Privacy Policy

Last updated: February 2026

Canopi ("we", "us") operates the website getcanopi.eco and the Canopi Eco Claims Index. This policy explains what data we collect, why, and how we handle it.

What we collect

Website visitors: We do not use cookies, analytics trackers, or any third-party tracking scripts on getcanopi.eco. We do not collect any personal data from visitors browsing the site.

Brand enquiry form: If you submit the "For Brands" form (hosted by Typeform), we collect: your name, work email address, brand name, website URL, and role. This data is used solely to prepare and deliver your compliance report. Typeform processes this data under their own privacy policy.

Eco Claims Index data: Our automated scanner analyses publicly available web pages (sustainability pages, product listings) of fashion brands. We collect only the text content of environmental claims, the URL, and the brand name. We do not collect any personal data of website visitors, employees, or customers of the brands we scan.

How we use your data

• Form submissions — to contact you about your compliance report and related services
• Public brand data — to generate transparency scores and claim compliance assessments published in the Eco Claims Index

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Data storage and security

Form submissions are processed by Typeform (EU-based) and stored securely by our team. All data is encrypted in transit.

Your rights

Under the UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

Legal basis for processing

Form data: Consent — you voluntarily submit your information through the enquiry form.

Public web content: Legitimate interest — analysing publicly available commercial web pages to provide transparency reporting and regulatory compliance information in the public interest.

Data retention

Form submissions are retained for as long as necessary to deliver the requested service and maintain the business relationship. You can request deletion at any time. Brand scanning data is retained indefinitely as part of the public Eco Claims Index.

Third-party services

• Typeform — form hosting (EU-based, GDPR compliant)

We may use additional service providers for hosting and data management. All providers are selected for their security and privacy standards.

Changes to this policy

We may update this policy as our services evolve. Material changes will be noted with an updated date at the top of this page.