Legal

Privacy Policy

Last updated: May 2026  ·  ESGCompliancer.com

1. Who we are

ESGCompliancer ("we", "us", "our") is an ESG compliance consulting business operating in the United Kingdom. Our website address is https://www.esgcompliancer.com. Our contact email address is hello@esgcompliancer.com.

We are the data controller for any personal data you provide to us through this website. We are registered with and subject to the UK Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What personal data we collect

We collect the following personal data when you submit an enquiry or booking request through our website contact form:

• First and last name
• Business email address
• Company name
• Company size (employee count)
• Information you provide about your ESG compliance needs

We may also collect the following data automatically when you visit our website:

• IP address and approximate location (country/region)
• Browser type and version
• Pages visited and time spent on each page
• Referring website (how you found us)

We do not collect any special category data (such as health information, political opinions, or biometric data) through this website.

3. How we use your data

Enquiry and service delivery

We use the information you submit through our contact form to:

• Respond to your enquiry and arrange a discovery call
• Deliver the ESG compliance services you have requested
• Send you service-related communications (such as your Gap Report or compliance documents)
• Issue invoices and manage payment

The legal basis for this processing is contract performance (Article 6(1)(b) UK GDPR) — we need your data to fulfil the service you have requested.

Legitimate business interests

We may contact you with information about our services that may be relevant to your business, based on our legitimate interests (Article 6(1)(f) UK GDPR). You can opt out of this at any time by emailing hello@esgcompliancer.com.

Analytics

If you have consented to analytics cookies, we use website analytics tools to understand how visitors use our website, which pages are most popular, and how people find us. This helps us improve our service. The legal basis for this processing is consent (Article 6(1)(a) UK GDPR).

4. How long we keep your data

• Enquiry data (no contract formed): 12 months from the date of enquiry
• Client data (where a contract is formed): 6 years from the end of our contract, in line with UK statutory limitation periods
• Analytics data: 26 months (standard Google Analytics retention)
• Email communications: 3 years from the date of last contact

5. Who we share your data with

We do not sell, rent or trade your personal data to any third parties. We may share your data with the following service providers who help us deliver our services:

• HubSpot Inc. — CRM and email platform (data processed in the EU/US under Standard Contractual Clauses)
• Google LLC — Analytics and email services (data processed under Standard Contractual Clauses)
• Netlify Inc. — Website hosting (data processed in the EU/US under Standard Contractual Clauses)

All third-party providers are required to process your data only on our instructions and in accordance with applicable data protection law.

6. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data (subject to legal retention requirements)
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can ask us to transfer your data to another organisation
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please email hello@esgcompliancer.com. We will respond within 30 days.

7. Cookies

Our website uses the following types of cookies:

• Essential cookies: Required for the website to function. These cannot be disabled. They include your cookie consent preference.
• Analytics cookies: Only set if you consent. These help us understand how visitors use our site. You can withdraw consent at any time by clearing your browser cookies and declining when prompted again.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our website is served over HTTPS (encrypted connection). Access to client data is restricted to authorised personnel only.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please email us first at hello@esgcompliancer.com.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last updated. Continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact us

For any questions about this Privacy Policy or how we handle your data, please contact us at:

• Email: hello@esgcompliancer.com
• Website: www.esgcompliancer.com