Privacy Policy

1.Who We Are and Our Affiliate

Delnotic Global LLC ("Delnotic", "we", "us" or "our") is a single-member limited liability company registered in the State of Wyoming, USA, with its registered address at 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Its Bangladesh Office is at House #416 (4th Floor), Lane #7, Baridhara DOHS, Dhaka-1206, Bangladesh, the premises of its affiliate Delnotic Limited. Delnotic provides environmental-markets advisory, carbon and renewable-energy project development, decarbonization and ESG reporting services, and facilitates the procurement and retirement of environmental attributes for corporate clients.

Delnotic is the controller of personal information processed under this Privacy Policy (the "Policy"). Where we process personal information solely on a client's instructions (for example, supplier data within an ESG data project), we act as that client's processor or service provider, and the client's privacy notice governs.

Our relationship with Delnotic Limited

Delnotic Global LLC and Delnotic Limited are affiliated companies that share the "Delnotic" name and management. They are separate legal entities:

• Neither company owns shares or membership interests in the other. They are affiliates under common management, not a parent and subsidiary.
• Each company keeps its own bank accounts, accounting records and tax registrations, and contracts and invoices only in its own name. Clients of Delnotic Global LLC pay only Delnotic Global LLC.
• Neither company is responsible for the other's contracts, debts or obligations unless it has agreed to that in writing.
• Where Delnotic Limited personnel support a Delnotic Global LLC engagement, they do so under a written intercompany services agreement on arm's-length terms, and Delnotic Global LLC remains responsible to its client.
• Track-record figures on this Website, such as numbers of multinational and manufacturing clients, include work delivered by Delnotic Limited in Bangladesh, including before Delnotic Global LLC was formed in 2026.

2.Scope of this Policy

This Policy applies to personal information we process when you visit delnotic.com (the "Website"), book a consultation, contact us, become a client, supplier, project owner or counterparty, or otherwise interact with our business. Our services are provided to businesses; the individuals whose information we process are mainly representatives, employees, directors, owners and signatories of those businesses. This Policy should be read together with our Terms & Conditions.

3.Information We Collect

We do not intentionally collect sensitive personal information (such as health, religious or biometric data) and ask that you do not send it to us. Government identification numbers are collected only where required for KYC and are handled with restricted access.

4.How We Collect Information

• Directly from you — when you email or call us, book a meeting, complete onboarding forms or sign agreements.
• From your organization — when your employer or a client provides your details as a contact, signatory or beneficial owner.
• From third parties — Registries and standards bodies, validation and verification bodies, counterparties in a transaction, sanctions and compliance screening databases, public company registers, and professional networks.
• Automatically — through cookies and server logs when you use the Website.

5.How We Use Information and Legal Bases

We do not use personal information for automated decision-making that produces legal or similarly significant effects on you, other than the screening described in Section 6, which is always subject to human review.

6.KYC, AML and Sanctions Screening

To comply with anti-money-laundering, counter-terrorist-financing, anti-bribery and sanctions laws — including those administered by the U.S. Office of Foreign Assets Control (OFAC) — and the requirements of Registries and our banking partners, we verify the identity of clients and counterparties and their beneficial owners and screen them against sanctions, PEP and adverse-media lists before and during a business relationship.

If you do not provide information we need for these checks, we may be unable to provide services or complete a transaction. Where the law requires, we may disclose information to competent authorities, including suspicious activity reports, without informing you.

7.How We Share Information

We share personal information only as needed for the purposes above, and with recipients bound by confidentiality or data-protection obligations:

• Registries and standards bodies — such as the I-REC(E) registry operated by Evident, the Verra Registry, the Gold Standard Impact Registry, and plastic-credit, JCM or government registries, to open accounts and to issue, transfer, redeem or retire environmental attributes.
• Validation and verification bodies and other independent auditors engaged on a project.
• Transaction counterparties — buyers, sellers and registry account holders, only to the extent needed to complete and evidence a transaction.
• Government authorities — including host-country authorities for Article 6 authorization, and tax, regulatory and law-enforcement authorities where required by law.
• Banks and payment institutions — to process payments and to respond to their compliance and due-diligence requests.
• Service providers — acting on our behalf, including email and productivity services (Google Workspace), meeting scheduling (Calendly), website hosting and content-management services, compliance-screening tools, and professional advisers such as lawyers, accountants and auditors.
• Our affiliate Delnotic Limited (Bangladesh) — acting as our service provider under the intercompany services agreement described in Section 1, only where needed to deliver a service you requested, and subject to this Policy.
• Business transfers — to a successor in connection with a merger, acquisition or reorganization, subject to equivalent protections.

