Privacy policy

1. Who we are

This website, esg33.com, is operated by ESG33 Ltd (“ESG33”, “we”, “us”, “our”).

ESG33 Ltd is the data controller for the personal information described in this policy. If you have any questions about this policy or how we handle your information, please contact John Downer at John.Downer@esg33.com.

2. The information we collect

We keep the personal information we collect to a minimum. We may collect:

• Contact form details: your name, email address, organisation (optional) and the content of your message when you use the form on our Contact page.
• Correspondence: any information you include when you email us directly or reply to our emails.
• Business relationship information: if you become a client, contact and business details needed to deliver and invoice our services.
• Technical information: our hosting provider automatically records standard server logs (such as IP address, browser type and the pages requested) to keep the website secure and working properly.

We do not knowingly collect special category data, and we ask that you do not send it to us. Our services are aimed at businesses and are not directed at children.

3. How and why we use your information

Under UK data protection law we must have a lawful basis for using your personal information. We use it to:

• Respond to your enquiry and arrange introductory calls. Lawful basis: our legitimate interests in responding to people who contact us, or taking steps at your request before entering into a contract.
• Deliver our services to clients and manage the business relationship, including invoicing. Lawful basis: performance of a contract, and compliance with legal obligations such as accounting and tax requirements.
• Keep in touch about relevant ESG and growth topics where you are an existing business contact. Lawful basis: our legitimate interests. You can ask us to stop at any time.
• Keep the website secure and prevent misuse. Lawful basis: our legitimate interests.

We will never sell your personal information, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We only share your information where necessary, with:

• our website hosting provider and email provider, who process data on our behalf under contract;
• professional advisers such as accountants and lawyers, where needed; and
• authorities or regulators, where we are required to by law.

Our suppliers are only permitted to use your information to provide services to us. If any of your information is transferred outside the UK, we make sure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses.

5. How long we keep it

We keep enquiry emails and contact form messages for up to 24 months after our last contact with you, unless we go on to work together. Client records are kept for the duration of the relationship and then for up to six years to meet legal, accounting and tax obligations. Server logs are kept for a short period by our hosting provider in line with its own retention policy.

6. Cookies

This website does not use analytics, advertising or tracking cookies. WordPress may set strictly necessary cookies, for example to keep site administrators logged in, which do not require your consent. If we introduce analytics or other non-essential cookies in future, we will update this policy and ask for your consent first.

Our pages may link to other websites, such as LinkedIn. Those sites have their own privacy policies, and we are not responsible for how they handle your information.

7. Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information, including encrypted (HTTPS) connections to this website, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work hard to protect your information.

8. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to us using your information on the basis of legitimate interests, including for keeping in touch; and
• ask us to transfer your information to another organisation, where applicable.

To exercise any of these rights, email John.Downer@esg33.com. There is usually no charge, and we will respond within one month.

9. Complaints

If you have concerns about how we handle your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.