Lock23 Privacy Policy

Welcome to Lock23. This Privacy Policy outlines how Lock23 (“Company,” “we,” “us,” or “our”) collect, use, disclose, and protect the information we obtain from you through your use of Lock23.com (the “Website”) and our related services (collectively, the “Services”). By using any part of our Services, you consent to the collection, use, and disclosure of your information as outlined in this Privacy Policy.

Article I: Information Collection

1. Personal Data: We collect personal data necessary to register and manage your account, including your email address and password. Additional personal data may include contact names, addresses, email addresses, and other identifying details of suppliers and facilities that you voluntarily provide.
2. Business Information: Information related to the electricity usage within your upstream supply chain, which may include total electricity consumption and your organization’s proportional share, as well as identifying details of supply chain facilities.
3. Transactional Data: We process information related to the energy attribute certificates (EACs) you upload and financial transactions carried out via our Services.
4. Technical Data: Automatically collected information about your internet connection, the devices you use to access our Services, and usage details. This may include data collected via cookies and other tracking technologies.

Article II: Use of Collected Information

The collected information is utilized to:

• Facilitate the provision of our Services;
• Validate EACs with external registries;
• Provide audit trails and redemption labels for emissions disclosures;
• Manage and perform our business operations.

Article III: Disclosure of Information

Your personal information may be disclosed to:

• Permissioned service providers and third parties who assist in the operation of our Services and who are bound by confidentiality agreements.
• Comply with any judicial order, law, or legal process, including responding to government or regulatory requests, in accordance with applicable law.

Article IV: Data Security

We are committed to protecting the security of your personal information. Currently, critical data such as user credentials are encrypted using industry-standard practices through our cloud service provider Supabase, while our hosting provider Vercel provides continuous scans and vulnerability reports. We are pursuing SOC2 certification and advise against uploading highly sensitive information until these security measures are fully operational.

Article V: Data Retention and Destruction

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with our legal obligations. Data can be destroyed upon request.

Article VI: Rights and Choices of Users

Depending on your jurisdiction, you may have rights to access, correct, delete, or transfer your personal information. Requests to exercise these rights can be directed to our Data Protection Team using the contact details below.

Article VII: Amendments to the Privacy Policy

This Privacy Policy may be amended from time to time. All amendments will be posted on this page and are effective immediately upon posting. We encourage you to review this Privacy Policy regularly to stay informed of any changes.

Article VIII: Contact Information

For questions or concerns regarding this Privacy Policy, please contact us at:

Lock23 – Data Protection
30 N Gould Street
Sheridan, WY 82801
Email: privacy@lock23.com
Website: www.lock23.com