V1.0
Summary
Ethical Sustainability Limited is committed to ensuring that your privacy is protected, and we comply with the General Data Protection Regulation and other applicable data protection rules (including the Data Protection Act 2018 and marketing and cookies laws, together with associated guidance) (the “Data Protection Laws”).
This website (the “website”) is run by Ethical Sustainability Limited, company no. 17331630 with registered office at Lidgett House, 56 Lidgett Lane, Garforth, England, LS25 1LL (“we” and “us”). For the purpose of the Data Protection Laws, we are the controller of the personal information processed for the purposes set out below and we are responsible for looking after it. We are registered with the ICO, with reference number ‘C’.
Please contact us if you have any questions, comments or concerns about this policy or how we handle your personal information, or if such information changes at any time.
This policy explains how we use, store and share the information we collect about you, how you can exercise your rights in respect of that information and the procedures that we have in place to safeguard your privacy.
Please note: this policy does not cover third party websites that we may link to from our website, unless specifically mentioned in this policy. We are not responsible for the privacy policies and practices (including use of cookies) of such third parties even if you accessed the third-party website using links from our website. We recommend that you check the policy of each website you visit and contact the owner or operator of such website if you have concerns or questions.
Any changes to this policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to this policy.
Data Protection
Under the Data Protection laws, we are required to explain what information we collect from you and how and why we use your personal information (the “processing activity”). We are also required to have a “lawful basis” on which to process your personal information.
Actual / Prospective Customers
(inclusive of your customers, suppliers and third parties)
Why we process your personal information:
We require your information in order to respond to enquiries, set up, maintain and manage your account/ contract and in order to comply with our statutory and regulatory obligations. A failure to provide this information will therefore unfortunately mean you will not be able to work with us and/or receive our services. Calls are recorded for training, monitoring and account management purposes.
What we collect:
Name, title, job title, workplace address, phone number, email address (of any connected person, for example a worker, employee, consultant etc.).
Lawful Basis:
The lawful basis on which we process this information is (a) because it is in our legitimate interests to do so, as we would not be able to work together without the use of this information; or (b) to comply with our legal obligations (e.g., in respect of HMRC/ taxation rules).
Where does the data come from?:
Directly from you (or the party to which we have the relationship – e.g., your employer, or managing agent).
How long do we store it:
For the duration you work with us and for 6 years following this.
To Market our Services to Prospective Customers
Why we process your personal information:
Calls are recorded for training, monitoring and account management purposes.
What we collect:
Name, title, job title, phone number, workplace address, email address.
Lawful Basis:
The lawful basis on which we process this information is because it is in our legitimate interests to do so (as we consider it necessary to review and address leads for new business).
Where does the data come from?:
Directly from you or selected third party providers. We may also occasionally verify data we hold to check accuracy with third party providers.
How long do we store it:
Our prospect base is reviewed and refreshed every 12 months.
We consider that it is reasonable for us to process your information for the purposes of our legitimate interests outlined above as: (a) we process your information only as far as is necessary for such purpose; and (b) it can be reasonably expected for us to process your information in this way. You should not provide us with any other individual’s personal information, without their knowledge.
Security
We have in place appropriate policies, rules and technical and organisational measures to protect your personal information from unauthorised or unlawful processing, and against accidental loss, destruction or damage.
We also have procedures in place to deal with any data security breach. We will notify you and any applicable regulator of a data security breach where we are legally required to do so.
The Internet and email are not secure. Your communications may route through a number of countries before being delivered, may be intercepted by third parties and may not always reach the intended recipient – this is the nature of the world wide web/Internet. We cannot accept responsibility for any such unauthorised access or loss of personal information that is beyond our control.
Sharing Your Personal Information
We will only disclose your personal information to:
- our regulators, law enforcement or fraud prevention agencies, as well as our legal advisers, courts, the police and any other authorised bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters;
- HMRC or other tax bodies or agencies to comply with our legal and regulatory obligations.
