Privacy Policy

Who we are

Integrative Sustainability Group ("ISG", "we", "our") is a global sustainability and environmental advisory firm specializing in LEED, Estidama Pearl, BREEAM, and GSAS certifications, acoustic consultancy, and ESG advisory. We operate across the United Arab Emirates, Saudi Arabia, Qatar, and 20+ other countries.

This policy applies to isg.green and explains how we collect and use information about visitors. It's written to comply with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, and the UAE Federal Decree-Law No. 45 of 2021 (PDPL).

Contact for privacy matters

If you have questions about this policy, want to exercise your rights under GDPR/PDPL, or want a copy of the data we hold about you, contact us at [email protected] with the subject line "Privacy request".

What data we collect

1. Information you give us directly

When you submit the contact form or download our free guide, we collect:

• Name
• Email address
• Organization (optional)
• The message you write
• The page you came from (to understand which content prompted your inquiry)

This information is used to respond to your request and to understand which topics generate interest. We do not sell or share this information with third parties for marketing purposes.

2. Information we collect automatically (cookies)

Our site uses the following cookies. You can manage your preferences at any time via the "Cookies" link in the footer.

Cookie	Category	Purpose	Duration
isg_session	Essential	Detects new sessions so our site can distinguish returning visitors. No personal data.	Session
isg_consent	Essential	Stores your cookie preferences so we don't show the banner repeatedly.	12 months
isg_visitor	Marketing	Counts your visits and page views so we can show relevant guides and content. Set only if you accept marketing cookies.	12 months
_ga / _ga_*	Analytics	Google Analytics 4 — counts unique visitors, pages viewed, and how you found the site. Set only if you accept analytics cookies.	2 years
cf_*	Essential	Cloudflare security & performance — keeps the site protected and fast. Cannot be disabled.	Varies

3. Google Analytics

If you consent to analytics cookies, we use Google Analytics 4 (property ID G-Z84ZM1432T) to understand how visitors find and use our site. Google Analytics collects:

• Anonymized visitor counts and session data
• Pages viewed and time spent
• Country and city (derived from IP address, which is immediately anonymized)
• Device type and browser
• Referring site (where you came from)

We have enabled Google's Consent Mode v2, which means Google Analytics respects your cookie choice automatically. If you decline analytics cookies, Google collects no identifying information from your visit.

Google's own privacy policy: policies.google.com/privacy

4. Server logs

Our hosting provider Cloudflare keeps standard server logs (IP address, user agent, URL, timestamp) for up to 30 days for security and debugging. These are not linked to personal identifying information and are not shared with third parties except as required by law.

How long we keep your data

• Contact form submissions & leads: kept in our secure database for the duration of our commercial relationship and up to 3 years afterwards, then permanently deleted.
• Google Analytics data: 14 months, then automatically deleted by Google.
• Server logs: 30 days maximum.
• Cookies: as specified in the cookie table above.

Who we share data with

We only share your data with third-party service providers who help us run the site and respond to inquiries:

• Cloudflare — hosting and security
• Google Analytics — traffic analysis (only if you consent)
• MailChannels — sending email notifications about new leads to our team
• Workers AI (Cloudflare) — automated qualification of new lead submissions to help us route them to the right team member

We do not sell your data, share it with advertisers, or use it for profiling beyond what's strictly necessary to respond to your inquiry.

Your rights

Under GDPR, UK DPA, and the UAE PDPL you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate information
• Deletion ("right to be forgotten") — ask us to delete your data
• Portability — receive your data in a portable format
• Restriction — ask us to stop processing your data
• Objection — object to our processing of your data for direct marketing
• Withdraw consent — change your cookie preferences at any time via the "Cookies" link in the footer, or ask us to delete any data you previously provided

To exercise any of these rights, email [email protected] with your request. We'll respond within 30 days.

If you believe we've handled your data incorrectly, you also have the right to lodge a complaint with your local data protection authority.

International transfers

ISG is based in the UAE. When you use our site, your data may be processed in the UAE, the United States (Cloudflare infrastructure), and other countries where our service providers operate. We use providers who maintain GDPR-equivalent data protection standards.

Children

Our services are intended for businesses and professional use. We do not knowingly collect data from anyone under 16 years of age. If you believe a child has submitted information to us, please contact us and we'll delete it.

Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top always reflects the most recent change. Material changes will trigger a fresh cookie consent prompt so you can review your choices.