Highland Sustainability Limited ("we") is the data controller for personal data collected through highland.earth, the Board Energy Transition Diagnostic and our Responsible Energy Briefing. We are registered in England and Wales at 5 Godalming Business Centre, Woolsack Way, Godalming GU7 1XW. You can contact us about anything on this page at hello@highland.earth.

What we collect and why

When you	We collect	We use it to	Lawful basis
Complete the Board Energy Transition Diagnostic	Your answers and score. These stay in your own browser until you ask for the briefing.	Show your result on screen	Not personal data until you submit the form
Ask for the board briefing	Name, work email, organisation, sector, your score and priority areas	Send you the briefing, and follow up personally to offer a conversation about your results	Legitimate interests: responding to your request and offering our services to people who have asked about them
Tick "send me the Responsible Energy Briefing"	Your email address, passed to Substack	Add you to the free Briefing mailing list	Consent, which you can withdraw by unsubscribing
Book a Board Energy Transition Review	Name, business name, billing address, email and payment details, collected by Stripe	Take payment, issue a receipt and arrange the session	Performance of a contract
Email us	Whatever you include in the email	Reply to you	Legitimate interests

Who handles the data for us

We use a small number of service providers. Each processes data only on our instructions.

• Formspree (United States) receives diagnostic form submissions and emails them to us.
• Stripe processes payments. We never see your full card details.
• Substack (United States) hosts the Responsible Energy Briefing and its mailing list. Substack's own privacy policy applies once you subscribe.
• Cloudflare hosts this website and provides aggregate, cookie-free visitor statistics.

Where a provider is outside the UK, transfers rely on the UK International Data Transfer Agreement or the provider's equivalent safeguards.

How long we keep it

• Diagnostic leads: up to two years from your last contact with us, then deleted.
• Payment and invoice records: six years, as UK tax law requires.
• Email correspondence: as long as needed to deal with the matter, reviewed annually.

What we don't do

We don't sell or share your details with third parties for their own marketing. We don't use automated decision-making about you. We don't send marketing email unless you asked for the Briefing or are in a business relationship with us, and every email includes a way to stop.

Cookies and browser storage

This website sets no tracking cookies. The Board Energy Transition Diagnostic saves your answers in your own browser's storage so you can return to them; nothing is sent to us until you submit the form. Visitor statistics are aggregate and do not identify you. Third-party pages you go on to (Substack, Stripe) set their own cookies under their own policies.

Your rights

Under UK data protection law you can ask us to tell you what personal data we hold about you, correct it, delete it, restrict how we use it, or give you a copy. You can object to processing based on legitimate interests, including any follow-up from the diagnostic, and we will stop. Email hello@highland.earth and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We will update this page if our practices change, and show the date of the latest version at the top.