Privacy Notice
Last updated: 16 July 2026
This notice explains how personal data is collected and used when you interact with this website and the UK Investor Tracker lead-magnet. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who is the data controller
The data controller is Sustainable Wealth Group Ltd (referred to as "we", "us", "our"), operating together with Harvey Knight in his capacity as Founder & Investor. You can contact us about this notice or any privacy matter at privacy@sustainablewealthgroup.com.
2. What data we collect
- Identity and contact data: full name, work email, company (optional).
- Profile data: role (Investor / Founder / Advisor / Other), investor type, typical ticket size, or intended raise size and sector — used to segment communications relevant to you.
- Consent record: whether you ticked the marketing consent box, plus date, time and page.
- Technical marketing data: UTM parameters, page referrer and page path at the point of submission.
We do not collect special category data, financial account data or payment card data through this website.
3. Why we use it and the lawful basis
- To send you the tracker and follow-up market intelligence — lawful basis: consent (UK GDPR Art. 6(1)(a)). You give this by ticking the consent box on the form.
- To keep records of consent and comply with legal obligations — lawful basis: legal obligation and legitimate interests in demonstrating compliance.
- To secure the site and prevent abuse — lawful basis: legitimate interests in operating a safe service.
4. Who sees your data (processors)
We use a small number of trusted processors under written data-processing terms:
- Supabase (hosting of the leads database, EU region).
- HubSpot (CRM and email delivery), only if enabled; your submission may be forwarded to our HubSpot workspace.
- Lovable (application hosting / CDN for this website).
Where a processor is based outside the UK/EEA, transfers rely on adequacy regulations or Standard Contractual Clauses with supplementary safeguards, as required by UK GDPR Chapter V.
5. Cookies and tracking
This site uses only what is strictly necessary to run the tracker gate (a session flag stored in your browser). If HubSpot analytics is enabled in the future, it will set a tracking cookie (hubspotutk) — we will present a consent banner before that happens and it will only be set if you accept.
6. How long we keep it
- Active list: for as long as you remain subscribed. Each email includes a one-click unsubscribe link.
- After you unsubscribe: we keep a minimal suppression record (email + date) so we do not accidentally email you again. All other fields are deleted within 30 days.
- Consent records: retained for up to 3 years after the last contact to demonstrate compliance, then deleted.
7. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you.
- Have inaccurate data rectified.
- Have your data erased ("right to be forgotten").
- Restrict or object to processing.
- Data portability (receive your data in a machine-readable form).
- Withdraw consent at any time — withdrawing does not affect processing already carried out lawfully with consent.
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any right, email privacy@sustainablewealthgroup.com. We aim to respond within one calendar month.
8. Security
Data is encrypted in transit (TLS) and at rest by our hosting providers. Access is restricted, logged and role-based. We do not sell your data or share it with third parties for their own marketing.
9. Automated decision-making
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
10. Changes to this notice
We will update this page when practices change. Material changes will be highlighted at the top of this page.