Privacy Policy
This policy explains how Data Endeavour Ltd (“we”, “us”) collects, uses, and protects personal data in connection with the dataendeavour.co.uk website and the Green Compliance Intelligence data product. We are the data controller for the purposes of UK GDPR.
1. Who we are
Data Endeavour Ltd
Registered in England & Wales · Company No. 17220545
Contact: info@dataendeavour.co.uk
2. Personal data we collect
Enquiries. When you contact us by email, we collect your name, email address, and any other information you choose to include. This is used solely to respond to your enquiry.
Subscribers. When you subscribe to Green Compliance Intelligence via Google Cloud Marketplace, Google collects and processes your account and payment details as the platform operator. We receive your name, email address, and organisation name from Google in order to manage your subscription and provide support.
Website visits. This website loads fonts from Google Fonts (fonts.googleapis.com). When the page loads, your IP address is transmitted to Google’s servers as part of that request. We do not control Google’s processing of this data. This website does not set any cookies and does not use any analytics tracking.
The dataset itself. Green Compliance Intelligence contains company and facility regulatory data sourced from public registries (US EPA, EU EEA, UK Environment Agency, Companies House, GLEIF). Underlying source data incidentally contains individual names from public registers — specifically company director names from Companies House and individuals named in UK enforcement notices. These names are processed as part of corporate compliance records and are not exposed in the subscriber-facing dataset, which operates at company and facility level only. The dataset is not used to make decisions about individuals.
3. Lawful basis for processing
Contract performance — processing subscriber contact details is necessary to deliver and support the service.
Legitimate interests — responding to business enquiries; loading web fonts for website presentation. We have assessed that these interests are not overridden by your privacy rights.
Legal obligation — retaining certain records as required by UK law (e.g. accounting records).
4. How we share your data
We do not sell personal data. We share data only where necessary to operate the service:
- Google Cloud Platform / Analytics Hub — our service delivery platform. Google processes subscription and account data as a data processor under a Data Processing Agreement. Google’s Privacy Policy governs their processing.
- Google Fonts — your IP address is transmitted to Google when the website loads. See Google’s Privacy Policy for details.
- Legal disclosure — we may disclose personal data if required to do so by law or in response to a valid legal request.
5. International transfers
Google may process personal data outside the UK and EEA. Google operates under Standard Contractual Clauses and UK GDPR-compliant transfer mechanisms. We do not otherwise transfer personal data outside the UK.
6. How long we keep your data
Subscriber contact data — retained for the duration of the subscription and for seven years after termination, in line with Companies Act 2006 s.386 (accounting records).
Enquiry correspondence — retained for up to two years from the date of last contact.
Pipeline source data (individual names from public registers) — company director names and individuals named in UK enforcement notices are retained within the pipeline for as long as the pipeline operates; raw source files are retained for a minimum of 24 months. This data is sourced exclusively from public regulatory registers and is processed under legitimate interests. You may request details of what data we hold about you by contacting info@dataendeavour.co.uk.
We do not retain web font request data; this is processed directly by Google.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your personal data where there is no legitimate reason for us to continue processing it
- Restriction — ask us to restrict processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at info@dataendeavour.co.uk. We will respond within one month.
8. Complaints
If you have concerns about how we handle your personal data, you have the right to complain to the UK Information Commissioner’s Office (ICO):
ico.org.uk — 0303 123 1113
We would appreciate the opportunity to address your concern before you contact the ICO — please email us first at info@dataendeavour.co.uk.
9. Changes to this policy
We may update this policy from time to time. Where changes are material, we will notify subscribers by email. The current version is always available at dataendeavour.co.uk/privacy.