Privacy Policy

1. Introduction

Sustainability For You ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sustainability reporting platform.

2. Information We Collect

Account Information

When you register for an account, we collect:

• Email address
• Name (first and last)
• Company name and information
• Password (encrypted)

Usage Data

We automatically collect information about how you use the platform:

• Log data (IP address, browser type, pages visited)
• Device information
• Usage patterns and interactions with features

Reporting Data

Data you enter into the platform for sustainability reporting purposes, including:

• Materiality assessments and IROs
• Data point values and evidence
• Emissions calculations
• Uploaded documents

3. How We Use Your Information

We use your information to:

• Provide and maintain the sustainability reporting platform
• Process your reporting workflows and generate reports
• Send administrative information, updates, and security alerts
• Improve our services and develop new features
• Comply with legal obligations and regulatory requirements
• Prevent fraud and ensure platform security

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With your consent: When you explicitly authorize us to share specific information
• Service providers: Third-party vendors who help us operate the platform (hosting, analytics, email)
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Team members: Within your organization based on role-based access controls

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Password hashing using industry-standard algorithms
• Role-based access control (RBAC)
• Multi-tenant data isolation
• Regular security audits and monitoring
• Audit logs for all data modifications

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Reporting data is retained to comply with legal and regulatory requirements, including:

• CSRD/ESRS reporting obligations
• Audit trail requirements
• Tax and accounting regulations

You may request deletion of your account, subject to legal retention requirements.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing activities
• Withdraw consent: Withdraw consent for processing based on consent

To exercise these rights, contact us at hello@sustainabilityforyou.com

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze platform usage (analytics)
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Your explicit consent where required

10. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: