Privacy Policy
Last updated: 9 October 2026
1. Who We Are
Resilient Sustainance Limited (“RSustain”, “we”, “us”) is the data controller for personal data collected through rsustain.co.uk and its subdomains (academy.rsustain.co.uk, api.rsustain.co.uk).
| Registered name | Resilient Sustainance Limited |
| Company number | 16530947 (England & Wales) |
| Registered address | 128 City Road, London EC1V 2NX, United Kingdom |
| Data Protection Lead | associate@rsustain.co.uk |
| ICO registration | Registered with the Information Commissioner’s Office |
2. What Personal Data We Collect
| Data Category | Examples | Source |
|---|---|---|
| Identity & contact data | Name, email, phone number, job title, company name | Contact forms, tool registration, Academy enrollment |
| Payment data | Card details (processed by Stripe/Razorpay — we do not store card numbers) | Course purchases, tool subscriptions |
| Usage data | Pages visited, tools used, courses completed, assessment answers | Server logs, tool interactions, Academy LMS |
| Technical data | IP address, browser type, device information | Server logs, security monitoring |
| Communication data | Enquiry messages, email correspondence | Contact forms, email |
3. How We Use Your Data
| Purpose | Lawful Basis (GDPR Art. 6) | Retention |
|---|---|---|
| Respond to enquiries | Legitimate interest (Art. 6(1)(f)) | 2 years after last contact |
| Process course purchases & issue invoices | Contract performance (Art. 6(1)(b)) | 7 years (UK tax law) |
| Provide diagnostic tool services | Legitimate interest (Art. 6(1)(f)) | Duration of use + 1 year |
| Deliver advisory engagements | Contract performance (Art. 6(1)(b)) | 7 years after engagement ends |
| Send service-related communications | Legitimate interest (Art. 6(1)(f)) | Until unsubscribe |
| Security monitoring & fraud prevention | Legitimate interest (Art. 6(1)(f)) | 12 months |
| Comply with legal obligations (tax, AML) | Legal obligation (Art. 6(1)(c)) | As required by law |
4. Data Processors & Third Parties
We share personal data with the following categories of processors, each under appropriate data processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing (GBP orders) | USA (EU-US Data Privacy Framework) |
| Razorpay Software Pvt. Ltd. | Payment processing (INR/USD orders) | India |
| Hostinger International Ltd. | Website hosting | Lithuania (EU) |
| FormSubmit | Contact form processing | USA |
| Google LLC (Fonts) | Font delivery | USA (EU-US Data Privacy Framework) |
| Calendly LLC | Appointment scheduling | USA (EU-US Data Privacy Framework) |
We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.
5. International Transfers
Some of our data processors are located outside the UK. Where we transfer personal data internationally, we rely on:
- UK adequacy decisions — for transfers to countries the UK recognises as providing adequate data protection (EU/EEA countries)
- UK International Data Transfer Agreement (IDTA) — for transfers to the USA, India, and other countries without adequacy decisions
- EU-US Data Privacy Framework — for US-based processors certified under the framework (Stripe, Google, Calendly)
6. Platform-Specific Processing
6.1 RSustain Academy (academy.rsustain.co.uk)
When you enroll in courses, we collect your name, email, and payment information. Course progress, quiz scores, and certificate data are stored for the duration of your enrollment plus 7 years for tax records. Study materials are accessible only to enrolled users.
6.2 Diagnostic Tools (Carbon Diagnostic, Scope 3 Calculator, CBAM Compass)
Free-tier tool usage stores data locally on your device (browser localStorage). We do not receive this data unless you explicitly download a PDF report, at which point we collect your name, email, and organisation for lead purposes. Pro-tier subscriptions involve Stripe payment processing.
6.3 RegConverge (api.rsustain.co.uk/convergence)
Free-tier usage requires no personal data. Pro-tier requires email authentication (magic link) and Stripe payment. Usage data (regulation selections, convergence analysis) is stored to provide the service.
6.4 RECI Assessment Platform (app.ecocapitalindex.com)
Assessment data (company information, questionnaire responses, scores, certificates) is processed by our group entity Resilient Sustainance Private Limited (India). Assessment data is retained for the validity period of the certificate plus 5 years for methodology audit purposes.
7. Your Rights
Under the UK GDPR and Data Protection Act 2018, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — where processing is based on consent, withdraw at any time
To exercise any of these rights, contact our Data Protection Lead at associate@rsustain.co.uk. We will respond within one month.
8. Right to Complain
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint
9. Cookies
For information about how we use cookies and similar technologies, please see our Cookie Policy.
10. Children’s Data
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users or by prominent notice on our website. The “last updated” date at the top of this page indicates when the policy was last revised.
12. Contact
For any questions about this Privacy Policy or our data practices:
Data Protection Lead
Resilient Sustainance Limited
128 City Road, London EC1V 2NX
Email: associate@rsustain.co.uk
Phone: +44 7876 096 717