Book a health check
Book a health check

Privacy Policy

August 2026

1.  Who We Are

Sustchain is a sustainability advisory practice operated by Kala Dikibo MCIPS Chartered. We are the data controller for personal data collected through this website and in the course of providing our services. 

  • ICO Registration Number: ZB115857 

2. What Personal Data We Collect

We collect the following categories of personal data: 

 

Contact information — when you submit an enquiry via our website contact form or contact us directly: name, job title, organisation name, email address, telephone number. 

Business information — when you engage Sustchain for a service: company name, company registration number, director names and titles. 

Financial data (with consent) — when your accountant shares data with Sustchain with your written consent: annual turnover, procurement spend categories, payroll headcount totals — aggregate figures only, not individual salaries. 

Sustainability data — during the delivery of a sustainability assessment or report: energy consumption, waste tonnage, water use, carbon footprint calculations. 

Website usage data — automatically when you visit sustchain.co.uk. [See Section 6 on Cookies.] 

3. How We Use Your Data

Responding to your enquiry and providing services — Contract (Article 6(1)(b) UK GDPR). 

Maintaining contact records for relationship management — Legitimate interests (Article 6(1)(f) UK GDPR). 

Processing financial data from your accountant — Your explicit written consent (Article 6(1)(a) UK GDPR). 

Complying with legal obligations — Legal obligation (Article 6(1)(c) UK GDPR). 

Improving our website (where analytics are used) — Consent (Article 6(1)(a) UK GDPR).

 

Artificial Intelligence (AI) In delivering our services, Sustchain may use AI-assisted tools to support the drafting and analysis of sustainability reports. Client data shared with Sustchain for this purpose is handled in accordance with our data retention policy and is not used to train third-party AI models. All AI-assisted outputs are reviewed and verified by a qualified practitioner before delivery.

4. How Long We Keep Your Data

  • Client engagement data (reports, calculations, workbooks): 6 years from completion of the engagement 
  • Contact enquiries where no engagement commenced: 12 months from last contact 
  • Email correspondence: 6 years 
  • Financial data received with consent: duration of engagement plus 6 years 
  • Draft working documents: deleted within 30 days of final delivery 

5. Who We Share Your Data With

We do not sell or share your personal data with third parties for commercial purposes. We may share data in these limited circumstances: 

  • With your accountant, where you have given written consent for financial data to be shared 
  • With EFRAG (the European Financial Reporting Advisory Group) for analytical purposes, anonymised and only with your explicit consent 
  • With the ICO, HMRC, or law enforcement if we are legally required to do so 

We do not transfer your data outside the United Kingdom or European Economic Area. 

6. Cookies

This website uses Google Analytics to understand how visitors use the site. This involves setting a cookie that collects anonymised data about page visits and referral sources. You can opt out by adjusting your browser settings or using the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout. No personal data is shared with Google Analytics beyond anonymised usage data. 

7. Your Rights

Under UK GDPR you have the right to: 

  • Access the personal data we hold about you 
  • Correct inaccurate data 
  • Request erasure of your data 
  • Object to processing based on legitimate interests 
  • Request restriction of processing 
  • Receive your data in a portable format 
  • Withdraw consent at any time where processing is based on consent 

 

To exercise any of these rights, email kala@sustchain.co.uk. We will respond within one calendar month. 

8. How to Complain

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO): 

  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF 

9. Changes to This Notice

We review this privacy notice annually and whenever our data processing activities change materially. The current version and its date are shown at the top of this notice. 

10. Contact Us

Data Controller: Kala Dikibo MCIPS Chartered 

Email: kala@sustchain.co.uk 

Website: sustchain.co.uk 

ICO Registration Number: ZB115857