Our privacy statement helps to protect your rights and provide context to the information on this website and the services we provide. 

About us

Envirostewardship Consulting Limited is an independent consulting company, represented by Martin Dallimer and Lindsay Stringer, and registered with Companies House. Our Company Number is: 16860290. Our office address is 128 City Road, London, EC1V 2NX, United Kingdom. 

Envirostewardship Consulting Limited is registered with the Information Commissioners Office (ICO) as a Data Controller. Our registration number is ZC069458. 

We adhere to the principles of the 2018 Data Protection Act, the requirements of the UK General Data Protection Regulation (UK GDPR) on data privacy and take all reasonable and appropriate steps to protect the privacy of your information as required by the principles of various information and privacy acts around the world.

  
Information we collect and access 

We may collect and use (process) Personal Data (personal information) about you when you participate in any of our research, surveys, public consultations, attend public events, meetings, focus groups, etc linked to the services we provide to our clients. Some research and consultation activities may include the use of video and/or audio recording. Prior consent will be obtained from you before you provide us with any data and before any such recording takes place. Privacy notices will be prominently displayed where observational research is undertaken. We may also process Personal Data that has been shared with us by clients to evaluate their services. 

We collect and access Personal Data about you when you contact us to get further information or a quote, or when we feel that you may have a Legitimate Interest in receiving information about our services. Data will be used for administration of these services. 

How we use personal data 

We only collect the data we need to administer and provide services that people opt-in to receive, to inform people about our services they may be interested in and to support research and evaluation projects commissioned by our clients. The latter includes using Personal Data for analysis purposes, and may include information such as your gender, age, ethnicity, postcode, email address or other characteristics. Data is aggregated for reporting purposes and personally identifiable data is never passed back to clients or given to any third party, unless you expressly give your prior permission to do so. You will never receive a sales or any marketing contact as a result of participating in any of our data collection activities. 

 
Client supplied information 

Where a client supplies any of your Personal Data to us to undertake a project on their behalf, we typically act as a Data Processor and the client retains all rights as the Data Controller. We will only process your personal data following written instructions from the client in a Data Controller to Data Processor Agreement. This will provide the limitations of the purpose(s) for using your data and will usually be to conduct research, but it may also include updating their records or to allow them to contact you, with your consent. 

 
What we use your information for 

We may use your information to undertake research and complete a project, initiative or service for which purpose you/a client originally provided it to us. We may use your contact information (email address, postal address, telephone number and/or mobile telephone number, etc), to contact you to: 

• Participate in research, evaluation or consultations 

• Undertake quality assurance checks to verify the accuracy of data collected 

• Supply follow-up correspondence or administration, e.g. to provide you with project findings and results, if you have requested them. 

We may also use your information: 

• To provide you with any incentives or thank-you payments promised to you as part of taking in research – e.g. in the form of a voucher

• With your prior permission, pass on your contact details to a client where you agree or request a client contacts you to resolve issues or answer comments and queries. 

We may use photographic (or other images) for the purpose of creating news stories, reports or case studies for our clients and on our website. We will only use an image of a person aged 18 or over with their prior expressed consent. 

We may use audio or video recording during our research. Where this is to be used, prior informed consent is typically gained. We will only attribute comments to individuals where prior expressed consent is gained. In all other cases, comments used in reports and/or case studies and other materials will be anonymised. 

In some instances, such as observational research (where consent may not be possible), then Contractual, Legitimate Interests and/or Public Task are likely to be the legal bases for processing.  A Data Protection Impact Assessment (DPIA) will be undertaken for any processing that is likely to result in a high risk to individuals. As part of our assessment, we will take into account the reasonable expectations of individuals whose personal data are processed and the potential impact on their rights and freedoms.

We may use Personal Data to enable us to supply people with services and information they may have a Legitimate Interest in, such as a newsletter, and personal information will be used to administer the service. We may also use Personal Data to analyse the information we collect so that we can administer, support and improve the services we offer, predict what you might be interested in, contact you for your views on our services and for any other purposes consistent with the proper performance of our operations and business. You have the right to opt-out of these services.  

We will not share your information with any other organisation for any commercial purpose. 

What is the legal basis for processing your information? 

We may process Personal Data to provide a service for the performance of a contract to which you are a party, which may also include any steps taken at your request prior to entering a contract, such as tendering processes, and/or to provide a quote at your request. We will also process your data to comply with any subject access requests in line with legal obligations. 

We may also process your personal data for our Legitimate Interests such as to connect with you to offer our service, answer a question or deal with feedback. Where we rely on and process your personal information for our legitimate interests, we will consider any potential impact on you and your rights under current data protection legislation. For research and evaluation projects, we typically process your personal data on the basis of Consent. 

