Privacy Policy

What is SustainCheck?

SustainCheck is a platform providing sustainability data and certifications for Belgian companies.

What personal data do we collect?

When you create an account or sign in, we collect and store the following directly in our own systems:

• Your email address.
• Your first name.
• When your account was created, and when you last used the site.

Sign-in itself, including your password if you choose to sign in with email and password, and your full name and any profile picture if you sign in with Google or Microsoft, is handled entirely by Clerk, our authentication provider (see “Who processes your data” below). We never see or store your password ourselves. If you sign in with Google or Microsoft, Clerk may also receive basic profile information such as a profile picture from that provider as part of standard sign-in. We don’t otherwise request, use, or store a profile picture.

This is the complete list of what we currently collect about you as an individual. We do not use analytics or advertising tools on this site, and we do not currently collect payment information.

How do we collect this data?

• Directly from you, or from Google or Microsoft, when you create an account or sign in.
• Automatically, to record your most recent activity (last signed-in time) so your account stays up to date.

Why do we collect this data?

• To create and secure your account, and to let you sign back in.
• To keep our records accurate and to contact you about your account if needed.

We do not use your personal data for advertising, and we do not sell it to any third party.

Who processes your data

We rely on a small number of external providers to run SustainCheck. When you use our site, your data may be processed by:

• Clerk, Inc. is our authentication provider. It manages sign-in, sign-up, and session security on our behalf, including any password you choose to set. See Clerk’s Privacy Policy for details on how Clerk handles this data.
• Google or Microsoft. If you choose to sign in with a Google or Microsoft account, those companies process your sign-in under their own privacy policies.
• Google Cloud Platform hosts our backend application and database, where your account record (email, first name, account timestamps, and administrator status) is stored.
• Netlify hosts the website you are currently using.

None of these providers are permitted to use your data for their own purposes beyond providing their service to us.

Team members of SustainCheck with administrator access can view the list of registered accounts (email, first name, and account timestamps) for the purpose of operating and supporting the platform.

Cookies

Our authentication provider, Clerk, sets cookies in your browser that are necessary to keep you signed in securely. We do not use cookies for advertising or analytics, and we do not currently use any separate analytics or tracking tools on this site. See our Cookie Policy for the full list of cookies we use and how to manage them.

How long do we keep your data?

We keep your account data for as long as your account is active. If you’d like your account and associated data deleted, contact us (see “Contact us” below) and we will delete it, except where we are required to retain certain records by law.

International data transfers

Some of the providers listed above (including Clerk, Google, and Netlify) may process or store data outside the European Economic Area (EEA). Where this happens, we rely on their own compliance mechanisms (such as Standard Contractual Clauses) to ensure your data remains protected to the standard required under EU law.

Your data protection rights

As SustainCheck is based in Belgium, you are entitled to the following rights under the EU General Data Protection Regulation (GDPR) with respect to your personal data:

• The right to access the personal data we hold about you.
• The right to rectification if any of that data is inaccurate or incomplete.
• The right to erasure of your personal data.
• The right to restrict how we process your data.
• The right to object to our processing of your data.
• The right to data portability.

To exercise any of these rights, contact us at the email address below. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) if you believe your rights have not been respected.

Children’s privacy

SustainCheck is not directed at, and is not intended for use by, children under the age of 16.

Changes to this policy

We may update this Privacy Policy as SustainCheck evolves. If we make material changes, we will update the “Last updated” date above.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at wave@sustaincheck.com.