Privacy Policy

Global Sustainability Solutions and Services QFZ LLC ("GSustain", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website (gsustain.org) or engage with our services.

By using our website or submitting information to us, you consent to the practices described in this policy. This policy is governed by the applicable laws of the State of Qatar, including Law No. 13 of 2016 on Personal Data Privacy Protection.

1. Information We Collect

We may collect and process the following categories of personal data:

Information you provide directly:

• Name, job title, and organization
• Email address, phone number, and other contact details
• Information submitted through our contact forms, quote requests, or training enquiries
• Details of your project or service requirements
• Correspondence and communications with us

Information collected automatically:

• IP address and approximate geographic location
• Browser type, operating system, and device information
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source
• Cookies and similar tracking technologies (see Section 3)

Information from our Carbon Diagnostic tool:

• Organization details and sector information entered into the tool
• Activity data (energy consumption, fuel use, travel data) entered for emissions estimation
• Email address if you choose to receive your results by email

2. How We Use Your Information

We use the personal data we collect for the following purposes:

• To respond to your enquiries, quote requests, and service requirements
• To provide, deliver, and improve our consulting, verification, assessment, and training services
• To send you relevant communications about our services, where you have consented or where we have a legitimate interest
• To process the Carbon Diagnostic tool inputs and generate emissions estimates
• To comply with legal obligations and accreditation requirements
• To maintain and improve the security, functionality, and performance of our website
• To analyse website usage patterns and improve user experience

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website traffic. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These collect anonymized usage data.
• Functional cookies: Remember your preferences and settings to provide a better experience.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

4. Third-Party Services

We may share your personal data with the following categories of third parties, solely for the purposes described in this policy:

• Service providers: Hosting providers, email services, and analytics platforms that support our website operations
• Accreditation bodies: Where required by our accreditation obligations (e.g., GAB), limited information may be disclosed during audits or surveillance activities
• Legal and regulatory authorities: Where required by law or in response to valid legal process
• Professional advisors: Lawyers, accountants, and auditors where necessary for business operations

We require all third-party service providers to process your data in accordance with applicable data protection laws and this privacy policy.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS)
• Access controls limiting data access to authorized personnel only
• Regular security assessments and updates
• Documented information security procedures maintained under our ISO 9001 quality management system

While we take reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

6. Cross-Border and Affiliated-Entity Processing

GSustain (Global Sustainability Solutions and Services QFZ LLC) is part of the RSustain Group. Certain digital tools and services available on gsustain.org are operated on infrastructure managed by affiliated RSustain Group entities located outside Qatar, including in the United Kingdom. These tools include:

• CarbonOffset Evaluator — credit quality screening calculations processed on UK-hosted infrastructure
• DesalBench — desalination benchmarking calculations processed on UK-hosted infrastructure
• Sustainable Finance Classifier — QCB sustainable finance screening calculations processed on UK-hosted infrastructure, with a local fallback

When you use these tools, the data you enter (which may include assessment responses, screening inputs, and contact details you provide) is transmitted to and processed on servers operated by RSustain UK Ltd, a company registered in England and Wales. This transfer is made on the basis of our legitimate interest in providing these services and is governed by intra-group data processing agreements.

Tools that operate entirely within your browser — including the CBAM Readiness Diagnostic, Carbon Diagnostic, Qatar ESG Reporter, QFMA Governance Diagnostic, and GSAS Readiness Diagnostic — do not transmit assessment data to any server. Only contact details you voluntarily submit (e.g. to unlock a report) are transmitted, and those are processed on GSustain's own infrastructure in accordance with Section 2 of this policy.

Where lead-capture contact details (name, email, company) are collected through any tool on gsustain.org, they are stored on infrastructure operated by GSustain within Qatar.

7. Your Rights

Under applicable data protection laws, including Qatar Law No. 13 of 2016, you have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you
• Correction: You may request correction of inaccurate or incomplete personal data
• Deletion: You may request deletion of your personal data, subject to our legal and contractual obligations
• Objection: You may object to certain processing of your personal data
• Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time

To exercise any of these rights, please contact us using the details provided in Section 10 below. We will respond to your request within 30 days.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law, regulation, or accreditation requirements. Specific retention periods include:

• Enquiry and contact form data: Retained for up to 3 years from the date of last contact
• Client engagement records: Retained for a minimum of 7 years as required by our accreditation obligations and applicable law
• Carbon Diagnostic tool data: Session data is not permanently stored unless you opt to receive results by email, in which case your email and results are retained for up to 12 months
• Website analytics data: Retained for up to 26 months in anonymized form

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us:

Global Sustainability Solutions and Services QFZ LLC
Qatar Free Zones, Doha, Qatar
Email: mail@gsustain.org
Phone: +974 7077 6727