Privacy Policy
1. Who we are
This website, sustainesg.io (the "Site"), is operated by RMC Technologies Limited, a company registered in England and Wales under company number 14545818, with its registered office at 29 Lincoln's Inn Fields, London, WC2A 3EE, United Kingdom. "Sustain ESG Lab" is a trading name of RMC Technologies Limited.
For the purposes of the UK General Data Protection Regulation ("UK GDPR"), the EU General Data Protection Regulation ("EU GDPR"), and other applicable data protection laws, RMC Technologies Limited is the controller of the personal data described in this policy.
Contact for privacy matters: hello@sustainesg.io.
2. What this policy covers
This policy explains what personal data we collect when you visit the Site, why we collect it, the legal bases we rely on, who we share it with, how long we keep it, and the rights you have. The Site publishes ESG research about listed companies; the personal data we process about visitors is limited and is described below.
3. Personal data we collect
| Category | What it includes | How it is collected |
|---|---|---|
| Technical and log data | IP address, browser type and version, device and operating system, pages visited, referring page, date and time of access | Automatically, via our hosting provider's server logs when you visit the Site |
| Contact data | Name, email address, organisation, and the content of your message | Directly from you, when you contact us by email or through a form on the Site |
The Site does not require you to create an account, and we do not knowingly collect special-category data or data relating to children. The Site is not directed at children.
4. Why we process your data and our legal bases
- Operating and securing the Site (technical and log data) — our legitimate interests in running the Site, keeping it secure, and diagnosing faults (UK GDPR Article 6(1)(f)).
- Responding to enquiries (contact data) — our legitimate interests in responding to you, or steps taken at your request prior to entering into a contract (Article 6(1)(b) or 6(1)(f)).
5. Cookies and similar technologies
The Site does not use analytics, advertising, or tracking cookies, and does not set any non-essential cookies. Any cookies that may be set are strictly necessary for the operation and security of the Site. If we introduce non-essential cookies in the future, we will update this policy and ask for your consent before they are set.
6. Who we share data with
We do not sell personal data. We share it only with service providers who process it on our behalf under contract:
- Amazon Web Services (AWS), which hosts the Site and processes technical and log data as part of that hosting;
- Google (Gmail), which we use to receive and respond to email correspondence;
and, where required, with professional advisers, regulators, or authorities when we are legally obliged to do so, or with a successor entity in the event of a corporate reorganisation, merger, or transfer of the business or its assets (in which case this policy will continue to apply to your data).
7. International transfers
The Site is hosted with Amazon Web Services, and our email is provided by Google. Depending on the service and region, personal data may be processed outside the UK and the European Economic Area, including in the United States. Where that happens, transfers are protected by adequacy regulations or appropriate safeguards, including the UK International Data Transfer Addendum and EU Standard Contractual Clauses, which both AWS and Google incorporate into their data processing terms.
8. How long we keep data
- Server and hosting logs: retained for no more than 90 days and then deleted or anonymised;
- Contact correspondence: retained for as long as needed to handle your enquiry and for a reasonable period afterwards, normally no more than 24 months.
9. Your rights
Under the UK GDPR and EU GDPR you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at hello@sustainesg.io. We will respond within one month.
You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO), ico.org.uk. If you are in the EEA, you may complain to your local data protection authority.
10. Security
We use appropriate technical and organisational measures to protect personal data, including transport encryption (HTTPS), access controls, and minimisation of the data we collect in the first place. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be signposted on the Site.
12. Contact
RMC Technologies Limited (trading as Sustain ESG Lab)
29 Lincoln's Inn Fields, London, WC2A 3EE, United Kingdom
Email: hello@sustainesg.io