Privacy and review scope

This information applies to the UK CBAM market-test journey. It does not change your EU reporting workflow.

Your information and the limits of this review

Upload only the records needed for your readiness check. Treat uploads and reports as confidential business records. Review labels apply only to the work and version recorded, not to overall compliance.

Upload purpose, confidentiality, review scope, retention and non-advice notices

Why these records are requested

Provide only import and supplier information needed for commodity-code scope, the two registration-threshold checks, evidence-gap reporting and your requested readiness review. Do not include passwords, authentication keys, payment-card details or unnecessary personal or sensitive information.

Confidentiality and access

Treat import records, supplier details and downloaded reports as confidential. Upload only information you are authorised to provide. Access and any external reviewer arrangements must be covered by the approved privacy information below. Do not share your account or authentication links.

What a review covers

AUTOMATED means no human review. DATA_REVIEWED covers mapping and data quality. ADVISER_REVIEWED covers the recorded evidence and readiness scope. SPECIALIST_REVIEWED covers only the named customs or tax issues. Review labels are independent, apply to the recorded version and do not clear unresolved findings.

Retention and deletion

The approved retention criteria, deletion-request route, exceptions and backup handling must be stated in the privacy information before real records are collected. Removing a browser session or withdrawing optional metrics permission does not delete uploaded records or historical reports. No unapproved deletion period is promised.

Readiness only, not formal advice

This is not formal tax or customs advice, a tax-payable calculation, HMRC registration or filing, statutory verification or a compliance certificate. Obtain appropriate professional advice for unresolved questions. The paid pilot remains an externally invoiced review, not an integrated payment or filing service.

Read privacy information and the deletion-request arrangements

Reading this notice is not marketing consent. Optional funnel metrics have their own choice. Notice version: M3.4-NOTICES-1.0.0.

Operator privacy information

Operator-approved notice, recorded 2026-09-17T10:55:44.621Z. This is not certification of production security or legal compliance.

Legal operator

GrandScope

Privacy contact

privacy@grandscope.ai

Purposes, lawful bases and roles

In accordance wiht the UK law

Providers, regions and international transfers

In accordance wiht the UK law

Retention and deletion

In accordance wiht the UK law

Backups and erasure after restoration

In accordance wiht the UK law

Reviewer access and confidentiality

In accordance wiht the UK law

Your rights and complaints

Follow the UK standard law

Data categories and sources

In compliance with the UK GDPR rules

Automated processing and its consequences

In accordance with UK GDPR

Release responsibility

In accordance wiht the UK law

Requests and downloaded copies

Send privacy and deletion requests to privacy@grandscope.ai. Do not include passwords or attach full import records to an initial request. Handling and exceptions are described above.

Downloaded copies are outside the application's direct control. Protect those copies and include them in your organisation's own retention process.

Back to UK upload entry