Privacy Policy

1. Who we are

SustainAbility On Call Ltd is a sustainability consultancy providing advisory services to organisations and individuals.

For the purposes of data protection law (UK GDPR and Data Protection Act 2018), we are the data controller responsible for your personal data.

Contact details:
Email: hello@sustainabilityoncall.com

2. What data we collect

We may collect and process the following personal data:

Name
Email address
Phone number (if provided)
Organisation/company name (if relevant)
Information you provide in enquiries or project discussions
Technical data such as IP address and website usage data

This information is typically provided directly by you when you contact us or use our website.

3. How we collect your data

We collect data in the following ways:

When you contact us via email, phone, or contact forms
When you engage us for consultancy services
Automatically through website usage (e.g. cookies or analytics, if used)

4. How we use your data

We use your personal data to:

Respond to enquiries and communicate with you
Provide sustainability consultancy services
Manage client relationships and projects
Improve our website and services
Send occasional updates or communications (only where you have agreed)

5. Legal basis for processing

We process your personal data on the following lawful bases:

Contractual necessity – to provide services you request
Legitimate interests – to respond to enquiries and run our business efficiently
Consent – for marketing communications (where applicable)

Where we rely on consent, you can withdraw it at any time.

6. Sharing your data

We do not sell your personal data.

We may share your data with trusted third parties where necessary, such as:

Website hosting or IT service providers
Email and communications providers
Professional advisers (e.g. accountants or legal advisers)
Authorities where legally required

All third parties are expected to respect the security of your personal data.

7. International transfers

We aim to keep your data within the UK.
If we use service providers outside the UK, we ensure appropriate safeguards are in place to protect your information.

8. How long we keep your data

We keep personal data only for as long as necessary:

Enquiry data: typically retained for up to [e.g. 12 months]
Client/project data: retained for as long as needed for services and legal obligations

We may retain data longer where required for legal or regulatory purposes.

9. How we protect your data

We take appropriate security measures to protect your personal data, including:

Secure email and password protection
Limiting access to data
Using trusted service providers

10. Your rights

Under UK data protection law, you have the right to:

Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict or object to processing
Request data portability
Withdraw consent at any time (where applicable)

To exercise your rights, please contact us using the details above.

11. Complaints

If you have concerns about how we use your data, please contact us first.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://ico.org.uk

12. Cookies

Our website may use cookies or similar technologies to improve your experience and understand how the site is used.

You can control cookies through your browser settings.

13. Changes to this policy

We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a revised effective date.