Privacy Policy

Earth Security Research Ltd a company registered in the United Kingdom (Company Number 15446851) (“Earth Security”, “we”, “our”, “us”) is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your personal data when you interact with our website and services, and sets out your rights under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025), and the Privacy and Electronic Communications Regulations 2003 (PECR).

‍

Who we are (Data Controller)

‍

Earth Security Research Ltd (“ES”), a company registered in the United Kingdom (Company Number 15446851) is the data controller for the personal data we collect. We are registered with the UK Information Commissioner’s Office (ICO) under registration number ZC128979.

Registered office: 70 Colombo Street, London SE1 8DP, United Kingdom.

For any privacy-related queries, please contact us at privacy@earthsecurity.org.

‍

Topics

• What data do we collect?

• How do we collect your data?

• The lawful bases for processing

• How will we use your data?

• How do we store and secure your data?

• International data transfers

• Data retention

• Marketing

• What are your data protection rights?

• What are cookies?

• How do we use cookies?

• What types of cookies do we use?

• How to manage your cookies

• Children’s data

• Automated decision-making and profiling

• Privacy policies of other websites

• Changes to our privacy policy

• How to contact us

• How to contact the appropriate authority

‍

What data do we collect?

‍

Earth Security collects the following categories of personal data:

• Personal identification information: name, email address, phone number, job title, and organisation.

• Technical information: IP address, browser type and version, device information, and pages visited, collected automatically via cookies and similar technologies.

• Communications: the content of emails, messages, and feedback you send us.

‍

How do we collect your data?

‍

You directly provide Earth Security with most of the data we collect. We collect and process data when you:

• Register online or download any of our research or other reports.

• Subscribe to our mailing list or newsletters.

• Voluntarily complete a survey or provide feedback via email or our website.

• Correspond with us by email or other means.

• Use or view our website via cookies and similar technologies.

‍

The lawful bases for processing

‍

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Consent (Article 6(1)(a)): for marketing emails to new subscribers and for non-essential cookies.

• Legitimate interests (Article 6(1)(f)): for fulfilling report downloads, responding to enquiries, website analytics, maintaining the security of our systems, and direct marketing to existing contacts under the PECR “soft opt-in.”

• Legal obligation (Article 6(1)(c)): where processing is required to comply with UK law.

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. You can ask us about this balancing exercise at any time.

‍

How will we use your data?

‍

Earth Security uses your data to:

• Process and deliver your report downloads.

• Respond to your enquiries.

• Send you marketing communications about our research, reports, events, and services, where you have consented or where the PECR soft opt-in applies.

• Improve our website and services.

• Comply with our legal and regulatory obligations.

‍

How do we store and secure your data?

‍

We store personal data using HubSpot as a processor acting on our behalf. HubSpot’s privacy policy is available at https://legal.hubspot.com/privacy-policy.

We maintain appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or disclosure, including access controls, encryption in transit (TLS), written contracts with processors, and regular review of our security practices.

‍

International data transfers

‍

HubSpot processes data in the United States, which means your personal data may be transferred outside the UK. Where we transfer personal data outside the UK, we rely on one of the following safeguards:

• The UK Extension to the EU-US Data Privacy Framework, where the recipient is self-certified under the UK Data Bridge; or

• The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, together with any additional measures required to provide an equivalent level of protection.

You can request further information about our transfer safeguards by contacting privacy@earthsecurity.org.

‍

Data retention

‍

We retain personal identification information (name, email address, phone number, etc.) for a maximum of 5 years from your last interaction with us, in order to maintain an ongoing relationship with our research subscribers and contacts. Before this period expires, we will contact you to confirm your continued interest. Data relating to legal obligations may be retained for longer where required by law.

‍

Marketing

‍

Earth Security would like to send you information about our research, reports, events, and services that we think you might find of interest.

We will only send you marketing where you have given consent, or where you are an existing contact and were offered the opportunity to opt out at the point we collected your details (the PECR “soft opt-in”). Every marketing email we send contains an unsubscribe link, and you can opt out at any time.

To opt out or update your preferences, please email privacy@earthsecurity.org or use the unsubscribe link in any marketing email.

‍

What are your data protection rights?

‍

Under UK GDPR, you have the following rights:

• Right of access – You have the right to request a copy of the personal data we hold about you. This is free of charge; we may only charge a reasonable fee where a request is manifestly unfounded, excessive, or repetitive, or for additional copies.

• Right to rectification – You have the right to request correction of inaccurate or incomplete personal data.

• Right to erasure – You have the right to request erasure of your personal data, subject to certain conditions.

• Right to restrict processing – You have the right to request restriction of processing, subject to certain conditions.

• Right to object – You have the right to object to our processing of your personal data, including an absolute right to object to direct marketing.

• Right to data portability – You have the right to request transfer of the personal data you have provided to us to you or another organisation, subject to certain conditions.

• Right to withdraw consent – Where we rely on consent, you may withdraw it at any time.

• Right to lodge a complaint – You have the right to complain to the UK Information Commissioner’s Office (see below).

‍

We will respond to your request within one month. We may extend this by up to two further months for complex or numerous requests, in which case we will notify you within the first month.

To exercise any of these rights, please contact privacy@earthsecurity.org, or write to: Earth Security, 70 Colombo Street, London SE1 8DP.

‍

What are cookies?

‍

Cookies are small text files placed on your device that collect standard internet log information and visitor behaviour information. When you visit our website, we may also collect information automatically through similar technologies such as pixels and local storage. Non-essential cookies are only set with your consent, which you provide through the cookie banner displayed on your first visit.

For further information about cookies, see the ICO’s guidance at https://ico.org.uk/your-data-matters/online/cookies/.

How do we use cookies?

‍

Earth Security uses cookies to:

• Keep the website functioning and secure.

• Understand how visitors use our website (analytics).

• Remember your preferences.

• Support our marketing activities, where you have consented.

‍

What types of cookies do we use?
‍

• Strictly necessary – required for the website to function and cannot be switched off.

• Functional – remember your preferences (e.g., language, location). A mix of first-party and third-party cookies.

• Analytics/performance – help us understand how visitors use the website so we can improve it. Only set with your consent.

• Marketing – used to track effectiveness of our marketing and, where applicable, deliver relevant messages. Only set with your consent.

A detailed list of the specific cookies used on our website, including provider, purpose, and duration, is available via our cookie banner preferences panel.

‍

How to manage your cookies

‍

You can accept, refuse, or change your cookie preferences at any time using the cookie banner on our website. You can also set your browser to refuse cookies, or delete cookies you have already accepted. If you disable cookies, some website features may not function.

Children’s data

Our website and services are not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Automated decision-making and profiling

‍

We do not use automated decision-making or profiling that produces legal effects concerning you, or similarly significantly affects you.

‍

Privacy policies of other websites

‍

Our website contains links to other websites. This privacy policy applies only to our website; if you click a link to another website, you should read their privacy policy.

‍

Changes to our privacy policy

‍

Earth Security keeps its privacy policy under regular review and posts any updates on this page. This privacy policy was last updated on 20 April 2026. Previous versions are available on request.

‍

How to contact us

‍

If you have any questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us. We encourage you to contact us first if you have any concerns, so we can try to resolve them.

Email: privacy@earthsecurity.org

Post: Earth Security, 70 Colombo Street, London SE1 8DP, United Kingdom.

‍

How to contact the appropriate authority

‍

If you wish to make a complaint, or if you feel that Earth Security has not addressed your concern satisfactorily, you may contact the UK Information Commissioner’s Office:

• Website: https://ico.org.uk/

• Helpline: 0303 123 1113

• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF