At PA Sustainability, we are committed to safeguarding the privacy of our business clients and managing data responsibly in compliance with UK legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, and protect company data provided to us through our services and website.
1. Data We Collect
We may collect and process the following types of company data:
- Company Information: Business name, address, registration details, and industry sector.
- Contact Information: Names, email addresses, and phone numbers of company representatives or key personnel.
- Account Information: Usernames, passwords, and subscription details for platform access.
- Financial Information: Billing addresses, payment methods, and transaction details.
- Operational Data: Information on your company's sustainability goals, plans, policies, and metrics provided through our platform.
- Usage Data: Interaction data from our website, including IP addresses, browser types, and cookies.
2. How We Use Your Data
We use company data to:
- Deliver and support the services offered through our platform.
- Provide tailored sustainability plans, policies, and reporting tools.
- Manage your company's account, including billing and subscription services.
- Monitor and improve the performance of our platform and services.
- Comply with legal obligations and manage disputes if they arise.
Your company data will never be used for purposes outside these stated activities without explicit agreement.
3. Legal Basis for Processing
We process company data based on one or more of the following lawful grounds:
- Contractual Necessity: To provide the services and tools you have subscribed to.
- Legal Obligation: To comply with UK legal and regulatory requirements.
- Legitimate Interests: To improve our services and ensure efficient communication.
- Consent: When required, such as for marketing or additional optional services.
4. Sharing Your Data
We do not sell or trade your company data. However, we may share your data with:
- Service Providers: Third-party providers who assist with IT infrastructure, payment processing, or technical support.
- Legal or Regulatory Authorities: When required by law to comply with legal obligations or investigations.
- Business Transfers: In the event of a merger, acquisition, or asset transfer, company data may be shared under confidentiality agreements.
All third parties handling company data are required to comply with strict data protection standards.
5. Data Retention
We retain company data only as long as necessary to:
- Fulfill the purposes for which it was collected.
- Meet legal, tax, or regulatory requirements.
- Maintain accurate records for audits or compliance purposes.
When data is no longer required, we securely delete or anonymise it.
6. Your Company’s Rights
Under UK data protection laws, your company has the following rights:
- Access: Request a copy of the data we hold about your company.
- Correction: Update or correct inaccurate or incomplete data.
- Erasure: Request the deletion of company data, subject to legal or contractual obligations.
- Restriction: Limit how we process your data in certain circumstances.
- Objection: Object to the processing of your data for specific purposes, such as marketing.
- Data Portability: Request a transfer of your data to another service provider.
To exercise these rights, contact us at hello@paconsultany.ltd
7. Data Security
We implement robust security measures to protect company data, including encryption, firewalls, and access controls. While we strive to ensure the security of your data, no system is entirely immune to potential threats. We encourage strong password management and adherence to security best practices when accessing our platform.
8. Cookies
Our website uses cookies to improve functionality and analyse usage patterns. For further details, please see our [Cookie Policy].
9. Third-Party Links
Our platform and website may contain links to third-party services. PA Sustainability is not responsible for the privacy practices or content of these external services. We recommend reviewing their privacy policies before providing any data.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in UK legislation or our operational practices. Updated policies will be posted on this page, with the date of the change clearly noted.