Information handled with
purpose and restraint.

Universal Sustainable Growth Organisation Ltd. is the controller for public enquiries, participation applications, account administration and services it operates directly. A service-specific notice or agreement will explain any different or joint controller arrangement.

Website operator and controller: Universal Sustainable Growth Organisation Ltd., a private limited company registered in England and Wales under company number 17056207. Registered office: Suite 10 Capital House, 61 Amhurst Road, London, United Kingdom, E8 1LL. UK data protection registration: ZC248862 (view the ICO registration certificate). Privacy enquiries may be emailed to privacy@universalsustainablegrowth.org or sent to the registered office.

• name, email, country or region, organisation, role and contact information supplied for the relevant route;
• enquiry, Scheme endorsement, membership, training, professional, partnership and support applications and correspondence;
• account identifiers, email verification, recovery and email-change records, optional recovery contact details and authorised access information;
• service, appointment, training, assessment, practice, certification, payment and transaction records needed for the relationship;
• information about contributions, publications and USG professional or organisational records where relevant to an agreed activity;
• documents supplied through an authorised protected workspace; and
• technical, security and activity information needed to deliver and secure the website.

A USG Passport is an internal USG record and is not a government passport or travel document. Do not send government identity documents, sensitive case material, special-category information or criminal-offence data through a general form or ordinary email. Where a service requires such information, its protected collection route, purpose and applicable additional legal conditions must be established first.

Relevant applications and enquiries are routed to the responsible USG department. Authorised staff use departmental email and the application record to review and reply. Mailbox correspondence and database records are distinct copies; an administrative notification is not the complete case file. Access is limited according to responsibility and the needs of the matter.

Information may be shared where necessary with authorised staff and reviewers; providers of hosting, database, storage, authentication, communications, meetings or payments for the relevant function; professional advisers; authorities where legally required; and an appropriately appointed centre or professional where you request or authorise that route. A recipient may act as a processor or as an independent controller, depending on its actual role.

We do not sell personal information. Processors must act under appropriate written terms covering instructions, confidentiality, security, assistance, deletion and audit. Independent providers are responsible for their own applicable privacy notices and obligations. See Data Processing, Infrastructure & Service Providers for the distinction between website infrastructure, object storage, business email and system-generated messages.

USG’s registered office is in the United Kingdom. This does not mean that all hosting, supplier support, email processing or authorised professional access takes place only in the UK. Object storage, website and database operations, business email and transactional email are separate processing activities; use of OVHcloud for storage does not establish the location of every other activity.

A service-specific notice or processing schedule must identify the relevant recipients, storage and access locations and safeguards before confidential documents are collected for that service. Where a restricted transfer occurs, USG must establish an applicable adequacy arrangement or appropriate safeguards, together with the assessment and additional measures required for that transfer. This notice does not assert a particular transfer mechanism without that verification.

Contact privacy@universalsustainablegrowth.org for the locations, recipients and safeguards applicable to your information, including how to obtain relevant details or a copy of safeguards subject to necessary confidentiality protections.

Retention is assessed by record type and the purpose that remains, rather than by keeping all information for the life of an account. Operational copies, email, records required for accountability and backups are considered separately.

The responsible department records any extended retention and reviews whether it remains necessary. A deletion request is assessed across relevant mailbox, database, service and backup records; deleting a browser cookie or closing an account does not itself delete all of those copies. Contact the Privacy function for the period or criteria applicable to your record. This policy does not represent that every retention step is automated.

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing and withdraw consent. Rights are not absolute. We may seek proportionate evidence of identity or authority and explain any lawful restriction, applicable extension or information needed to act. Requests are handled within the applicable statutory period.

Send privacy requests to privacy@universalsustainablegrowth.org or to the registered office. Data protection complaints can be made through that address or complaints@universalsustainablegrowth.org. USG will acknowledge a data protection complaint within 30 calendar days of receipt, investigate without undue delay, provide appropriate progress information and communicate the outcome. This acknowledgement period does not replace a separate deadline for exercising a data right or reporting a breach.

You may complain to the UK Information Commissioner’s Office. The internal review route does not remove external legal rights. See the Complaints & Incident Response Policy and Complaints and Review.

Approved automated tools may assist with research, classification, translation, extraction, drafting or workflow guidance. The relevant department remains responsible for checking information and reaching service, appointment, assessment, certification or complaint decisions. A person affected by an output may ask for correction, an explanation and appropriate human review.

Confidential or sensitive information must not be submitted to an unapproved AI service. A new use involving a solely automated decision with legal or similarly significant effects requires a separate assessment of the applicable legal conditions, transparency and safeguards before use. See the AI Use Policy.

We apply proportionate technical and organisational measures and restrict access by role. The general public website is not directed at children. A programme involving children requires age-appropriate information, safeguarding, an appropriate lawful basis and any necessary parent, guardian or institutional arrangements before personal information is collected through that programme.

The review marker identifies this text’s review date; it is not a retrospective change to a service agreement. Material changes to purposes, recipients or individual choices must be explained to affected people as appropriate before the changed processing, with fresh consent where required. Relevant historical notices and decision records are retained for accountability.

Where a USG record is made available for public verification, the result is limited to information necessary to identify the record and explain its relevant USG role, award, appointment, document version or current status. A query is not an open search of all personal or case records.

Government identity documents, private contact details, payment information, assessment answers and confidential case materials must not form part of an ordinary public result. A professional, organisation or author can request correction through the responsible department. The applicable notice must explain the particular published fields and purpose before publication.