Legal
Privacy Policy
Effective date: 28-Dec-2025
SustainaCore (“we”, “us”) operates sustainacore.org as a personal, non-commercial research project.
This Privacy Policy explains what we collect, why we collect it, how we use it, and your rights.
1) What we collect
Depending on how you use the Site, we may collect:
A) Information you provide
- Account details: email address, username (if accounts are enabled)
- Messages or submissions: content you send via forms (such as corrections requests)
- Preferences: if you choose to save settings
B) Information collected automatically
- Basic technical data: IP address, browser type, device type, operating system, approximate location (city/region level), and pages viewed
- Cookies and similar technologies: used for login/session security and site functionality (see Section 6)
- Server-side usage logs: page views, API calls, downloads, and Ask2 chat metadata recorded with truncated IP and hashed identifiers for security
We do not intentionally collect special category personal data (such as health information, political opinions, religion, or precise location).
2) Why we collect it (purpose)
We use personal data to:
- create and manage accounts and authentication (if enabled);
- provide access to logged-in features;
- operate, secure, and maintain the Site;
- respond to messages, corrections requests, and complaints;
- improve the Site (analytics and performance monitoring);
- prevent abuse, scraping, fraud, or security incidents.
3) Legal basis (United Kingdom / European Union style)
Where relevant, we process personal data under one or more of these bases:
- Legitimate interests: running and securing the Site, improving functionality, responding to requests
- Consent: optional cookies or marketing communications (if any)
- Contract: to provide account access and user features when you sign up
4) Sharing your data
We do not sell personal data.
We may share limited data with service providers that help operate the Site (for example: hosting, email delivery, authentication, analytics). These providers process data only to provide services to us.
We may disclose information if required to comply with law, enforce site rules, or protect the Site and users.
5) Data retention
We keep personal data only as long as needed:
- Account data: retained while your account is active (and for a reasonable period after deletion for security/log integrity)
- Corrections/complaints submissions: retained as needed to manage the issue and maintain an audit trail
- Server/security logs: retained for a limited period for security and troubleshooting
- Analytics telemetry: retained for up to 180 days for reliability and product improvement
You may request deletion (see Section 8), subject to legal and security constraints.
6) Cookies
We may use cookies and similar technologies for:
- Essential cookies: login sessions, security protections, and basic site functionality
- Analytics cookies (optional): understanding site usage and performance
If you use the Site with accounts enabled, essential cookies are required for login to work. Analytics cookies are only set after you opt in, and you can change your choices anytime from the Privacy settings link in the footer.
7) Security
We take reasonable technical and organisational measures to protect data (for example: access controls, encryption in transit, and standard server security practices). No method of transmission or storage is completely secure.
8) Your rights
Depending on your location, you may have rights to:
- access your personal data;
- correct inaccurate data;
- request deletion;
- object to processing in certain circumstances;
- request restriction of processing;
- request data portability (where applicable).
To exercise rights, contact: info@sustainacore.org
We may need to verify your identity before responding.
If you are in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner’s Office.
9) International transfers
If our hosting or service providers are located outside your country, your data may be processed internationally. We aim to use reputable providers and appropriate safeguards where applicable.
10) Children
The Site is not intended for children under 16. We do not knowingly collect data from children.
11) Changes to this policy
We may update this Privacy Policy periodically. We will post the updated version with a new effective date.
12) Contact
Privacy questions: info@sustainacore.org
Related resources
Additional policies and disclosures: Terms, Corrections & Complaints, Press resources.