How we protect your data and trust

1. Information we collect

We collect personal data that you choose to share as well as technical data generated through service usage. Categories include:

• Account and contact details: name, professional email, company, role, and region when you subscribe, download assets, or engage our team.
• Engagement records: meeting notes, project context, and feedback captured to deliver advisory services or platform onboarding.
• Usage analytics: anonymised data such as page views, feature interactions, and device metadata used to improve user experience. Analytics are processed with privacy-first tooling and do not track personal browsing outside our properties.
• Voluntary submissions: surveys, event registrations, and fellowship applications that inform our programmes.

2. How we use your information

We process data to deliver circular economy services, maintain platform reliability, and communicate relevant opportunities. Specific purposes include:

• Designing and managing advisory engagements, circular pilots, and workshops.
• Providing access to digital products, data dashboards, and knowledge hubs.
• Sharing newsletters, insights, and event invitations aligned with your interests.
• Improving outcomes through research, product enhancement, and impact measurement.
• Complying with legal obligations, auditing requirements, and risk management processes.

3. Data sharing and third parties

We do not sell personal data. We share information only when necessary and under strict safeguards:

• Service providers: vetted partners supporting hosting, analytics, collaboration, or communication. Contracts require confidentiality and data protection equal to our standards.
• Project collaborators: when co-creating pilots with investors, municipalities, or startups, we share only relevant data with explicit consent and purpose limitations.
• Compliance: authorities or regulators when legally mandated.

4. Data retention, security, and international transfers

We retain personal data only for the duration required to deliver services or meet regulatory obligations. Our security programme includes encryption, access controls, regular testing, and third-party audits. When information crosses borders, we rely on adequacy decisions, standard contractual clauses, or equivalent safeguards compliant with GDPR and other applicable laws.

5. Your rights and choices

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port personal data. You can also object to certain processing or withdraw consent. Submit requests via brandy20250225@gmail.com; we respond within 30 days.

6. Updates to this policy

We review this notice periodically to reflect evolving regulations, technology, and services. Material changes will be announced on this page with a new effective date. Continued use of our services after updates signifies acceptance.