Clear rules. Responsible data.

This Privacy Policy explains how Klima Harvest (“Klima Harvest”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you visit our website, create or use an account, list or explore climate and sustainability projects, create an expert or organisation profile, communicate with us, attend an event, or otherwise interact with our digital services (together, the “Services”).

Where Klima Harvest determines the purposes and means of processing, it acts as the relevant data controller. Where we process personal data solely on behalf of an institutional or enterprise customer under a separate agreement, that customer may be the controller and Klima Harvest may act as processor. In that case, the customer agreement and any applicable data processing terms govern that processing.

2.1 Data you provide directly

• Identification data: name, profile photo, professional biography, organisation, role, job title and professional credentials.
• Contact data: email address, telephone number, business address and communication preferences.
• Account data: username, authentication information, account settings, language, time zone and permissions.
• Project and organisation data: project descriptions, project location, sectors, sustainability attributes, impact information, documentation, funding stage and information you choose to make visible.
• Expert data: areas of expertise, qualifications, experience, services, professional affiliations and related profile information.
• Communications: messages, support requests, feedback, survey responses, meeting notes and correspondence.
• Transaction data: billing contact details, invoice information and payment-related records where paid Services are enabled. Card data may be processed by an authorised payment provider rather than stored by Klima Harvest.
• Event data: registration information for webinars, workshops, events or programmes.

2.2 Data collected automatically

• IP address, browser, device type, operating system, device identifiers and approximate location derived from IP.
• Login time, session information, pages viewed, links clicked, features used, error logs and usage metadata.
• Cookie, pixel, SDK and similar technology data as described in our Cookie Policy.

2.3 Data from other sources

We may receive information from public sources, partner organisations, professional networks, verification providers, event partners, service providers or integrations you choose to connect. Where permitted, we may combine such data with information already held by Klima Harvest.

• Create and administer accounts, profiles, listings and permissions.
• Provide project discovery, expert discovery, introductions, collaboration and related platform functionality.
• Authenticate users, secure accounts, investigate suspicious activity and protect the integrity of the Services.
• Provide support, respond to enquiries and maintain service records.
• Improve usability, features, performance, relevance and user experience.
• Conduct analytics, research and product-development activities.
• Communicate about platform updates, events, programmes, relevant content and, where permitted, marketing.
• Maintain business records and support accounting, audit and legal functions.
• Comply with legal, regulatory, tax, reporting and law-enforcement obligations.
• Establish, exercise or defend legal claims and enforce agreements and policies.

Depending on the context and applicable law, we may process personal data because processing is necessary to perform a contract, comply with a legal obligation, pursue a legitimate interest that is not overridden by your rights, protect vital interests, or because you have provided consent. Where we rely on consent, it may be withdrawn at any time without affecting processing that was lawful before withdrawal.

Certain information is intended to be public or shared with other users. This may include project summaries, organisation profiles, expert biographies, credentials, images, impact claims and collaboration information that you choose to publish.

You are responsible for ensuring published information is accurate, lawful and does not disclose confidential, sensitive or third-party personal information without appropriate authority.

• Service providers supporting hosting, cloud infrastructure, communications, analytics, security, identity verification, customer support, payments and professional services.
• Affiliates and group entities where necessary for internal administration and provision of the Services.
• Commercial or collaboration partners where required to deliver a jointly provided service or where you have requested or authorised an introduction.
• Other platform users where information is intentionally published or shared through collaboration features.
• Professional advisers such as lawyers, auditors, accountants and insurers.
• Authorities and regulators where disclosure is required or permitted by law or necessary to protect rights, safety or security.
• Transaction counterparties in connection with a merger, restructuring, investment, acquisition, financing or sale of all or part of our business.

We require service providers to handle personal data only for authorised purposes and to use appropriate confidentiality and security safeguards.

Our providers and partners may operate in different countries. Where personal data is transferred internationally, we seek to use lawful transfer mechanisms and appropriate safeguards. These may include adequacy mechanisms, contractual safeguards, consent where legally valid, or other transfer mechanisms recognised by applicable law.

We retain personal data for no longer than reasonably necessary for the purpose for which it was collected, including providing Services, maintaining security, resolving disputes, satisfying contractual commitments and meeting legal, tax, accounting or regulatory obligations. Retention periods vary according to data type, account status, limitation periods, security needs and record-keeping obligations.

Klima Harvest uses reasonable technical, organisational and administrative measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. These may include access controls, authentication, encryption in transit where appropriate, monitoring and secure cloud infrastructure.

No internet-based service can be guaranteed to be completely secure. Users must keep account credentials confidential and should notify us promptly if they suspect unauthorised access.

We use cookies and related technologies for essential functionality, security, preferences and, where enabled and permitted, analytics, personalisation and advertising. See the Cookie Policy for more detail and available choices.

Depending on applicable law, you may have rights to be informed, request access, correct inaccurate data, request deletion, restrict certain processing, object to processing, request data portability, withdraw consent and complain to a competent data protection authority. For users in Kenya, relevant rights may arise under the Data Protection Act, 2019 and related regulations.

We may need to verify identity before completing a rights request.

You can opt out of promotional email using the unsubscribe option or by contacting us. We may still send non-promotional service messages such as security alerts, account notices, transaction messages or changes to legal terms.

Klima Harvest is designed primarily for professionals, institutions and organisations and is not intended for children. We do not knowingly collect personal data from children in circumstances where parental or guardian consent would be legally required.

Klima Harvest may use analytics, automation or AI-enabled tools to support search, matching, classification, content organisation, security, user support and product improvement. Where these tools involve personal data, we will use them in accordance with applicable law and contractual obligations.

Unless clearly stated otherwise, automated outputs are decision-support information and should not replace professional judgement or independent verification.

The Services may link to or integrate with third-party websites, tools or platforms. Those providers operate under their own privacy notices and terms. Klima Harvest is not responsible for their independent privacy or security practices.

We may update this Policy to reflect changes in our Services, technology, law or business practices. We will post the updated version with a new effective date and, where appropriate, provide additional notice of material changes.

Privacy questions and rights requests should be sent using Klima Harvest’s official contact channel.

Before launch: insert the company’s official legal entity name, registered office and dedicated privacy email address.