Privacy Policy

---

ESG Resilience is committed to respecting your privacy and protecting your personal information

• We will be transparent about the information we are collecting and what we will do with it
• We will use the information you give us for the purposes described in our Privacy Policy
• We will also use the information to help us understand you better and so that we can give you relevant offers
• If you tell us you don’t want to receive marketing messages, we will not send them but will continue to send essential information relating to a product or service you have requested or purchased
• We will put in place measures to protect your information and keep it secure
• We will respect your data protection rights and aim to give you control over your own information.

You can access our full Privacy Policy below to help you to understand better how and why we collect and use your personal information. If you have further questions please get in touch with us by writing to: Director, ESG Resilience Ltd, 5 Whitham Park, Tavistock, PL19 9BP, United Kingdom 

Without prejudice to your rights under applicable laws, the above and the Privacy Policy are not contractual and do not form part of your contract with us.

When does this policy apply? 

This Privacy Policy applies to personal information about you that we collect, use and otherwise process regarding your relationship with us as a customer or potential customer, including when you use our services, website or contact us via the website, email or telephone. 

Personal information 

Personal information means details which identify you or could be used to identify you, such as your name and contact details, your travel arrangements and purchase history. It may also include information about how you use our websites and mobile applications.

When do we collect personal information about you? 

We collect personal information about you whenever you use our services, when you use our website, or interact with us via email or telephone. For additional details see ‘What types of personal information do we collect and retain?’ below.

In addition, we may receive personal information about you from third parties, such as companies contracted by us to provide services to you, or your business partners who you wish us to collaborate with in order to provide you with our services. We use this information:

• To help make your visit more enjoyable
• To send you relevant information about products and services
• To email you from time to time about promotions or products and services which we think may be of interest to you

You can contact us at any time if you don’t want to receive any more communications from us by using the contact details in the footer of the site.

If you have allowed us to use your personal information for the purposes above, we may from time to time disclose this information to any company or organisation to which we pass the responsibility to handle email or other direct marketing communications on our behalf. Should this happen, we ensure that any third-party companies who handle your information comply with the relevant Data Protection legislation.

What types of personal information do we collect and retain? 

When you use our services, you will need to provide us with your personal details or those of colleagues and business partners. This information may include data such as your name, email address, country and preferred language.

We collect the following categories of personal information:

• Information you provide for ESG Resilience to understand your business needs and provide a service quotation.
• Information collected during our contracted service delivery
• Information about your business arrangements
• Information about the services we have provided to you in the past.
• Information about online registration and other interactions.
• Information about your use of our websites 
• Information about your device and your location, e.g. if you have been browsing on this      website for example your IP address or unique device ID. 

Website Cookies

Whenever you browse the ESG Resilience website, read pages, or download information, our computers automatically record certain information about your visit from the computer you use to access our site via cookies.

We will not collect personal information about you using cookies however by enabling cookies or keeping cookies enabled you are providing your consent to ESG Resilience storing cookies on your browser. Please note that disabling cookies is likely to impact website functionality and your experience of the ESG Resilience website.

The information collected does not identify you personally but does help us understand how many visitors come to our site and the types of computers they use. With this information, we can improve our site for all our visitors and make it more useful to you. The information includes the following:

• The date and time you access our site
• How many and which pages you visit during a ‘session’ on our site and how long you were on the site
• Your Internet domain name (this might be your internet service providers such as aol.com or your place of work) and the ‘IP’ address (this is a number assigned to your computer whenever you are surfing the web) which allows you to access our website
• The Internet browser you use (e.g. Chrome, Safari etc.) and your computer’s operating system (e.g. Windows, Mac)
• The site you were on before you linked to our website (e.g. Google if you found us from a search engine).

What do we use your personal information for? 

The main purposes for which we use your personal information are:

• To deliver the services you have asked for
• To send status updates and service communications to you
• To provide services tailored to your requirements and to treat you in a more personal way
• To carry out analysis and market research
• To carry out marketing including online advertising and keep you informed of ESG      Resilience products and services
• To improve our websites, products and services
• For management and administrative purposes. 

Your email address is only used for the purposes of replying to you unless you have given consent as detailed above. 

When will we send you marketing? 

