Legal Documentation

UK GDPR Data Processing Notice

Supplementary notice for business users — Article 13 / 14 compliance

Effective date: 9 April 2026 · Version 1.0 · Archimedes Lever Ltd (Co. 16859569)

This notice supplements our Privacy Policy with the specific information required by Articles 13 and 14 of the UK GDPR, as incorporated into UK law by the Data Protection Act 2018.

2.1Data controller details

Controller nameArchimedes Lever Ltd
Trading nameCBAM Proof
Company number16859569
Registered address71-75 Shelton Street, Covent Garden, London WC2H 9JQ
Contact emaillegal@cbamproof.co.uk
ICO registrationRegistered — ZC174458

2.2Categories of personal data processed

  • Identity data: name, job title
  • Contact data: business email address
  • Business data: company name, EORI number, VAT number
  • Commercial data: import volumes, commodity types, country of origin
  • Technical compliance data: emissions intensity values, CPR calculations, monitoring period records
  • Behavioural data: platform usage, report access timestamps

2.3Special category data

CBAM Proof does not intentionally collect special category data (Article 9 UK GDPR). Please do not submit any such data.

2.4International transfers

  • Anthropic PBC (USA) — UK International Data Transfer Agreement (IDTA) in place
  • HeyGen Inc. (USA) — UK IDTA in place
  • Supabase Inc. (USA / EU hosting) — EU region hosting; Standard Contractual Clauses apply

2.5Automated decision-making

CBAM Proof uses automated calculation to generate CBAM liability estimates following the statutory methodology in Regulation 5 of the CBAM Regulations 2026. These are informational estimates only — not binding HMRC determinations.

2.6Data minimisation

EORI and VAT numbers are collected solely for importer identification per Regulation 2 of the CBAM Administrative Provisions Regulations 2026. Identity data is required only for the paid Readiness Audit — the free calculator may be used anonymously.