Who we are
This website is operated by SustainOpp Ltd (“we”, “us”, “our”).
Our website address is: https://sustainopp.com.
Data controller: SustainOpp Ltd
Contact: info@sustainopp.com
Business address: 128 City Road, London, United Kingdom, EC1V 2NX
We collect the minimum personal data needed to run the website, respond to enquiries, and provide our services.
The personal data we collect
Depending on how you use the site, we may collect:
- Contact data you submit (for example via email or forms): name, email address, organisation, and message content.
- Booking data you submit via Calendly: name, email address, meeting preferences, and any details you include when scheduling.
- Technical data: IP address, browser type/version, device identifiers, operating system, referral source, pages visited, and approximate location inferred from IP.
- Cookie data: information stored by cookies and similar technologies (see “Cookies” below).
We do not knowingly collect special category data (e.g., health, religion) via the website. If you include it in a message, you are choosing to share it.
How we use your data (and our lawful basis)
We use personal data for the following purposes under UK GDPR:
- To respond to enquiries and provide information you request. Lawful basis: Legitimate interests (running our business) and/or Contract (steps before entering a contract).
- To schedule and manage calls/meetings (via Calendly). Lawful basis: Legitimate interests and/or Contract.
- To operate, maintain, and secure the website (including preventing fraud and abuse). Lawful basis: Legitimate interests.
- To measure website usage and improve performance (analytics). Lawful basis: Consent (for non-essential analytics cookies).
- To comply with legal, tax, or regulatory obligations. Lawful basis: Legal obligation..
Cookies
Cookies are small text files stored on your device. We use cookies for essential website functions and, with your consent, analytics.
We use Google Analytics to understand how visitors use the site (for example, pages visited, time on page, and how users arrive at the site). This helps us improve the site and content.
Google may process usage data and set cookies for analytics purposes. Analytics cookies are only placed where required after you provide consent via our cookie banner/settings.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Pages on this site may include embedded content and third-party tools. When you interact with these, the third party may collect data about you, use cookies, and track your interaction in line with their own policies.
If you book a meeting, you will be taken to Calendly (or Calendly may be embedded on the site). Calendly processes the information you provide to schedule the meeting and send confirmations/reminders.
Where we embed content (e.g., videos), the provider may set cookies or collect usage information, especially if you are logged in to that service.
Who we share your data with
We share personal data only where necessary to run the website and deliver services. This may include:
- Website hosting and IT providers
- Google (for Google Analytics)
- Calendly (for booking and scheduling)
- Professional advisers (e.g., accountants, legal advisers) where needed
We do not sell personal data.
Some service providers (such as Google and Calendly) may process data outside the UK. Where this occurs, we use appropriate safeguards (such as adequacy decisions and/or standard contractual clauses) to protect your data.
How long we retain your data
We keep personal data only for as long as necessary:
- Enquiries and correspondence: typically retained for up to 24 months after last contact, unless it becomes part of a client engagement.
- Client/project records: retained for the duration of the engagement and then for a period required for legal, tax, and professional record-keeping purposes (often up to 6–7 years, depending on the context).
- Analytics data: retained in line with Google Analytics settings and our cookie choices.
Depending on how you use the site, we may collect:
- Contact data you submit (for example via email or forms): name, email address, organisation, and message content.
- Booking data you submit via Calendly: name, email address, meeting preferences, and any details you include when scheduling.
- Technical data: IP address, browser type/version, device identifiers, operating system, referral source, pages visited, and approximate location inferred from IP.
- Cookie data: information stored by cookies and similar technologies (see “Cookies” below).
We do not knowingly collect special category data (e.g., health, religion) via the website. If you include it in a message, you are choosing to share it.
How we use your data (and our lawful basis)
We use personal data for the following purposes under UK GDPR:
- To respond to enquiries and provide information you request. Lawful basis: Legitimate interests (running our business) and/or Contract (steps before entering a contract).
- To schedule and manage calls/meetings (via Calendly). Lawful basis: Legitimate interests and/or Contract.
- To operate, maintain, and secure the website (including preventing fraud and abuse). Lawful basis: Legitimate interests.
- To measure website usage and improve performance (analytics). Lawful basis: Consent (for non-essential analytics cookies).
- To comply with legal, tax, or regulatory obligations. Lawful basis: Legal obligation..
Your rights
Under UK GDPR, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict or object to processing (in certain circumstances)
- Data portability (in certain circumstances)
- Withdraw consent at any time (where processing is based on consent, such as analytics cookies)
To exercise your rights, contact: info@sustainopp.com.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO).
Security
We take reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, but we aim to prevent unauthorised access, loss, or misuse.
Children
This website is not intended for children, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with an updated “Last updated” date.
Last updated: 19 Dec 2025
