Ecostatis Limited ("Ecostatis", "we", "us", "our") is a sustainability and ESG consulting company registered in the United Kingdom. We act as a "data controller" for the personal information we collect through our website and when you interact with us.

If you have any questions about this policy or how we handle your data, you can contact us at:

• Email: hello@ecostatis.com
• Postal address: Office 17824, 182-184 High Street North, East Ham, London, E6 2JA

This privacy policy explains how we collect, use, share and protect your personal data when you:

• Visit our website.
• Fill in a contact, enquiry or training request form.
• Sign up to receive updates, newsletters or event information.
• Work with us as a client, supplier or partner.

Depending on how you interact with us, we may collect:

• Contact details: name, job title, organisation, email address, phone number.
• Professional information: sector, role, areas of interest, enquiry details.
• Usage data: pages visited, time spent on site, clicks and technical data such as IP address, browser type and device identifiers (via cookies and similar technologies).
• Communication data: records of emails, messages and calls with us.

We do not intentionally collect sensitive personal data (e.g. health, religion) through our website. Please do not provide this type of information in contact forms.

We use your personal data to:

• Respond to enquiries and provide information or services you request.
• Manage our relationship with clients, suppliers and partners.
• Send you updates, insights or invitations where you have opted in or where we are allowed to do so under applicable law.
• Improve our website, content and services using aggregated analytics.
• Maintain our records and comply with legal or regulatory obligations.

Our legal bases under UK GDPR include: performance of a contract, our legitimate interests (e.g. running and improving our business, communicating with business contacts) and, where required, your consent (e.g. for certain marketing communications or non essential cookies).

We use cookies and similar technologies to operate our website, understand how it is used and, where enabled, to support analytics and improvements. Essential cookies are needed for site to function and are set automatically. Non essential cookies (e.g. analytics) are used only with your consent, which you can give or withdraw via our cookie banner or browser settings.

For more detail, please see our Cookie Policy.

We may share your personal data with:

• Service providers who help us operate our website, IT systems, email and CRM tools.
• Professional advisers (e.g. legal, accounting) where necessary.
• Regulators, law enforcement or other authorities where required by law.

We do not sell your personal data.

Some service providers may be located outside the UK or EEA. Where this is the case, we will ensure appropriate safeguards are in place (such as standard contractual clauses) as required by data protection law.

We keep personal data only for as long as needed for the purposes described in this policy, including to meet legal, accounting or reporting requirements. Retention periods vary depending on the nature of the data and our relationship with you (for example, enquiry vs. client).

We use technical and organisational measures to protect your personal data, including secure systems, access controls and staff awareness. No system can be completely secure, but we work to reduce risks of loss, misuse or unauthorised access.

Depending on where you are located and subject to legal conditions, you may have the right to:

• Access personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data in certain circumstances.
• Object to or restrict how we use your data.
• Withdraw consent where we rely on it (e.g. for marketing).
• Lodge a complaint with the UK Information Commissioner's Office (ICO) or your local regulator.

To exercise these rights, please contact us using the details above.

Our website may link to third party sites. We are not responsible for their content or privacy practices. We encourage you to read their privacy policies.

We may update this privacy policy from time to time. The "last updated" date at the top of the page indicates the current version. We encourage you to check back regularly.