1. Introduction

Global Institute for Sustainability Standards Pvt. Ltd. ("GISS", "we", "our", or "us") is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you access our website, services, training programs, certification schemes, sustainability assessments, research initiatives, events, and related activities.

By using our website and services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We may collect the following categories of information:

Personal Information

• Full name
• Email address
• Phone number
• Postal address
• Organization name
• Designation or job title
• Professional credentials
• Payment and billing information

Technical Information

• IP address
• Browser type and version
• Device information
• Operating system
• Website usage data
• Cookies and similar technologies

Business and Sustainability Information

When organizations engage with our services, we may collect:

• Sustainability performance data
• ESG-related information
• Audit and assessment records
• Compliance documentation
• Training and certification records
• Research and survey responses

3. How We Use Information

We use collected information to:

• Provide sustainability-related services and certifications.
• Process registrations, memberships, and applications.
• Deliver training, webinars, workshops, and events.
• Communicate updates, notices, and service-related information.
• Improve website functionality and user experience.
• Conduct research and analytical activities.
• Comply with legal and regulatory requirements.
• Prevent fraud, abuse, and unauthorized access.
• Develop new sustainability standards, tools, and resources.

4. Legal Basis for Processing

Where applicable, we process personal data based on:

• User consent
• Contractual obligations
• Legitimate business interests
• Compliance with legal requirements
• Protection of vital interests and public interest activities

5. Information Sharing and Disclosure

We do not sell personal information.

We may share information with:

• Authorized employees and consultants
• Accreditation and certification partners
• Event and training partners
• Technology and hosting service providers
• Government authorities when legally required
• Professional advisers, auditors, and legal counsel

All third parties are required to maintain appropriate confidentiality and security measures.

6. International Data Transfers

As a global organization, GISS may engage with individuals and organizations across multiple countries. Information may be transferred and processed in jurisdictions outside your country of residence, subject to appropriate safeguards and applicable laws.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal information against:

• Unauthorized access
• Accidental loss
• Misuse
• Alteration
• Disclosure
• Destruction

However, no method of internet transmission or electronic storage is completely secure, and absolute security cannot be guaranteed.

8. Data Retention

We retain information only for as long as necessary to:

• Fulfill the purposes outlined in this Policy
• Meet contractual obligations
• Maintain certification and audit records
• Comply with legal, tax, and regulatory requirements
• Resolve disputes and enforce agreements

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to:

• Improve user experience
• Analyze website traffic
• Remember user preferences
• Enhance website security

Users may control cookie settings through their browser preferences.

10. Your Rights

Subject to applicable laws, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of information
• Restrict or object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with a competent authority

Requests may be submitted using the contact information provided below.

11. Children's Privacy

Our services are generally intended for professionals, institutions, and organizations. We do not knowingly collect personal information from children under the age required by applicable law without appropriate parental or guardian consent.

12. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of external websites. Users are encouraged to review the privacy policies of those websites independently.

13. Compliance with Applicable Laws

GISS endeavors to comply with applicable data protection and privacy laws, including relevant provisions of Indian law and internationally recognized privacy principles applicable to our operations.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, technology, or business operations. Revised versions will be posted on this page with an updated effective date.

15. Contact Us

Last Updated: 11 June 2026