- our professional advisors (including without limitation tax, legal, insurance or other corporate advisors who provide professional services to us);
- other third-party suppliers who support us in delivering services to you. This may include (for example) the sharing of contact information to enable a third-party supplier to attend your site and carry out on-site installations of equipment/ meters;
- other third-party suppliers, business partners and sub-contractors for business administration, support, processing, services, or IT purposes;
- analytics or search engines, which enable us to optimise and improve your experience on our website; and
- third parties that you approve (including without limitation, social media sites);
We will disclose your personal information to third parties:
- to protect our rights, property, or safety, or that of our staff, our customers, or others. This includes exchanging information with other
companies and organisations (including without limitation HMRC, the local police or other local law enforcement agencies) for the purposes of staff and customer, supplier or third-party safety, crime prevention, fraud protection and credit risk reduction; - if we are under a duty to disclose or share your personal information in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.
- in order to enforce or apply our terms and conditions for the provision of services, or our terms of use applicable to our website;
- in the event we are the subject of any insolvency situation (e.g., the administration or liquidation); and
- if we, or substantially all of our assets, are acquired by a third party, in which case personal information held by us about our customers, suppliers and third parties will be one of the transferred assets;
Please note, the further processing of your personal information once shared in the way(s) set out above, is not covered by this policy. We expect (but cannot confirm) the third parties listed above will each have their own privacy policies and practices, for which we are not responsible. It is each third party’s responsibility to furnish you with a copy of its privacy notices/policy.
International Transfers of Your Personal Information
We may transfer personal information to countries other than the country in which the data was originally collected (for example, outside the UK/EEA) in order to provide you with our services. These countries may not have the same data protection laws as the country in which you initially provided the information and may not provide the same level of protection. In particular, many IT providers are based in the United States and may provide support from other locations.
If we transfer personal information to countries outside of the EEA, we may rely on a decision from the European Commission determining that the country provides an adequate level of protection to the Data Protection Laws.
Marketing and Promotional Materials
We may use your personal information to provide you with marketing and promotional materials (as stated above). We do so for our own purposes and will never share your personal information with third parties for marketing purposes.
Your Rights
You hold rights related to your personal data, the below summarises key rights you hold and can invoke. In line with the below rights, you by emailing enquiries@ethicalsustainability.co.uk you can request access to your information and specify how we are able to contact
you, including opting out of marketing materials.
To be informed
A right to be informed about the personal information we hold about you.
Of access
A right to access the personal information we hold about you.
To rectification
A right to require us to rectify any inaccurate personal information we hold about you.
To erasure
A right to ask us to delete the personal information we hold about you.
This right will only apply where (for example):
- we no longer need to use the personal information to achieve the purpose we collected it for;
- where you withdraw your consent if we are using your personal information based on your consent; or
- where you object to the way we process your data (in line with your right to restrict processing below).
To restrict processing
In certain circumstances, a right to restrict our processing of the personal information we hold about you. This right will only apply where (for example):
- you dispute the accuracy of the personal information held by us;
- where you would have the right to ask us to delete the personal information but would prefer that our processing is restricted instead; or
- where we no longer need to use the personal information to achieve the purpose we collected it for, but you need the data for the purposes of establishing, exercising or defending legal claims.
To data portability
In certain circumstances, a right to receive the personal information you have given us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal information to another organisation, at your request.
To object
A right to object to our processing of the personal information we hold about you where our lawful basis is for the purpose of our legitimate interests, unless we are able to demonstrate, on balance, legitimate grounds for continuing to process the personal information which override your rights or which are for the establishment, exercise or defence of legal claims.
In relation to automated decision making and profiling
A right for you not to be subject to a decision based solely on an automated process, including profiling, which produces legal effects concerning you or similarly significantly affect you.
To withdraw
A right to withdraw your consent, where we are relying on it to use your personal information.
Cookies
We use cookies on our website. We have a separate Cookie policy which can be found at Cookie Policy
Contact Us
We welcome your views about our website and this policy. If you would like to contact us with any queries or comments, request further information or exercise any of your available rights set out above, please contact us using the following details:
- By post: Ethical Sustainability Ltd. Lidgett House, 56 Lidgett Lane, Garforth, England, LS25 1LL
- By email: enquiries@ethicalsustainability.co.uk
If you are an existing customer, supplier or third-party partner working with us, you can also contact your usual contact person for support.