With whom we may share your information 

Where a client has provided your contact information to us to administer research, an evaluation or consultation on their behalf, we will typically act as a Data Processor. The client will remain as the Data Controller with full obligations under the 2018 Data Protection Act and UK GDPR. We only disclose (share) information relating to you back to clients for the purpose of keeping contact databases up-to-date, for any safeguarding or safety concerns, and/or for follow up about a client service where you give your prior expressed consent. 

We may also share your personal data with selected third party companies, such as printing and mailing distribution companies, but only to administer research services where we are unable to undertake this work ourselves or where we can provide cost savings for clients. These instances are covered by contractual obligations where the supplier operates to UK GDPR and written instructions from us, in line with data protection regulations on unauthorised disclosure. We may also provide third party companies with necessary personal details in order to provide you with any incentives or thank-you payments promised to you as part of taking in research – e.g. in the form of a voucher or similar.

We may also disclose your information where we have a legal duty to do so. This includes to enforcement authorities (for example the police or tax authorities) if asked to do so, or to another third party in the context of legal proceedings. Envirostewardship Consulting strictly respects the privacy of its users. 

Information Storage 

We take reasonable steps to ensure that all information we collect, use or disclose is securely stored. Your Personal Data will be stored securely on encrypted servers and on secure and encrypted offsite backups within the UK. We keep information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage.  We use reputable website service providers and strive to protect your personal information from misuse, loss and unauthorised access. Your data will only be kept for as long as it is required to provide a service to you, such as receiving newsletters, or to administer a client project up to 3 months from the end of that project. As soon as data is no longer needed it will be securely disposed of, deleted or destroyed. 

We will not store or transfer any information we collect from you outside the European Economic Area (the EU member states, Norway, Iceland and Liechtenstein) without prior permission or as permitted by law. 

 
Your right to withdraw consent 

If you wish to be removed from our database, you can do so by filling out the contact us form and requesting that we delete any information we collect from you.  

 
What are my rights? 

All of your information will be maintained by Envirostewardship Consulting Limited in accordance with English law. We want to make sure that your personal information is accurate and up to date. If you have any queries about the information we hold on you or you feel any of your information is incorrect or out of date, please contact us through the form on our website. 

You have the following privacy rights: 

• The right to withdraw consent

• The right to be informed 

• The right of access 

• The right to rectification 

• The right to erasure 

• The right to restrict processing  

• The right to data portability 

• The right to object 

• Rights in relation to automated decision making and profiling. 

You also have a right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO). Information on your rights can be found on the ICO’s website. 

 
Use of www.envirostewardshipconsulting.co.uk 

If you visit our website then we may collect and process your personal data if you decide to actively communicate with us and/or if you subscribe to any of our services. For statistical analysis and website operational requirements, we may also collect and process technical data when you visit and navigate our website. This may include log files, IP address details, Internet browser and operating system, web tracking data (such as referral URLs), time and date stamps and data for Google Analytics. 

Envirostewardship Consulting Limited is not responsible for the content or privacy policy on any website accessed via external website links and once a user clicks on a link to an external site they will be subject to that organisation’s privacy policy. 

 
Cookies 

Cookies are small text files stored on the user’s internet connected device, such as a computer, mobile phone, tablet, web-enabled TV, etc. Our website uses cookies for security purposes and to help us understand how our website is being used, which pages are being visited etc. 

 
Changes to our privacy policy 

We keep our privacy policy under regular review and we will place any updates on our website:  https://www.envirostewardshipconsulting.co.uk 

 
Accessing, correcting or updating your information

You can access the personal information that we hold about you in accordance with our obligations under basic principles of access to information laws. We will also take all reasonable steps to correct and update your personal information or remove it if it is no longer needed. If you believe that any information we are holding about you is incorrect or incomplete, please contact us through the form on our website as soon as possible, and we will immediately correct any information found to be incorrect. Similarly, if you believe we are not fulfilling our commitments to you or believe we have breached your privacy and confidentiality, in the first instance, please contact us directly through the form on our website.  

If you are not satisfied with our response, you should make a complaint to the Information Commissioner’s Office (ICO). 

Glossary 

Personal Data:  Any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. 

Sensitive Personal Data / Special Category Data: Data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation. 

Data Controller:  A Data Controller determines the purposes and means of processing Personal Data. 

Data Processor:  A Data Processor is responsible for processing personal data on behalf of a Data Controller. 

Purpose: Personal Data will be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. 

Processing: Personal Data will be processed lawfully, fairly and in a transparent manner in relation to individuals. Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes.