ESGplus recognizes and respects the paramount importance of privacy for all individuals. Our commitment extends to safeguarding and managing interactions with our company in strict accordance with prevailing legal standards. This policy outlines our dedication to your privacy rights and the manner in which we handle your personal information.

This Privacy Statement elucidates ESGplus's principles and protocols for handling your personal information and delineates the choices available to you concerning the collection and utilization of your data, encompassing information obtained from your online activities. This Privacy Statement is applicable to all entities within the ESGplus consortium, including ESGplus-owned websites, domains, services, applications, and products.

It's important to note that this Privacy Statement does not extend to third-party applications, products, services, websites, or social media features accessible via links on platforms under our domain. Should you access these external links, you will depart from ESGplus-controlled platforms, potentially leading to data collection or sharing by third parties. We disclaim any control, endorsement, or representations regarding third-party websites and their privacy practices, which may diverge from our own. We strongly recommend reviewing the privacy policy of any site you interact with to understand their data collection and utilization practices before consenting.

In the event of discrepancies between translations of this Privacy Statement and the English version, the English rendition shall take precedence.

Personal data encompasses any information that directly or indirectly identifies you as an individual. At ESGplus, we collect this data through your interactions with our online platforms and during conversations or correspondence with our representatives.

The personal data we collect from you varies based on your interaction with us and the services you utilize. This data may include, but is not limited to, the following categories:

• Contact Data: We may gather personal and/or business contact details, such as your first and last name, mailing address, phone number, fax number, email address, and similar information.
• Payment Data: To facilitate secure payment processing and prevent fraud, we collect essential payment data, including credit/debit card numbers, security codes, and associated billing details.
• Account Data: Information related to your interaction with ESGplus services, including how you purchased or subscribed to them, transaction history, billing records, and support interactions. This encompasses the ESGplus products and services you utilize, as well as any relevant details associated with your created account.
• Location Data: We may collect geolocation data when you enable location-based services or explicitly provide location-related information.
• Security Credentials Data: To ensure authentication and access to ESGplus accounts, we gather user IDs, passwords, password hints, and related security information.
• Demographic Data: Certain demographic data, including country, gender, age, preferred language, general educational and employment background, and overall job interests, may be collected from you or obtained from third parties.
• Preferences: Your preferences and interests pertinent to our products and services are collected. This includes information you explicitly share and inferences drawn from your usage patterns.
• Social Media Data: ESGplus may provide social media features enabling interaction with various social platforms. Usage of these features may result in data collection or sharing, contingent upon the specific feature. We urge you to review the privacy policies and settings of your chosen social media sites to comprehend the scope of information that could be collected, utilized, and shared.
• Other Unique Identifying Information : We may also collect other distinctive information, such as product serial numbers. Information you provide during in-person, online, phone, or mail interactions with our representatives, help desks, or other customer support channels may also be collected. This could encompass responses to customer surveys, contest submissions, or additional information provided to facilitate service delivery and query resolution.

Sharing your requested personal data is not obligatory. However, opting not to provide certain information may preclude us from delivering services, specialized features, or effectively responding to your inquiries in certain cases.

We gather details about your computer and/or browsing device. This includes information such as your operating system, geographic region, language preference, time zone, model number, browser version, computer manufacturer, connection port, unique device identifiers, advertising identifiers, and additional technical insights that vary based on the product you're using.

We record information about your interactions with ESGplus websites, applications, and sites "powered by" other entities on our behalf. This encompasses the content viewed, interactions made (including ads), website origins, and other clickstream behaviors. Certain automatic data collection tools, such as cookies, assist in capturing this information.

In our pursuit of comprehending how ESGplus services are utilized, we may gather anonymous responses to surveys or aggregate data that provides insights into usage patterns. This data is stripped of personally identifiable information and solely focuses on overall trends.

ESGplus has the potential to acquire data from trusted third-party sources, either publicly accessible or obtainable on a commercial basis. This information could encompass personal data, such as your name, address, email address, preferences, interests, and specific demographic details. For instance, personal data might be acquired if you access our applications through social media logins (e.g., utilizing your Facebook or other social media credentials). The extent of information shared depends on your social network account privacy settings. Moreover, if you procure ESGplus services from one of our partners, pertinent details about your purchase might be shared. If deemed relevant, we may also acquire information from fraud prevention agencies or credit reporting entities in association with credit evaluations.

We also receive non-personal data, such as aggregated or de-identified demographic/profile information, from third-party entities that specialize in providing enterprise data, analytics, and software services.

To maintain data accuracy and heighten the quality of our customer experience, facilitating personalized services, content, marketing, and advertisements, we may link or amalgamate data collected from the diverse sources mentioned above. As an example, we might correlate geographic information obtained from commercial sources with IP addresses amassed by our automatic data collection tools to deduce your approximate location. Such information linkage could occur through distinctive identifiers like cookies or account numbers.

At ESGplus, the collection and utilization of personal data are directed towards managing your association with us and optimizing your engagement and interaction. We handle the information you provide in harmony with the EU's General Data Protection Regulation (GDPR), encompassing the processes of collection, storage, and usage. To uphold accuracy and currency, we endeavor to maintain your information precisely and refrain from retaining it for durations exceeding necessity. The retention of data is guided by legal obligations, encompassing requirements for income tax, audits, and business-sector regulations. In certain instances, data retention periods might be prolonged in alignment with specific business necessities.

At times, your personal data may be shared with third-party service providers who are contracted by ESGplus as part of our interaction with you. Such sharing will only occur if there exists a legitimate purpose, and either your consent has been obtained or legal obligations necessitate it. Any disclosure to third parties is subject to stringent security measures to ensure the confidentiality of your information. The data shared is to be used exclusively for fulfilling the services they provide on our behalf. Once the purpose is fulfilled, these third parties are mandated to dispose of your details in alignment with ESGplus's established procedures.

You maintain control over your privacy preferences with regards to communications from us:

• Subscription Communications: These encompass email newsletters, disclosure notifications, and similar material that you explicitly request or consent to receive. To subscribe to our newsletter, we employ a double-opt-in process. Confirmation of your registration within 24 hours is requested, failing which your information is automatically deleted after a month. We also retain IP addresses and registration/confirmation times for verification purposes. Should you choose to opt out of such communications, you can:
  • Use the "Opt out" or "Unsubscribe" link provided in the email
  • Visit the original website of subscription to follow opt-out instructions
  • Contact our Data Protection Officer, providing relevant details about the subscriptions or marketing communications you wish to cease
• Video Integration: Videos on our site from external platforms (TwentyThree and YouTube) have specific privacy implications. No personal data is stored on TwentyThree unless you subscribe to its notification service. YouTube videos operate under "extended data protection mode," transmitting data only when played. Your Google account may associate session data if logged in. Logging out before activation detaches data from your profile. YouTube uses this data for advertising, research, and site design. To exercise your rights, contact YouTube.
• Google Maps Integration: Our website utilizes Google Maps for interactive maps and enhanced functionality. Google receives information when you access our map sub-pages. If logged into Google, your data associates with your account. Revoking user profile creation requires contacting Google. Details on data collection and processing can be found in their privacy statement. Google processes data in the USA under legal frameworks. For rights and privacy configurations, visit https://policies.google.com/privacy?hl=en&gl=en.

As the subject of your personal data in our possession or undergoing processing, you possess the following rights:

• Right of Access and Review: You have the prerogative to be informed about the utilization of your personal data and to request a copy of the information we retain about you in a comprehensible format.
• Right of Rectification: Should any of the data we hold about you be inaccurate or incomplete, you hold the right to rectify it.
• Right to be Forgotten (Right to Erasure) : Under specific circumstances, you can request the deletion of your data from our records.
• Right to Restriction of Processing: If specific conditions apply, you are entitled to request the limitation of processing.
• Right of Portability: You possess the right to have the data we possess about you transferred to another organization.
• Right to Object: You have the authority to contest certain types of processing, including direct marketing or the sharing/selling of your data.
• Right to Object to Automated Processing, Including Profiling : Additionally, you hold the right to object to the legal consequences of automated processing or profiling.
• Right to Judicial Review: Should ESGplus deny your access rights, we will furnish a rationale for our decision. You have the option to register a complaint as outlined below. If your personal data processing involves a third party, all your aforementioned requests will be relayed to them.

Should you have any inquiries about your privacy or the information detailed in this policy, we encourage you to get in touch with our dedicated ESGplus data privacy representative. Whether you have questions, concerns, or require further clarification, our team is here to assist you.

Email: enquiry@ESGplus.com

Phone: +603-90593788

Additionally, you retain the right to file a complaint with ESGplus's Data Protection Officer or directly with the relevant supervisory authority. Your concerns hold significance to us, and we are committed to addressing them promptly and responsibly.