8.Public Registry Records

Environmental-attribute registries publish certain records, which may include the name of a retirement or redemption beneficiary, the purpose of retirement and the account holder. These records are generally public and permanent under the registry's rules and cannot be deleted by Delnotic. We will confirm with you the beneficiary details to be published before instructing any retirement or redemption.

9.International Data Transfers

Delnotic operates in the United States and, through its Bangladesh Office and its affiliate Delnotic Limited, in Bangladesh. Our service providers and Registries may process data in other countries, including the United States, the United Kingdom, Switzerland and member states of the European Union. These countries may have data-protection laws different from those in your country. Where required, we protect transfers using appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, and we limit transfers to what is necessary.

10.Data Retention

• KYC, due-diligence and transaction records: at least five (5) years after the end of the business relationship or the date of the transaction, or longer if required by law, a Registry or an authority.
• Contracts, invoices and accounting records: for the period required by applicable tax and corporate laws (generally up to seven (7) years).
• Project documentation: for the crediting period of the project and any period required by the applicable standard for verification and audit.
• Enquiries and marketing contacts: up to three (3) years after our last interaction, or until you ask us to stop.
• Website analytics data: no longer than twenty-six (26) months.

When information is no longer needed, we securely delete or anonymize it.

11.Data Security

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), multi-factor authentication on business accounts, role-based access restricted to personnel who need it, restricted storage of identity documents, and confidentiality obligations for personnel and service providers. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

Please send identity documents only through the secure channel we specify during onboarding, and never send bank or identity information in response to an email you have not verified with us.

12.Cookies and Similar Technologies

The Website uses cookies and similar technologies:

• Strictly necessary cookies — required for the Website and its content-management system to function securely. These cannot be switched off.
• Analytics cookies — where used, these help us understand how visitors use the Website in aggregate so we can improve it.
• Third-party content — embedded or linked services such as Calendly scheduling, Google Fonts and LinkedIn may set their own cookies or receive your IP address when you interact with them, under their own privacy policies.

You can block or delete cookies through your browser settings; blocking strictly necessary cookies may affect how the Website works. We honor Global Privacy Control (GPC) signals as a request to opt out of any sale or sharing of personal information where applicable law requires it.

13.Your Privacy Rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and receive a copy;
• correct inaccurate or incomplete information;
• request deletion of your information;
• restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
• receive your information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a data-protection authority.

To exercise these rights, email business@delnotic.com with the subject line "Privacy Request". We will verify your identity before acting and respond within thirty (30) days, or within any other period required by applicable law. Some rights are restricted by law — for example, we must retain KYC and transaction records for the periods in Section 10 even if you request deletion. We will not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with proof of authorization.

14.U.S. State Privacy Disclosures

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia and others) may have rights under state privacy laws to the extent those laws apply to Delnotic. In the preceding twelve (12) months, we have collected the categories of personal information described in Section 3 (identifiers, professional information, commercial information, internet activity and, for KYC only, government identifiers), from the sources described in Section 4, for the purposes in Section 5, and disclosed them for business purposes to the recipients described in Section 7. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not knowingly collect personal information of consumers under 16.

15.EEA and UK Disclosures

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may apply to our processing of your information. The legal bases we rely on are set out in Section 5, and you have the rights described in Section 13, including the right to complain to your local supervisory authority. You may contact us at business@delnotic.com for any request under these laws.

16.Marketing Communications

We may send business contacts occasional updates on environmental markets and our services. You can opt out at any time by using the unsubscribe link in any message or by emailing us. We will continue to send messages necessary for an ongoing engagement or transaction.

17.Children's Privacy

The Website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

18.Third-Party Websites

The Website links to third-party websites, including Registries, standards bodies and social networks. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

19.Data Breach Response

If we become aware of a security incident affecting your personal information, we will investigate promptly, take steps to contain it, and notify affected individuals, clients and authorities where required by applicable law.

20.Changes to this Policy

We may update this Policy to reflect changes in our practices or the law. The updated version will be posted on this page with a revised "Last updated" date. If changes are material, we will provide additional notice where appropriate.

21.Contact Us

For questions about this Policy or our handling of personal information, contact:

© 2026 Delnotic Global LLC. All rights reserved. See also our Terms & Conditions.