Sustys

Draft — this document is being finalised with our legal adviser and is not yet binding.

Privacy Policy

Version 0.1-draft

This policy will explain what personal data we process, why, how long we keep it, and the rights you have under the GDPR.

What we process

The final wording is being prepared with our legal adviser. This page describes the intended scope; it is not yet a binding version.

Account data (name, email, company), the customs and import data you enter, and technical logs needed to run the service.

Why

To provide the service, secure it, and meet our own legal obligations. We do not sell your data.

Where

All processing takes place in the European Union. Our subprocessors are listed in the Data Processing Agreement.

Retention

Declaration records are retained for the period CBAM requires; operational logs are kept for a limited period. Exact figures are being finalised.

Your rights

Access, rectification, erasure, and portability, subject to our legal retention duties. Contact details will be published with v1.0.