Privacy Policy

1. Who we are

The ESG & Sustainability Performance Index (“the Platform”) is operated by TS Environment Technology PLC (“we”, “us”), Addis Ababa, Ethiopia. Questions about this policy can be sent to info@tsenvironment.com.

2. What we collect

• Account data — name, email address, and a password stored only as a bcrypt hash. We never store your password in a readable form.
• Two-factor data — if you enable it, a TOTP secret and single-use backup codes.
• Company profile data — company name, sector, size, ownership type, country and region, description, website, and contact email.
• Assessment data — responses, scores, justification notes, and calculated results for each performance area.
• Evidence documents — files uploaded to support assessment scores, together with their original filenames.
• Technical data — session records including IP address and browser user agent, and an audit log of actions taken in the platform (who changed what, and when).

3. What becomes public

This is the most important section of this policy. Please read it before submitting an assessment.

When an assessment is completed, the following becomes publicly visible on this website, without requiring a login:

• the company name, sector, size, ownership type and location;
• the overall ESG score and certification tier;
• scores for each pillar and each assessed performance standard;
• the assessment period, and the company’s position in the public ranking.

The following never becomes public: uploaded evidence documents, justification notes written against individual scores, assessments that are draft, in progress, submitted or under review, user accounts and contact details, and the audit log.

4. Why we process this data

To operate the assessment workflow, calculate and publish ESG performance results, maintain the public index, secure accounts, and keep an auditable record of changes to scores. Publication of completed results is the core purpose of the Platform and the basis on which companies participate.

5. Who can see your data

• Company userssee only their own company’s data.
• ESG officers — TS Environment assessors — can view and score assessments across companies.
• Administrators have full access, including the audit log.
• The public sees only what section 3 lists.

We do not sell data. We do not share it with third parties for marketing. Data is processed by our hosting provider solely to run the Platform.

6. How long we keep it

• Assessment records and scores — retained indefinitely, since historical comparison is a core function of the index.
• Evidence documents — retained for the life of the assessment they support.
• Audit log — retained for the period agreed with TS Environment; a defined retention period must be set before launch.
• Account data — retained while the account is active.

7. Security

Passwords are hashed with bcrypt. Access is controlled by role. Two-factor authentication is available and recommended for privileged accounts. Every change to a score or record is written to an audit log that cannot be edited or deleted through the interface. Evidence documents are served only to authenticated, authorised users.

8. Your rights

You may request access to the personal data we hold about you, correction of inaccurate data, or deletion of your account. Requests go to info@tsenvironment.com. Note that deleting an account does not retract published assessment results for a company, and audit entries are retained for integrity.

9. Changes to this policy

Material changes will be notified in the Platform and reflected in the “last updated” date above.