Who we are
Our website address is: https://clevel.co.uk.
About this notice
This notice explains what we do with your information when you use the C Level website,
one of our carbon calculators, or contact us. It was last updated on 15 September 2026.
C Level is responsible for the information described here. You can reach us at
[email protected], by phone on
+44 (0)1273 234666, or by post at The Innovation Centre, Brighton, BN1 9SB, United Kingdom.
The sections below cover what we actually do. Further down you will also find notes about
how the website software itself behaves.
If you use one of our carbon calculators
Our calculators work out the result in your own browser. You can use one and see your
answer without telling us anything about yourself.
If you ask us to send you the report, we collect:
- your email address, so we can send it;
- your company name, so we know who is asking;
- a one line summary of your result, so that if we speak later we start from what you
actually asked about; - the date.
We keep this because you asked us for something and we cannot send it otherwise. We do not
collect your phone number or your home address, and we do not try to work out who you are
beyond the company you work for.
Asking for a report does not sign you up to anything. If we want to send
you our newsletter we will ask you separately, and we will take no for an answer.
If you tell us where a flight or a journey went
Some of our calculators ask where a journey started and ended. Occasionally that is a
private place — a house, an estate, a mooring.
We never add a private location to the public list of places our calculators offer, unless
the owner has told us we may. We keep it only where something needs it: your own record, the
certificate we issue, and being able to show later what a figure was based on.
If you buy carbon credits or a certificate
We collect your name, your email address and a record of what you bought, so that we can
issue the certificate and keep the accounts.
We never see your card number. The payment is handled by Stripe. We are
shown only the last four digits and whether the payment worked.
If your organisation asks for access to one of our APIs
Our business jet emissions API is for organisations, not individuals. If you ask for access on
behalf of your organisation, we collect:
- your name, job title and work email address;
- your organisation’s legal name and, if you give it, its company number;
- the date and time you accepted our Partner Terms, the exact version you accepted, and the words
you agreed to; - what you tell us about how your organisation will use the API, such as roughly how many calls
it expects to make.
We use these details to assess and administer your organisation’s access, keep the API secure,
keep a record of the terms your organisation accepted, and meet our obligations to EUROCONTROL,
whose fuel estimation equations the API uses.
Our lawful basis is our legitimate interests in running the API for businesses, keeping it
secure, and being able to show that the terms were accepted and are being followed. You have the
right to object to this use. Write to us at the address above.
EUROCONTROL. Our licence with EUROCONTROL requires us to make sure organisations
using the API follow its conditions. If EUROCONTROL asks, or if we need to show that the conditions
are being followed, we may share with EUROCONTROL the name of your organisation and information
about how it uses the API. We share personal details, such as your name and job title, only where
that is necessary to answer EUROCONTROL’s request.
If you contact us
If you use our contact form, email us or ask for a call back, we keep what you send and
our reply, so that we can answer you and remember the conversation if you come back.
Our newsletter
You only receive our newsletter if you asked for it. Every one we send has an unsubscribe
link, and it works immediately.
If you unsubscribe we stop, and we keep your address on a suppression list. That sounds
odd, so it is worth explaining: it is the only reliable way to make sure you are never added
again by mistake.
Who else holds your information
We use a small number of established companies to run the business. They hold information
only so that they can provide their service to us.
- Brevo — our contact records and our newsletter. Held in the European Union.
- Stripe — payments. They handle the card details we never see.
- Cloudflare — carries traffic between your browser and us.
- Our website host — the website itself and our certificate records, held in
the United Kingdom.
If your organisation uses one of our APIs, we may also share information with
EUROCONTROL, as explained in the API section above. EUROCONTROL is an
intergovernmental organisation based in Brussels.
We do not sell your information to anybody, and we do not share it for anybody else’s
advertising.
How long we keep things
- Calculator reports and enquiries — two years after we last hear from you.
- Newsletter — until you unsubscribe.
- Purchases and certificates — seven years, because tax records require it.
- API access requests and acceptance of our Partner Terms — while your
organisation has access, and six years after it ends, because the record shows what was agreed.
A request we do not approve is kept for two years.
After that we delete it.
Artificial intelligence
We occasionally use AI tools to help us build our own systems and draft our own text.
We do not put your personal details into them. No AI makes any decision
about you, and no figure we give you is produced by one. Every number in our calculators comes
from a published emission factor written into our own software.
What you can ask us to do
You can ask us to show you what we hold about you, correct it, delete it, or stop using it.
You can also ask us to stop contacting you at any time, for any reason or none.
Write to [email protected] and we will
answer within one month. There is no charge and you do not need to explain why.
One honest exception: if you have bought something from us we have to keep the record of
that purchase for seven years, because tax law requires it. We will tell you if that applies
and we will delete everything else.
If you are not happy with how we have handled this
Please tell us first, so that we can put it right. If we do not, you can complain to the
Information Commissioner’s Office, the UK regulator, at
ico.org.uk/make-a-complaint
or on 0303 123 1113.
Changes to this notice
If we change how we use your information we will update this page and change the date at
the top. This notice was last updated on 15 September 2026.
How the website software behaves
The notes below describe standard features of the software the website runs on. They are
kept for completeness. Several describe features the site does not currently use.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
The C Level website does not currently accept comments, so in practice nothing described in this section is collected.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Visitor comments may be checked through an automated spam detection service.