Privacy policy.

This privacy notice for SustiPortal ("SustiPortal", "we", "us", or "our"), describes how and why we might collect, store, and use your information when you visit our website at https://sustiportal.com/ or contact us. This privacy notice will help you understand your privacy rights and choices. We encourage you to carefully read the Privacy Policy and use it to make informed decisions.  If you still have any questions or concerns, please contact us.

WHAT DATA DO WE COLLECT?

Voluntarily provided data: We collect personal information that you voluntarily provide to us when you contact us. Personal information we collect may include the following:

  • name

  • email address

  • other contact details you provide, such as phone number

Block form submissions: When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us.

Data for analytics: This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device

  • Web pages you visited prior to coming to this website

  • Your IP address

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scrolling

  • Searches

  • Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

Cookies: This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

Fonts: This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including: 

  • Information about your browser, network, or device

  • Information about this site and the page you’re viewing on it

  • Your IP address

 We do not collect or process sensitive information.

HOW IS YOUR INFORMATION USED?

We collect your information so that we can:

  • Communicate with you, primarily when you contact us. When you submit your details via our contact form, we’ll use the email you provide to respond.

  • Run our website. Our site is built with Squarespace and we collect data and share it with Squarepace to ensure our site runs effectively, including for analytical purposes designed to improve our site and hosting/operating our site.

  • For security and fraud prevention, and to comply with law.  

We do not rent, sell or share your information with third parties, except as described in this Privacy Policy.

LEGAL GROUNDS FOR PERSONAL DATA

  • Consent: We may have your information if you have given us consent to use your personal information for a specific purpose. You can withdraw your consent at any time.

  • Performance of a Contract: We may process your personal information if it is necessary to fulfill our contractual obligations to you.

  • Legitimate Interests: We may process your information when it is reasonably necessary to achieve our legitimate organizational interests and those interests do not outweigh your interests and fundamental rights and freedoms.

  • Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

  • Vital Interests: We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

In legal terms, we act as a "data controller" under European data protection laws of the personal information described in this privacy policy.

HOW DO WE STORE YOUR DATA?

Your information is securely stored. We keep your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law. When we have no ongoing legitimate need for your personal information, we will either delete or anonymize such information. As our site is run with Squarespace, your information can be stored by Squarespace. You can read more about Squarespace’s privacy policy here and Data Processing Addendum here.

HOW DO WE PROTECT YOUR INFORMATION?

We follow the principles outlined in the EU GDPR, which encourages organisations to implement technical and organisational measures, at the earliest stages of the design of the processing operations, in such a way that  safeguards privacy and data protection principles right from the start (‘data protection by design’). By default, organisations should ensure that personal data is processed with the highest privacy protection (for example only the data necessary should be processed, short storage period, limited accessibility) so that by default personal data isn’t made accessible to an indefinite number of persons (‘data protection by default’). However, despite our safeguards and best efforts to secure and protect your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18 years of age. If we learn that personal information from users less than 18 years of age has been collected, we will promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us.

YOUR PRIVACY RIGHTS

Under EU data protection law, you have certain data protection rights, as follows:

  • The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

  • The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.

  • The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

  • The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

  • The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

  • The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us using the details below.

CHANGES TO OUR PRIVACY POLICY

We keep our privacy policy under regular review in order to stay compliant with relevant laws, and place any updates on this web page. This privacy policy was last updated on April 2, 2023. Any updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

CONTACT DETAILS

If you have questions or comments about this notice, or you would like to exercise one of your data protection rights, you may email us at bronagh@sustiportal.com. Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office (ICO).