requests. If you ask for a coverage statement from the register, we record your name, work email, job title, organisation and the counts the page produced. The identifiers you paste into the coverage check are matched in your browser and are not sent to us.

Correspondence. Email you send to contact@kyroq.com or corrections@kyroq.com, and what we send back.

Engagements. When you commission a review, the contact details of the people we work with, and the documents and information you provide for the work, under the terms of the engagement letter. Please do not send confidential client files, personal data about third parties, or documents you are not entitled to share in an initial enquiry; access and handling arrangements are agreed before private material is requested.

Information collected when you use the site

We do not run analytics on this site and we set no cookies. The only thing the site stores in your browser is your motion preference, if you switch animations off, held in your browser's local storage and never sent to us.

Our hosting provider, Vercel Inc., processes the request data any web server needs to serve a page and to protect the site, including your IP address, browser type and the page requested, under its own privacy terms. We do not receive or analyse that data beyond what is needed to keep the site running.

Some historical pages, preserved as published, load fonts from Google Fonts. Your browser sends its request, including your IP address, to Google when those pages load. The redesigned pages do not.

Why we use your information, and on what basis

To answer you and to establish fit. We use enquiry details to respond, to understand the decision you face and to agree whether and how we can help. This is in our legitimate interest in running the business and, where you go on to commission work, a step taken at your request before entering a contract.

To deliver work you commission. We use the information you provide under an engagement letter to perform that engagement. This is necessary for the contract.

To tell you about the register. If you joined the register waitlist, we may write to you when a new edition publishes. This is in our legitimate interest in publishing the register to the people who asked for it, and you can stop it at any time by replying to any such message.

To meet legal and professional obligations. We keep the records that tax, accounting and company law require, and we respond to lawful requests from authorities.

To keep the site secure. Hosting request data is used to serve the site and to detect abuse. This is in our legitimate interest in operating a secure website.

We do not sell personal information, we do not use it for automated decisions about you, and we do not use it for advertising.

Who we share it with

Service providers. Google (Google Workspace, where enquiry records and email are held, and Google Apps Script, which records enquiries and sends confirmations); Vercel Inc. (website hosting); and GitHub, Inc. (source control for the website, which holds no personal information about visitors). Each processes information under its own terms and our agreement with it.

Professional advisers. Accountants and solicitors, where our business requires it.

Authorities. Where the law, a court or a regulator requires it, or to protect our rights or someone's safety.

Nobody else. In particular, we do not share who has enquired about or commissioned a review with anyone, and we keep no record of who reads the register beyond the hosting request data described above.

The register and named organisations

The Carbon Loss Register records events about carbon projects, registries, programmes and the organisations that operate or hold them, taken from published documents. It is a record of organisations and instruments, not of individuals, and we do not add personal information about individuals to it. Each entry names the document it rests on. If you represent an organisation named in the register and believe an entry is wrong, write to corrections@kyroq.com; the corrections process is published with the register and every correction is recorded as a new entry, never as a silent edit.

International transfers

Our service providers may process information outside the United Kingdom, including in the United States. Where they do, the transfer is made under the UK International Data Transfer Agreement or Addendum, or to a country or scheme the UK has found to provide adequate protection, as those providers set out in their own terms.

How long we keep it

Enquiries that do not lead to work: two years from our last contact, then deleted, unless you ask us to delete them sooner.

Engagement records: six years after the engagement ends, which is the period within which a claim could be brought, unless the engagement letter says otherwise.

Financial records: six years, as UK tax and company law require.

Waitlist details: until you ask us to stop writing to you.

Hosting request data: held by Vercel under its own retention schedule; we keep no copy.

Your rights

Under UK data protection law you can ask us for a copy of the personal information we hold about you; ask us to correct it; ask us to delete it, subject to records we must keep; ask us to restrict how we use it; ask for it in a portable form; object to processing based on our legitimate interests, including any message about the register; and withdraw consent where consent is the basis. Write to contact@kyroq.com. We respond within one month.

If you are unhappy with how we have handled your information, tell us first and we will look into it. You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.

Security

The site is served over HTTPS with a content security policy that limits where the page can load resources from and send requests to. Enquiry records are held in a Google Workspace account with access limited to the people who need it. Documents provided under an engagement are handled as the engagement letter sets out. No method of transmission or storage is completely secure, and we do not claim otherwise.

Children

This site and our services are for organisations and professionals. We do not knowingly collect personal information from anyone under 18. If you believe we have, write to us and we will delete it.

Changes to this policy

We change this policy when what the site does changes. The date at the top is the date of the current version, and material changes are noted on this page. Historical pages preserved as published are not rewritten.