Privacy Policy

1. Who we are

This website is operated by Infinium ("we," "us," or "our"), a company that converts waste carbon dioxide, methane and renewable power into drop-in fuels and chemicals — eSAF, mSAF, Diesel, Naphtha and Edge™ Immersion Fluids. Infinium also operates a separate data center cooling platform, Infinium Edge, at infinium.ai (opens in a new tab), which has its own privacy policy.

For the purposes of the EU General Data Protection Regulation (GDPR) and equivalent legislation, Infinium acts as the data controller for personal information collected through this website.

Our point of contact for privacy matters is info@infiniumco.com.

2. Information we collect

2.1 Information you provide directly

The contact form at infinium.energy/contact collects the following fields when you submit it: first name, last name, company (optional), work email, what your inquiry is about, and your message. Submissions are sent by email to info@infiniumco.com via our email delivery provider, Resend (see Section 5). The form includes a hidden field used only to filter automated spam submissions; it is not used to identify visitors.

If you email us directly, or use one of the mailto links in the site footer, any personal information you include in that message (such as your name, company and the content of your message) is received and processed by us directly.

2.2 Information collected automatically

When you visit this website, certain technical information is collected automatically, including:

• Your IP address (typically truncated or anonymized by our hosting provider)
• Browser type and version
• Operating system
• Referring URL and pages visited on this site
• Date, time and duration of your visit
• General geographic location (country or region, derived from IP)

This data is collected through server access logs maintained by our hosting and content delivery provider, Cloudflare, Inc. It is used to maintain site security, diagnose technical problems and understand aggregate traffic patterns. This data is not used to identify individual visitors.

2.3 Analytics

We use Google Analytics (GA4) to understand how visitors interact with this site — for example, which pages are most viewed and how long visitors stay. We do not use analytics data to build individual user profiles or serve targeted advertising, and we have not enabled Google's advertising features for this property.

3. How we use it

We use the information described above to:

• Respond to inquiries submitted through our contact form or by email
• Operate, maintain and improve this website
• Monitor for and respond to security threats or technical issues
• Understand aggregate visitor behavior to improve site performance and content
• Comply with legal obligations

We do not use your information to send unsolicited marketing emails, sell your data to third parties, or build advertising profiles.

3.1 Legal bases for processing (GDPR)

For visitors in the European Economic Area (EEA) or United Kingdom, our processing relies on the following lawful bases under Article 6 GDPR:

• Legitimate interests (Art. 6(1)(f)) — for server logs, security monitoring and aggregate analytics, where our interest in operating a secure and well-performing website is not overridden by your rights
• Consent (Art. 6(1)(a)) — for any non-essential cookies or tracking, where we request your consent before placing them
• Pre-contractual steps (Art. 6(1)(b)) — where you contact us to inquire about fuel offtake, feedstock supply, technology licensing, or another commercial matter, and we process your email to respond

4. Cookies & tracking technologies

Cookies are small text files stored on your device by your browser. This website does not set any first-party advertising cookies. Certain third-party resources embedded in or served alongside this page may set their own cookies; these are described in Section 5.

Strictly necessary

Our hosting infrastructure (Cloudflare) may set cookies strictly necessary for network security, bot mitigation and load balancing. These cannot be disabled without affecting site functionality.

Analytics cookies

Google Analytics sets session-level cookies to distinguish unique visits. These do not contain personally identifiable information and are not shared for advertising purposes.

Managing cookies

You can control or delete cookies through your browser settings. Disabling cookies may affect certain website features. This site does not currently display a cookie-consent banner; if we introduce non-essential cookies that require consent under applicable law, we will add a consent mechanism at that time. Useful general guidance is available at aboutcookies.org (opens in a new tab).

5. Third-party services

This website uses the following third-party services. Each has its own privacy policy governing how it handles data collected during delivery of its service:

Google Fonts note: when your browser loads fonts from fonts.googleapis.com, Google receives your IP address and browser information as part of the standard HTTP request. Google states it does not use this data to track individual users across the web or build advertising profiles.

6. Sharing & disclosure

We do not sell, rent or trade your personal information to any third party. We may share information only in the following limited circumstances:

• Service providers — trusted vendors who help us operate this website (e.g., our hosting, CDN and email delivery providers), bound by contractual data-processing obligations
• Legal requirements — where we are required to disclose information by law, court order or governmental authority
• Business transfers — in the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction. We will notify affected individuals before data is subject to a materially different privacy policy
• Protection of rights — where disclosure is necessary to protect the rights, property or safety of Infinium, our users, or the public

7. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by applicable law.

• Contact-form submissions and email correspondence — retained for as long as the business relationship is active plus a reasonable period thereafter (typically up to 3 years) for follow-up and record-keeping
• Server access logs — typically retained for 30–90 days for security and diagnostic purposes, then deleted or anonymized
• Analytics data — aggregated and anonymized; retained indefinitely in aggregate form. Raw session data, where collected, is retained for no more than 14 months

8. International data transfers

Infinium is based in the United States. If you visit this website from the EEA, UK, or another jurisdiction with data protection laws, your information may be transferred to and processed in the United States or other countries.

Where required by applicable law, such transfers are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. Third-party service providers (see Section 5) may process data in multiple jurisdictions pursuant to their own transfer mechanisms.

9. Your privacy rights

9.1 EEA & UK residents — GDPR rights

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data in certain circumstances ("right to be forgotten")
• Restriction — request that we limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing
• Lodge a complaint — with your local supervisory authority. In the UK, that is the Information Commissioner's Office (ICO)

9.2 California residents — CCPA / CPRA rights

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have the right to:

• Know what categories and specific pieces of personal information we have collected, disclosed, or sold
• Delete personal information we have collected, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising. No opt-out is required
• Non-discrimination — we will not discriminate against you for exercising any CCPA right

To exercise your California rights, contact us at info@infiniumco.com with "California Privacy Request" in the subject line. We will respond within 45 days as required by law.

9.3 Canadian residents — PIPEDA

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

• Access the personal information we hold about you
• Challenge the accuracy and completeness of the information and have it amended
• Withdraw consent for the collection, use, or disclosure of your personal information, subject to legal and contractual restrictions and reasonable notice
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

9.4 Exercising your rights

To make any privacy rights request, contact us at info@infiniumco.com. We may need to verify your identity before processing your request. We will respond within 30 days, or within the timeframe required by your jurisdiction's law.

10. Children's privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us at info@infiniumco.com and we will promptly delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify you, for example by posting a notice on the website.

We encourage you to review this page periodically. Your continued use of the website after any update constitutes acceptance of the revised policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Infinium
Privacy inquiries
info@infiniumco.com

Disclaimer: This Privacy Policy is provided for informational purposes and represents our current data practices. It is not legal advice. If you have specific legal concerns about your rights, we recommend consulting a qualified attorney in your jurisdiction.