Privacy Policy
Last updated: 30 May 2026
Who we are
BiomassChains is a specialist biomass supply-chain advisory and execution practice. For this website, BiomassChains is the controller of personal data submitted through the contact form or created by normal website operation.
What we collect
- Mandate enquiry data - name, email, company and the project context included in your message.
- Anti-spam and form metadata - basic timing and page-path information used to protect the contact form.
- Technical logs - IP address, user agent, request details and error logs used to operate and secure the site.
- Cookieless analytics - aggregated page-usage information through Plausible Analytics.
Why we use it
- To assess and respond to serious mandate enquiries - including whether the enquiry has a defined geography, feedstock, volume, buyer, investor or project-owner context.
- To operate and secure the website - including spam prevention, troubleshooting and service reliability.
- To understand website performance - using privacy-focused, aggregated analytics rather than advertising trackers.
- To meet legal and accounting obligations - where a paid engagement follows.
Legal bases
- Pre-contract steps - where you ask us to consider or respond to a mandate enquiry.
- Legitimate interests - operating a secure website, screening unsuitable enquiries and understanding aggregate site use.
- Legal obligation - where records must be retained for tax, accounting or regulatory reasons.
Analytics
The site uses Plausible Analytics. Plausible is designed to operate without cookies or persistent cross-site identifiers. It gives aggregate information such as page views and referrers, not individual visitor profiles.
Who receives data
Data may be processed by service providers needed to run the site and respond to enquiries, including website hosting/CDN, email delivery, analytics and professional advisers where necessary. We do not sell personal data.
How long we keep it
- Mandate enquiries - typically up to 24 months, unless a paid engagement, legal issue or continuing commercial context requires longer retention.
- Technical logs - typically 30 to 90 days, unless needed longer for security or troubleshooting.
- Engagement records - retained as needed for contract, legal, accounting and professional obligations.
International transfers
Some service providers may process data outside the UK or EEA. Where required, appropriate safeguards such as standard contractual clauses or equivalent protections are used.
Your rights
You can request access, correction, deletion, restriction, portability or object to certain processing. You also have the right to complain to the UK Information Commissioner's Office. Use the contact page for privacy requests.
Cookies
See the Cookies Policy for details of cookies and similar technologies.
Updates
This notice may be updated as the site or services change. The current version will be kept on this page.