Privacy Policy

Personal information you provide. When you contact us through the form on the Site or by email, we collect the information you give us: your name, your work email address, your organisation and the type of organisation you represent, and the content of your message.

Automatically collected data. The Site does not run analytics or advertising tools. Like any website, it is delivered by a hosting and content-delivery provider whose systems process technical data about each request — such as your IP address, browser and device type, the pages requested and the referring page — in order to serve the Site and protect it against abuse. We do not use this data to identify or profile you. Our Cookie Policy explains what is stored on your device.

We use personal data to:

• provide, operate and improve the Site and our services;
• respond to your enquiries and follow up on them;
• communicate with you about matters you have raised or engagements you are involved in;
• keep the Site secure and performing properly;
• comply with our legal obligations.

We do not sell your data.

We process personal data under the data protection law applicable in Cabo Verde and, where it applies to a particular activity — for example when we deal with individuals in the European Economic Area or the United Kingdom — the General Data Protection Regulation (GDPR) and equivalent laws.

Depending on the activity, our legal basis is one or more of: your consent; our legitimate interests in operating the Site and responding to enquiries; the necessity of processing to enter into or perform a contract with you; and compliance with a legal obligation.

We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as applicable law requires. Enquiries are retained while we deal with them and for a reasonable period afterwards, after which they are deleted or anonymised.

We share personal data only where necessary:

• with trusted service providers that help us operate the Site and communicate with you — currently our hosting and content-delivery provider and the service that delivers messages sent through the contact form to our mailbox — acting on our instructions;
• with competent authorities where the law requires it;
• with third parties where we have your consent or another lawful basis.

We do not sell personal data.

Our service providers operate international infrastructure, so personal data may be processed outside the country in which you live, including in the European Union and the United States. Where the law requires it, we rely on appropriate safeguards for such transfers, such as the standard contractual clauses our providers offer in their data-processing terms.

Depending on the law that applies to you, you may have the right to:

• access the personal data we hold about you;
• have it corrected or deleted;
• object to, or ask us to restrict, its processing;
• withdraw your consent where processing is based on consent;
• receive your data in a portable format;
• lodge a complaint with the competent data protection authority.

To exercise these rights, contact us at contact@esg-access.com. We may ask you to verify your identity before acting on a request.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No system is entirely secure, and we cannot guarantee absolute security.

The Site links to external websites, including those of ESG Access and of event organisers. We are not responsible for their content or privacy practices, and this policy does not apply to them.

We may update this policy from time to time. The current version, with its date, is always published on this page.

Questions about this policy or about your personal data: contact@esg-access.com.