Privacy policy

Who we are

ESG Now is a product of Temperstone Ltd ("we", "us"), a company registered in England and Wales with company number 16949737, whose registered office is at 71-75 Shelton Street, London, WC2H 9JQ. We operateesg-now.app and the ESG Now questionnaire and report service (the "Service"), and we are the controller of personal data processed under this policy. You can contact us at[email protected].

Information we collect

• Questionnaire data: everything you enter into the questionnaire, including business details, sector, size, location, energy use, vehicles, travel, waste, water, workforce, policies, governance and commitments, and the reports and results generated from it.
• Contact and identity data: your name, job title, business name, email address, phone number and any other details you give us.
• Usage and device data: pages visited, features used, how you interact with the Service, referring sites, approximate location, browser, device and IP address.
• Communications: emails, messages and feedback you send us.
• Data from third parties: information from partners, public sources such as Companies House, and data providers, which we may combine with the information above.

Much of the questionnaire data relates to your business rather than to you as an individual. Where it identifies a living person, for example if you are a sole trader, it is personal data and this policy applies to it.

How we use information

• To provide, maintain and improve the Service and generate your report.
• To analyse usage, develop new products and services, and build benchmarks, statistics and industry insights.
• To send you marketing about ESG Now and about products and services from carefully selected partners.
• To share and sell data to third parties as described below.
• To communicate with you, provide support and send service messages.
• To prevent fraud and misuse, enforce our terms and comply with the law.

Sharing and selling data

We may share, license or sell data to third parties, including:

• sustainability, energy, carbon offsetting, finance, insurance, lending, consultancy, software and procurement providers;
• data brokers, research firms, industry bodies and market analysts;
• advertising, marketing and lead generation partners.

Business and anonymised data. We may sell or share questionnaire data that does not identify an individual, and aggregated or anonymised data derived from any information we hold, without restriction.

Personal data. We sell or share personal data with third parties for their own marketing only where you have consented. Partners who receive your data become controllers of it and their own privacy policies apply.

We also share data with service providers who process it on our behalf (such as hosting, email, analytics and payment providers), with professional advisers, with authorities where required by law, and with any buyer or successor if all or part of our business is sold, merged or restructured.

Marketing

We may contact you by email, phone or other channels about our own products and services, and with offers from partners. Where the law requires consent we will ask for it. You can opt out at any time using the unsubscribe link in any email or by emailing[email protected].

Legal bases

• Contract: to provide the Service you ask for.
• Legitimate interests: to run, improve and promote our business, analyse usage, create anonymised and aggregated data, market our own services to business contacts, and prevent misuse.
• Consent: to sell or share personal data with third parties for their marketing, to send marketing where consent is required, and to use non-essential cookies.
• Legal obligation: where we must process data to comply with the law.

Where we rely on consent, you can withdraw it at any time. This does not affect processing that has already taken place.

Cookies and similar technologies

We use analytics to understand how the Service is used, and essential cookies to keep your session and save your questionnaire progress. We may also use cookies, pixels and similar technologies for analytics, personalisation and advertising. Where these are not strictly necessary, we will ask for your consent first.

International transfers

We and our partners may process data outside the UK. Where we do, we use appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement.

How long we keep data

We keep personal data for as long as we need it for the purposes above, including for legal, accounting and business records. Anonymised and aggregated data may be kept indefinitely.

Your rights

Under UK GDPR you have the right to access, correct, delete or restrict the use of your personal data, to object to processing based on legitimate interests, to object to direct marketing at any time, to data portability, and to withdraw consent. To make a request, email [email protected]. You can also complain to theInformation Commissioner's Office.

Changes to this policy

We may update this policy at any time by posting a new version on this page. If we make a material change to how we use personal data, we will take reasonable steps to let you know.