Privacy Notice

This document seeks to summarise how we collect, maintain, secure and share your personal information. The principles we follow in doing this are that the use of your data should always be:

  • Fair
  • Transparent, and
  • Lawful

Individual Data

We ask for only details that allow us to identify the organisation you work for, your role in the organisation’s sustainable practices, and contact details so that we can provide updates regarding the tools offered or data entered on this site. If you have any questions about this please make a request here. Please let us know of any changes as they happen and we will also remind you each year to confirm your information is up to date.

We will only store, transmit and use your personal data in the places detailed in our regularly reviewed data audit.

We will not transfer your information outside of the UK and EEA unless equivalent protection exists as that provided by UK law.

If at any stage there is a need to share your information with third parties, you will be informed in advance unless legal exemptions to doing so apply. Only trained staff or representatives may share your information and records of having done so will be kept.

At any stage you may request to see what we hold on you in the same way you submitted it and we will respond as quickly as reasonably possible (no longer than 30 days). You may also withdraw your permission in the same way.

If you have any further questions for our Data Protection Officer or wish to see the full Data Protection Policy please contact In the event that you are still not satisfied you may also contact the Information Commissioner’s Office.

Organisation Data

The data you enter into the tools on this site remains the property of the organisation you enter it on behalf of. You agree to it being held online and to us processing it in order to provide, support and improve the tools on this site. Furthermore you agree to it being shared with the Sustainable Development Unit (SDU) along with whether you consider it draft, submitted (complete) or published.

The Healthy Returns tool has no submission or publication process so any data you enter remains private to your organisation and the SDU indefinitely.

The Sustainability Reports will automatically mark your answers as submitted and published on 1st October following the end of the financial year they apply to. So answers for 2017-18 will be published on 1st October 2018.


Where you enter your own or your organisation’s data (as opposed to viewing data we have published) we will issue you with a username and password. This username is typically your organisational email address and along with the password is specific to you. You agree to take measures to protect these and not to share them with anyone else. If at any stage you believe these credentials to be compromised that may represent, or lead to, a breach data protection under the Data Protection Act and you agree to both reset your password and notify us immediately.


Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

The table below explains the cookies we use and why.




Google Analytics _g_…, _ga, _gid These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
Click here for an overview of privacy at Google
WordPress Cookies wordpress_…
WordPress is the software we use to manage and publish this site. It uses cookies to verify who you are. There are cookies for logged in users and for commenters. The actual cookies contain hashed data, so you don’t have to worry about someone gleaning your username and password by reading the cookie data. Read more about WordPress cookies
Jetpack Cookies See Jetpack site Jetpack is an extension to the core WordPress software and also used to maintain the site Read more about Jetpack cookies
Wordfence Cookies wfvt_…
Wordfence is a plugin that helps us protect the site. It uses cookies for three tasks:

  • To uniquely identify visitors shown in Wordfence Live traffic.
  • To track a user who was previously logged into WordPress but has logged out to ensure that Falcon cache does not show that user cached pages.
  • If a user has visited a unique page that allows them to bypass country blocking a cookie is set to identify that user so that country blocking does not prevent them from viewing the site.
YouTube cookies We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on your computer once you click on the YouTube video player, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode.
Read more at YouTube’s embedding videos information page.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit or