Privacy
Pandell
Privacy Notice for ESG, Pandell, and Whitestar
This Privacy Notice explains how ESG Global (Energy) Ltd, Cubs, Pandell, WhiteStar and our affiliated companies ("we," "our," or "us") collect, use, and protect personal information obtained through our website. We are committed to complying with global privacy laws, including the General Data Protection Regulation (GDPR), UK Data Protection Act 2018, California Consumer Privacy Act (CCPA/CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Brazil’s Lei Geral de Proteção de Dados (LGPD), and, where applicable, China’s Personal Information Protection Law (PIPL).
Scope
This Privacy Notice applies to users in Canada, the United States (including California, Virginia, Colorado, Connecticut, Utah), the United Kingdom, the European Union, Brazil, China, and other jurisdictions where local privacy laws require notice and rights.
Information We Collect
We collect the following types of personal information:
- Contact details (e.g., name, business email address, business phone number)
- Demographic information
- Marketing preferences
- Event participation data
- Website usage data (e.g., cookies)
For individuals who have subscribed to receive our marketing or customer emails, we may use HubSpot or similar platforms to monitor engagement with those emails, such as opens and link clicks. We process this information based on your subscription preferences and our legitimate interest in improving our communications. You can change your email preferences or opt out of marketing communications at any time using the unsubscribe link included in our emails.
Sources of Your Personal Data
We may obtain your personal data from the following third-party sources:
- Business contact data providers (for example, ZoomInfo, Apollo, LIvestorm, AWRI, ESRI) who compile publicly available and commercially sourced business contact information.
- Purchased marketing lists from reputable B2B data vendors and industry-specific list providers.
- Publicly accessible sources, including company websites, professional networking platforms, business directories, and official registers.
- Event organisers and industry associations who share delegate or member contact details with exhibitors or sponsors (where you have consented to such sharing).
- Business partners and referrals who recommend your organisation or share contact details with your permission.
When we obtain your data from a third party, we will process it only for the purposes set out in this notice and in accordance with your rights under data protection law.
Purposes and Lawful Basis
We use this data for B2B marketing and business development, relying on either explicit consent, Performance of a Contract or our legitimate interests in promoting our products to relevant business contacts.
How We Use Your Information
We use your personal information for:
- Communicating about our products, services, events, and promotions
- Organizing and managing events, promotions and demonstrations
- Sending marketing materials tailored to your preferences
- Improving our services and marketing strategies
Sharing Your Information
We may share your personal information with:
- Affiliate companies such as Earth Etch
- Service providers (e.g., event organizers, marketing agencies)
- Business partners for joint promotional activities
- Google Ads
We do not sell your personal information.
Legal Basis for Processing (GDPR)
Under the GDPR, we process your personal data based on one of the following legal bases:
- Consent: For marketing communications and promotional activities.
- Legitimate Interests: To improve our services and manage events.
- Contractual Necessity: To fulfil agreements between you and us.
How Long We Keep Data For
Personal Data collected for marketing is retained until such a point in which you object to the processing, where it will be removed immediately. We review our dataset periodically for inaccuracies and cleanse the data as required.
Your Rights Depend on Your Location
GDPR (EU/EEA Residents):
You have the right to:
- Access your personal data.
- Request corrections or deletion of your data.
- Withdraw consent at any time.
- Restrict or object to data processing.
- File a complaint with a Data Protection Authority.
CCPA/CPRA (California and North American Residents):
You have the right to:
- Know what personal information we collect about you.
- Request deletion of your personal information.
- Opt out of the sale or sharing of your data.
- Correct inaccurate information.
- Limit the use of sensitive personal information.
PIPEDA (Canada Residents):
You have the right to:
- Access your personal information.
- Request corrections to your data.
- Withdraw consent for data processing.
Data Security
We implement technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction.
Consent
CCPA
If you are a California resident, you have the right to opt out of data sharing by contacting us.
Contact Us
If you have any questions about this Privacy Notice or our data practices, please contact us at DPO@esgglobal.com
Complaints about how we handle your personal data
From 19 June 2026, under the Data Usage and Access Act, you have the right to raise a complaint directly with us if you have any concerns about how we handle your personal data.
If you wish to make a complaint, please contact our Data Protection Officer at DPO@esgglobal.com. We will acknowledge your complaint and aim to respond as quickly as possible.
If you are not satisfied with our response, you also have the right to contact the Information Commissioner’s Office (ICO) whose details will be provided with your complaint response.
Last Updated: Mar 31, 2026
