Privacy Notice

Who we are

AI Sustainability Index Ltd is a company registered in England and Wales and is the data controller for the personal information described in this notice. You can contact us at hello@aisustainabilityindex.com.

What we collect and why

• Account data (name, email, organisation, hashed password) — to create your account and provide certification. Legal basis: performance of contract.
• Certification data (organisation name, certification ID, issue and expiry dates) — to issue, display and verify your certification. Legal basis: performance of contract and legitimate interests in operating a public verification register.
• Calculator inputs (the model mix, server and team data you enter) — to produce your score. We do not publish this without your consent. Legal basis: performance of contract.
• Support correspondence — to answer your queries. Legal basis: legitimate interests.
• Usage data and device data (IP address, browser, pages viewed) — to keep the service secure and improve it. Legal basis: legitimate interests.

Who we share data with

• Paddle — our Merchant of Record. Paddle independently handles payments, billing, tax compliance, invoicing and subscription management, and is its own data controller for that purpose. See Paddle's privacy notice.
• Service providers and subprocessors — hosting, database, email delivery and analytics providers acting on our instructions.
• Professional advisers — accountants and legal advisers where needed.
• Authorities — where required by law.

Public information

When you purchase certification you agree that your organisation name, certification ID, tier, issue date and expiry date will be displayed publicly in our directory and on the verification page. We will not publish your personal email or your calculator inputs.

International transfers

Some of our service providers are based outside the UK and EEA. Where we transfer personal data internationally we rely on UK-approved Standard Contractual Clauses or adequacy decisions to ensure your data is protected.

Retention

We keep your account and certification data for as long as your account is active and for up to 7 years after closure to meet our legal and accounting obligations. Other data is deleted or anonymised when it is no longer needed.

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent where we rely on it. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk). We aim to respond to requests within one month.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and routine security review.

Cookies

We use essential cookies needed to sign you in and keep the service secure. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in future, we will update this notice and request your consent.

Contact: hello@aisustainabilityindex.com.