Privacy Policy
Contents
1. Who we are
This Privacy Notice explains how Greenworks Technology Solutions Pvt Ltd, operating as “ClimeUp” (“we”, “us”, “our”), collects and processes personal data. ClimeUp provides an AI-powered enterprise sustainability intelligence platform for ESG reporting, carbon accounting, decarbonization, and regulatory compliance (including CBAM).
We are a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) for the personal data described in this notice. Where our services are used by individuals in other regions, we also aim to align with comparable laws, including the EU/UK GDPR.
Registered office: GF 40, Ground Floor, Elco SEZ, TIDEL Park Coimbatore Ltd, Villankurichi Road, Coimbatore – 641014, Tamil Nadu, India
Contact: grievance@climeup.ai (see Section 12 for our Grievance Officer)
2. Our two roles: Data Fiduciary and Data Processor
We handle personal data in two distinct capacities, and your rights depend on which applies:
As a Data Fiduciary, we decide the purpose and means of processing. This covers people who contact us, request a demo, subscribe to communications, apply for jobs, or use our website — i.e. the data we collect directly.
As a Data Processor, we process personal data on behalf of our enterprise customers when that data is contained within the operational, supply-chain, or emissions data our platform ingests from their systems. In that case, the enterprise customer is the Data Fiduciary and determines the purpose; we act under our contract with them. Data Principals whose data is processed in this capacity should contact the relevant enterprise customer to exercise their rights, and we will assist that customer as required.
This notice primarily describes our activities as a Data Fiduciary. Our processor obligations are governed by our customer agreements and Data Processing Addenda.
3. Personal data we collect
a)When you request a demo or contact us
First name, last name, work email, country code and phone number, company name, your area of interest, how you heard about us, and any information you include in the free-text message field.
b)When you subscribe to marketing communications
Name and email address, and your communication preferences.
c)When you use the ClimeUp platform (account holders)
Account identifiers, name, business email, role, authentication data, and usage/activity logs.
d)When you apply for a role with us
Name, contact details, CV/résumé, work history, and any information you provide during recruitment.
e)Data ingested through integrations (processor capacity)
Where our customers connect systems such as SAP, Oracle, Salesforce, utility, HR, or logistics platforms, the ingested datasets may contain personal data (for example, employee commute or travel records, or supplier and contact details used for Scope 3 calculations). We process this only on our customer's instructions — see Section 2.
f)When you visit our website
Device and browser information, IP address, and cookie/analytics data — see Section 6.
We do not intentionally collect special categories of sensitive data through our public forms. Please do not include such data in free-text fields.
4. Purposes and legal basis
We process personal data for the following purposes. Where we rely on consent, you may withdraw it at any time (Section 5).
| Purpose | Data used | Basis under DPDP |
|---|---|---|
| Respond to demo/contact requests and provide sales and support | Section 3(a) | Consent / to take steps at your request |
| Send newsletters and marketing communications | Section 3(b) | Consent (separate opt-in) |
| Provide, secure, and improve the ClimeUp platform | Section 3(c) | Performance of our contract with your organisation / legitimate purpose |
| Recruitment | Section 3(d) | Consent / steps prior to employment |
| Process customer data via integrations | Section 3(e) | On behalf of the customer (processor) |
| Operate and secure our website and analytics | Section 3(f) | Consent for non-essential cookies; legitimate purpose for essential ones |
| Comply with legal, tax, and regulatory obligations | As relevant | Legal obligation |
5. Consent and how to withdraw it
Where we rely on your consent, it is specific, informed, and freely given, and you can withdraw it as easily as you gave it. To withdraw:
Marketing: click “unsubscribe” in any marketing email, or email grievance@climeup.ai.
Any other consent-based processing: email grievance@climeup.ai or contact our Grievance Officer (Section 12).
Withdrawing consent does not affect processing carried out before withdrawal, and may mean we can no longer provide a related service.
6. Cookies and tracking
Our website uses cookies and similar technologies. Essential cookies are required for the site to function. Non-essential cookies — such as analytics cookies used to understand how visitors use our site — are used only where you have given consent through our cookie banner, and you can change your choices at any time through the cookie settings on our website. The banner lists the specific cookies we use, their purposes, and their retention periods.
7. How we share personal data
We share personal data only as needed:
Service providers / processors who help us operate — such as our cloud hosting, email/CRM, and analytics providers. Each is bound by contract to protect your data and process it only on our instructions.
Professional advisers, auditors, and authorities where required by law.
In a business transfer (merger, acquisition, or reorganisation), subject to this notice.
We do not sell your personal data.
8. Cross-border transfers
ClimeUp operates across multiple countries, so your personal data may be processed outside your country of residence, including on cloud infrastructure located in other jurisdictions. We transfer personal data only to jurisdictions not restricted by the Government of India under the DPDP Act, and we apply appropriate safeguards (such as contractual protections) where required by applicable law.
9. Data retention
We keep personal data only as long as necessary for the purposes above:
Demo and contact enquiries: up to 24 months after our last interaction with you.
Marketing subscribers: until you unsubscribe or withdraw consent, after which your details are removed from marketing lists within 30 days.
Platform account data: for the term of the relevant customer agreement, plus up to 90 days for orderly return or deletion.
Recruitment data: up to 12 months after the conclusion of the recruitment process, unless you consent to a longer period for future opportunities.
When personal data is no longer needed, we securely delete or anonymise it, unless a longer period is required by applicable law.
10. Security
We maintain reasonable security safeguards appropriate to the data we hold, supported by our SOC 2 Type II and ISO 27001 programmes, including access controls, encryption in transit and at rest, logging, and regular review. No system is perfectly secure, but we work to protect personal data against unauthorised access, disclosure, or loss.
11. Your rights as a Data Principal
Subject to applicable law, you may:
Access a summary of the personal data we process about you and our processing activities.
Correct, complete, or update your personal data.
Erase your personal data where it is no longer required.
Nominate another individual to exercise your rights in the event of death or incapacity.
Withdraw consent (Section 5).
Raise a grievance and have it addressed (Section 12).
Individuals in other regions may have additional rights (such as data portability or objection under the GDPR). To exercise any right, email grievance@climeup.ai. We will respond within the timelines required by law and may need to verify your identity first. These services are provided free of charge.
12. Grievance redressal
If you have any concern or complaint about how we handle your personal data, please contact our Grievance Officer:
Grievance Officer: Mr. Thiruvenkateswaran Ramachandran
Email: grievance@climeup.ai
Address: Greenworks Technology Solutions Pvt Ltd, GF 40, Ground Floor, Elco SEZ, TIDEL Park Coimbatore Ltd, Villankurichi Road, Coimbatore – 641014, Tamil Nadu, India
We will acknowledge and address your grievance within the period required under the DPDP Act. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India.
13. Children's data
Our services are intended for business/enterprise use and are not directed at children. Where the DPDP Act applies, we do not knowingly process the personal data of children (individuals under 18 in India) without verifiable parental/guardian consent, and we do not carry out tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child's data has been provided to us, contact our Grievance Officer for prompt removal.
14. Changes to this notice
We may update this notice from time to time. The “Last updated” date shows the latest version, and we will notify you of material changes where required.
15. Contact
Greenworks Technology Solutions Pvt Ltd (operating as ClimeUp)
GF 40, Ground Floor, Elco SEZ, TIDEL Park Coimbatore Ltd, Villankurichi Road, Coimbatore – 641014, Tamil Nadu, India
Grievance Officer: Mr. Thiruvenkateswaran Ramachandran · grievance@climeup.ai
© 2026 ClimeUp / Greenworks Technology Solutions Private Limited. All rights reserved.