Privacy Statement and Cookies

The Environment Exchange (t2e) is committed to protecting the privacy of its clients. Any information t2e collects will be treated in accordance with the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR) and other applicable laws.

t2e’s Privacy Statement explains the use of cookies on this website and all other sites run by t2e, and outlines the types of personal information t2e collects and what steps t2e takes to safeguard that information.

How does t2e collect information?

t2e collects information by:

recording telephone calls for dispute resolution and training purposes;
recording and responding to a request by you, either submitted through t2e’s website, by email, business card or in t2e’s participation and application forms;
using cookies on the website www.t2e.co.uk, as described below.

Cookies

A cookie is a small file a website saves in your browser. If you would like to know more about cookies, or how to control or delete them, visit allaboutcookies.org.

Cookies we always use

Form protection (Google reCAPTCHA). When you start filling in one of our forms, Google reCAPTCHA loads to protect the form from spam. It may set a cookie called _GRECAPTCHA. See the Google Privacy Policy.
Your cookie choice. We remember whether you accepted or rejected analytics cookies, in your browser’s local storage under the name t2e-consent, for 12 months.
Trading platform session. A session cookie is set when you visit https://markets.t2e.co.uk, the trading section of t2e’s website. It holds a string of characters (a session ID) unique to your visit. It keeps you logged in as you move between pages, and it also allows t2e to tell which pages you have visited.

Cookies we only use if you accept them

Google Analytics (_ga and _ga_*, kept for up to two years). These tell us which pages people visit, how long they stay, how they found the site and what they click on. Google Analytics only loads if you choose “Accept analytics cookies”. See Google’s privacy policy.

You can change your choice at any time with the “Cookie preferences” link at the bottom of every page.

Video

Our homepage video is hosted by Vimeo. Nothing loads from Vimeo until you press play, and the player is set not to track you.

What information does t2e collect?

Participant company information is collected, as are any personal details, such as name, address and email address, and any sensitive details, such as date of birth or mother’s maiden name, that you provide.

The website allows those personnel authorised by participant companies to view information held about them and their company, such as that listed above, and current orders, trades awaiting settlement and full company trading history.

Your IP address (your computer’s individual identification number, which contains no personal details) and your browser’s user agent (information about your web browser and platform) are automatically logged by t2e’s web server.

The purposes for which personal data is processed

t2e retains your personal data for the purposes of sending you information you have requested, or during t2e’s application process, or in certain cases to send you information. In such a case you will be offered the option to opt out of receiving this information. Sensitive data is solely used for security.

t2e does not distribute any gathered data to third parties unless requested to do so by law.

The legal basis for processing (and any applicable legitimate interests)

t2e has a legitimate interest in obtaining this information, as without it, it would be unable to maintain and improve the service it provides to the public and its participants.

What security measures are being taken

Use of the marketplace services provided by t2e is protected by issuing individual user names and passwords to the authorised personnel of participant companies, which can only be set and changed by them. Encrypted (TLS) communication is used between the web server and your browser to ensure the privacy and security of t2e’s web server and user browsers.

All data is held on secured servers featuring:

Full patching with the latest security updates
Firewall protection for all server access
Access limited to authenticated t2e users
Malware protection, in place and monitored

Backup procedures are in place and monitored to ensure data is not lost.

t2e internal systems are password protected and only available to authorised t2e staff.

Retention periods

All telephone calls are deleted thirteen months after they are recorded, unless they have been retained for the purposes of law or dispute resolution.

Sensitive information will be retained for as long as that individual is authorised to use t2e’s services on behalf of a participant company.

Is personal data being transferred outwith the EEA?

No personal or sensitive data is transferred outwith the EEA.

Personal data can only be accessed by t2e employees for the purposes described in this policy.

How to complain

If you have any concerns about our use of your personal information, we would welcome the opportunity to resolve them first. We can be contacted:

by email: info@t2e.co.uk
by telephone: +44 (0) 131 526 3023
by post: The Environment Exchange, Hudson House, 8 Albany Street, Edinburgh EH1 3QB

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO, the UK supervisory authority for data protection issues.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
Website: ico.org.uk/make-a-complaint

Right to be forgotten

You can ask t2e to update or remove any personal information it holds by emailing info@t2e.co.uk or by writing to the address below.

The Environment Exchange
Hudson House, 8 Albany Street
Edinburgh
EH1 3QB

Tel: +44 (0) 131 526 3023
VAT No: 804 1331 78
Registered in Scotland No: SC225230

Privacy Statement