Privacy Notice

Data Controller

Sustainability Made Easy Limited is a private limited company registered in England and Wales, registration number 08892718 (further referred to as “we” or “us” from time to time). We are a Data Controller with regards to your personal information, registered with Information Commissioner’s Office (ICO), registration reference ZB529345.

​

Purpose of Personal Information Processing

We collect and process personal information for the following purposes:

• To provide and fulfil our services to you.

• To communicate with you and respond to your inquiries.

• To comply with legal obligations.

• To improve our products and services.

 

Lawful Basis for Processing

The lawful basis for which we process your personal information depends on the nature of our relationship with you, the types of personal data we process as well as the purpose of processing. We rely on the following lawful bases:

​

1. Consent: this means that you have agreed to let us process your personal information, for example by contacting us by telephone or email, filling in a form on our website www.smallandsustainable.co.uk and/or subscribing to our blog on News and Insights web page https://www.smallandsustainable.co.uk/blog.

2. Contract: this means we need to process your information in relations to a contract between us and you, for example when we provide consulting and business services, sign non-disclosure agreement or employment contract.

3. Legal obligation: this means that we have to process personal data in order to comply with the law.

4. Legitimate interest: this means we have a legitimate business interest to use your personal information. Our legitimate interests include commercial interests and broader societal benefits, namely encouraging and helping businesses to be more sustainable and successful in the low carbon economy.

 

In using your personal information, we are taking on extra responsibility for considering and protecting your rights and interests and use the information in ways that you would reasonably expect and which have minimal impact on privacy.

You can read more about the lawful grounds for processing personal information on the ICO’s website here.

 

Types of Personal Information

We may collect and process the following types of personal information:

• Technical data (e.g. IP address) when you visit and browse our website.

• Contact information (e.g. name, email, phone number, location) when you contact us by email, telephone or via social media, or complete one of our online forms.

• Business information (e.g. your organisation name, job title, details of your job role and business) when you complete our online questionnaires, communicate with us in person or over the telephone regarding our free or paid services.

• Financial information (e.g. payment details) when you order our paid services online, in personal or over the telephone.

• Transaction data (e.g. purchase history) when you order our services online, in personal or over the telephone.

• Educational information (e.g. details of educational institutions, degrees or qualification certificates) when you apply for a job or internship with us. Successful candidates will be required to provide identification and right to work documentation.

 

We do not collect any information in the ‘special categories of personal data’. You can find more information about special categories of personal data here

 

Recipients of Personal Information

We do not sell or share your personal information with third parties for marketing purposes. We may share your personal information with:

​

1. Service providers assisting with our operations e.g. website, email and online questionnaire hosting, and analytics and search engine providers that assist us in monitoring usage of our website, subject to our cookie notice.

2. Our business partners as part of our relationship with you and after confirming that they will only process your information under our instruction and while using appropriate security.

3. Our auditors, legal advisers and other professional advisors from time to time and only in so far as it is necessary.

4. International transfer of your personal information: we do not actively transfer your personal data outside the UK. However, our technical service providers such as website, email and online questionnaire hosting companies may process some of your personal data outside the UK. Such processing may take place within the territory of the European Union, Israel or a third country. We regularly review our suppliers and make sure that where such processing outside the UK occurs, the supplier a) only processes your personal data in a third country (-ies) of which the UK government and/or European Commission has decided that it ensures an adequate level of protection, and b) the supplier uses an appropriate international data transfer mechanism.

 

Data Retention Period

We retain your personal information for as long as necessary for the purposes outline in this notice or as required by applicable laws. We will not keep your personal information any longer than we need to.

​

For marketing purposes, we will keep your personal information as long as we are able to market to you. If you withdraw your consent, we will keep your basic details to make sure we do not contact you again for marketing purposes, and for our own legal, regulatory and accounting purposes.

 

Your Rights as a Data Subject

Your personal data rights include but are not limited to the rights listed below. Please, also visit links to the ICO’s website where you can read further into your data rights, what they mean and how to exercise them.

​

You have the right to:

1. Be informed – you have the right to know what personal information we are collecting and how we are collecting it.

2. Access personal information – you have the right to know what personal information we hold about you and receive a copy of it and other supplementary information.

3. Rectify inaccurate information – you have the right to have inaccurate personal information rectified or completed if it is incomplete.

4. Erase your data - you have the right to have your personal data we hold about you erased where there is no valid reason for us to keep it. This right is also known as ‘the right to be forgotten’. The right is not absolute because we may be required by law to keep your personal information for a certain period of time.   

5. Object to processing – you have an absolute right to stop your personal data being used for direct marketing purposes. In other circumstances, we may have legitimate reasons or obligations to continue processing your data.

 

You can make personal data related requests to us verbally or in writing including via social media. We will respond without delay and in any case within one month of receipt of the request.

 

If you have any questions or would like to exercise any of your personal data rights, please contacts us at accounts@smallandsustainable.co.uk or write to us at Sustainability Made Easy Ltd, Enterprise Hub, University of Hertfordshire de Havilland Campus, Hatfield, United Kingdom, AL10 9EU.

 

To learn more about your personal data rights, please visit ICO’s web pages for the public here.

 

Security Measures

We implemented appropriate technical and organisation measures to protect your personal data from unauthorised access, disclosure, alteration and destruction in line with National Cyber Security Centre’s (NCSC) guidance for small businesses. To learn more, please visit NCSC website here.

 

Automated Decision-Making

We do not engage in automated decision-making and profiling about you.

 

Marketing Communications

We would like to keep in touch with you by email, telephone, SMS or post to inform you of new research insights, sustainability solutions and our products and services that would potentially be of interest to you. If you no longer wish to receive our news after you have given your consent, you can opt out of receiving marketing communications by using the opt-out link in our emails or contacting us at accounts@smallandsustainable.co.uk or writing to us at Sustainability Made Easy Ltd, Enterprise Hub, University of Hertfordshire de Havilland Campus, Hatfield, United Kingdom, AL10 9EU.  

 

Cookies and Tracking Technologies

Cookies are small pieces of data stored on a site visitor’s browser. They are typically used to keep track of the settings users have selected, for example preferred language, and actions they have taken on a site.

​

We only use essential cookies set out by our website hosting provider and online questionnaire platform in order to provide smooth website browsing experience and to register subscribers on our News and Insight blog page https://www.smallandsustainable.co.uk/blog. Our providers use cookies to monitor the performance of their platforms.

​

While cookies by themselves cannot dig or research your information or search your computer, they do store personal information in two ways - form information and ad tracking. This personal information is not generated by cookies themselves but by your own input into online order forms, registration pages, payment pages and other online forms.

​

To find out more about our cookies, please read our Cookie Policy.  

 

Changes to the Privacy Notice

This Privacy Notice is regularly reviewed and will be updated from time to time. Check the "Last Updated" date for the latest version.

​

Contact Information

For any privacy-related inquiries, contact us at accounts@smallandsustainable.co.uk or telephone us at +44 7464 892 681, or write to us at Sustainability Made Easy Ltd, Enterprise Hub, University of Hertfordshire de Havilland Campus, Hatfield, United Kingdom, AL10 9EU.

 

Complains

If you have concerns about how we handle your data, we would appreciate if you contact us first and give us an opportunity to put things right.  Alternatively, or if you are not satisfied with our response, you can lodge a complaint with the ICO here.