When we have your permission we may send you marketing communications from ESG Resilience. ESG Resilience will not share or loan any identifiable information about you to any third party without your consent. We may share generalised information about site visitor patterns with partners or other parties in such a way that individual visitors can never be identified. It is possible to view our site without providing any personal details. However, without registering your details, you will not be able to receive further communications from us. We will respect your choice as to what communications you wish to receive and how these are sent.

What is our legal basis for using your personal information? 

We will only process your personal information where we have a legal basis to do so. The legal basis will depend on the reason or reasons ESG Resilience collected and needs to use your information. Under EU and UK data protection laws in almost all cases the legal basis will be:

• Because we need to use your information to perform the contract we have with you
• Because it is in ESG Resilience legitimate interests to use your personal information to operate and improve our business
• Because ESG Resilience needs to use your personal information to comply with a legal obligation
• To protect the vital interests of you or another person
• Because you have consented to ESG Resilience using your information for a particular purpose.

If processing of your data is subject to any other laws, then the basis of processing your data may be different to that set out above and may in those circumstances be based on your consent in all cases.

Data Protection

We protect the data in strict accordance with the UK’s GDPR and the Principles of the European Union Data Protection Framework Directives, in particular, EU Directive 95/46/EC to ensure that data we hold about you is processed lawfully and fairly. We aim to ensure that the personal data stored will be accurate, relevant and not excessive. We will keep the data up to date and not retain the information longer than is necessary. We will keep data securely to prevent unauthorised access by other people. You have the right to see what is held about you and correct any inaccuracies.

What Countries Will Your Personal Information Be Sent To?

Your personal information may be sent to and stored by us and third parties in countries outside the country in which you are located and outside the European Economic Area and the UK. The nature of our services means it is sometimes necessary for us to send your personal information outside the European Economic Area or the UK to fulfil your contract arrangements. This may occur because our business and our suppliers may have operations in countries across the world, or because your business may have operations in countries across the world. 

In addition, we may transfer your data to parties in countries outside the country in which you are located to provide services to us. This may involve sending your data to countries where under their local laws you may have fewer legal rights. Where your personal information is transferred outside the European Economic Area or the UK because we are using a service provider in a third country, we will implement safeguards so that your personal information continues to be protected to the standards set out in this privacy policy. If you would like more information on these safeguards, please contact us.

How long do we keep personal information? 

We will keep your information for as long as we need it for the purpose it is being processed for. We will actively review the information we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or customer need for it to be retained. If you stop interacting with us as a customer, we will remove or anonymise your information after seven years.

What are your legal rights in relation to the personal information we hold about you? 

Under data protection laws in the European Union and the UK, you have certain rights in relation to your personal information. If you wish to review the personal identifiable information we hold on you or change how we use your personal information, please contact us. Responses to exercise your rights will be provided within one month and generally there is no fee for making these requests. If your request is particularly complicated we may extend the deadline for responding to three months, but we will let you know if this is the case.

We will handle all requests in accordance with applicable law. However, depending on the right you wish to exercise, and the nature of the personal information involved, there may be legal reasons why we cannot grant your request. You may ask for personal information which identifies you to be removed (anonymised). To do this the information that identifies you will be removed our active systems. However, a separate and restricted copy of the identifying information will be kept for 7 years to meet the obligations we have to law enforcement, national authorities and legal proceedings.

Further explanation of those rights and the exceptions to them are set out below. Considerations for removing/anonymising data:

• We may need to retain certain elements that relate to a contract between you and ESG Resilience because we need it for our own legal and auditing purposes
• A record of your request including the personal information you supplied will be retained in the application used to carry this out for 3 years.
• In some circumstances it may mean we will not be able to provide all or parts of the services you have requested from us or retain any preferences you have previously shared with us.
• We cannot erase your personal information if we have identified that you either have an open complaint with us or we hold a previous case for you within the past 6 years. We are required to retain this information in case there is a need to re-open the complaint.

Your right to complain to our supervisory authority? 

We hope that we will be able to resolve any concerns you may have by contacting us at:

Director, ESG Resilience Ltd, 5 Whitham Park, Tavistock, PL19 9BP, United Kingdom 

However, you have a right to complain to the UK’s Supervisory Authority for data protection, the Information Commissioner at: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF