Privacy Policy

Last updated: January 2025

ETP Consultancy ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services related to Climate Action Plans for schools.

1. Information We Collect

1.1 Personal Information

When you contact us or use our services, we may collect:

• Your name and job title
• School name and address
• Email address and phone number
• Information about your school's energy usage and buildings
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website addresses
• Device and operating system information

2. How We Use Your Information

We use the collected information to:

• Provide Climate Action Plans and related services
• Communicate with you about our services
• Process payments and maintain records
• Improve our website and services
• Comply with legal obligations
• Send marketing communications (with your consent)

3. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To fulfill our services to you
• Legitimate Interests: To operate our business and improve our services
• Consent: For marketing communications
• Legal Obligation: To comply with applicable laws

4. Data Sharing and Disclosure

We may share your information with:

• Service providers who assist in delivering our services
• Professional advisors (lawyers, accountants)
• Government bodies when required by law
• Partners involved in delivering your Climate Action Plan (with your consent)

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and regular security assessments.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, typically:

• Client records: 7 years after project completion
• Marketing contacts: Until you unsubscribe
• Website analytics: 26 months

7. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent (where applicable)
• Lodge a complaint with the ICO

8. Cookies

We use cookies and similar technologies to enhance your experience on our website. For detailed information, please see our Cookie Policy.

9. Children's Privacy

Our services are directed to educational institutions and their staff. We do not knowingly collect personal information from children under 16.

10. International Transfers

Your information may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place to protect your data in accordance with this policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.