Privacy notice
Energy data portal
PRIVACY NOTICE
Energy data portal · The Sustainability Place Last updated 2026-09-01
WHO WE ARE
The Sustainability Place. For questions about this notice, or to exercise any of the rights below, email support@mysustainabilityplace.com.
1WHAT WE HOLD ABOUT YOU
Your email address. A hashed version of your password — we never see the password itself and cannot recover it. The dates you signed in. A record of which sites you viewed and which reports you downloaded.
That is the whole list. We do not hold your name, address, telephone number or any payment details in this service.
2WHY WE HOLD IT
Your email address and password so you can sign in.
The record of what you viewed because we run a service where clients are kept separate from one another. Being able to answer "who accessed this client's data" is part of doing that properly, and it protects you as much as us.
The lawful basis for your account is performance of our contract with your organisation. For the activity record it is our legitimate interest in running the service securely — the impact on you is small, since only your professional use of the system is recorded.
3METER DATA
Consumption data for a commercial building is not personal data. It relates to a floor, a circuit or a piece of plant, not to a person.
If a site includes homes, that changes — half-hourly consumption for a dwelling can show when somebody is in — and we will agree the arrangements with you before collecting anything.
4COOKIES
One cookie. It is called `session`, it identifies your signed-in session, and it is deleted when it expires or when you sign out.
It is strictly necessary for the service to work, so it does not require your consent and there is no banner to click. It carries no tracking identifier, is not readable by scripts, and is not shared with anyone.
We use no analytics, no advertising and no third-party tracking of any kind. The portal loads nothing from other companies, so no other website learns that you visited.
5WHO ELSE SEES IT
Rayleigh Instruments collect the meter readings on our behalf.
Our own hosting is set out in our agreement with your organisation. We will tell you before adding anyone else.
We do not sell data, and we do not share it for marketing.
6HOW LONG WE KEEP IT
The last two are being settled and this notice will be updated when they are.
7YOUR RIGHTS
You can export everything we hold about you, from your own account, at any time and without asking us.
You can ask us to correct your email address, to close your account, or to erase your personal data.
On erasure: we remove you from the activity record rather than deleting the record itself. Those entries show who accessed each client's data, and we are obliged to keep that account for our other clients — so the entries remain with your identifiers removed. We will confirm in writing what was done.
You can also complain to the Information Commissioner's Office at ico.org.uk.
8HOW WE PROTECT IT
Passwords are hashed with scrypt. We never set a password for you and never see one.
Sessions expire and can be revoked. Five failed sign-ins lock an account for fifteen minutes, and the message is the same whether the address exists or not, so the form cannot be used to find out who has an account.
You only ever see sites granted to your organisation, and only data released to you under your schedule. That is enforced on our servers, not just in your browser.
Connections are encrypted. Backups are encrypted and kept separately.
9IF THIS NOTICE CHANGES
We will publish an updated version and tell you what changed. The date at the top always shows the current version.
The Sustainability Place support@mysustainabilityplace.com