Privacy notice

Who we are

This site is operated by ISO GRC Advisory. Contact: hello@isogrcadvisory.com.

What we collect

The details you enter in an enquiry form (your name, contact details, country, organisation and the requirement you describe), plus campaign and referral information about how you reached the site, such as a search ad parameter. We don’t ask for sensitive personal data.

To keep the forms free of spam, enquiry forms use Cloudflare Turnstile, a security check that may process technical information about your browser and connection. We store only a salted, one-way hash of your IP address to limit repeated submissions, never the address itself.

Why we use it

• To respond to your enquiry and prepare a proposal, based on your consent.
• To send occasional guides and course dates, only if you separately opted in.
• To understand which pages and campaigns help visitors. Google Analytics runs only if you accept analytics cookies. Cloudflare Web Analytics, which sets no cookies, measures overall page views.

Who we share it with

Only the specialist partners engaged to fulfil your request (for example consultants, trainers or a software provider when you ask for help evaluating its platform), and the service providers that host our forms and records. Partners receive only what they need to respond. We don’t sell personal data.

Where it is stored and for how long

Enquiry records are stored in a database run by our hosting provider, Cloudflare, and a copy is sent to our team by email. They are kept for up to 24 months after our last contact, then deleted, unless a contract requires longer.

Your rights

You can ask to access, correct or delete your data, or withdraw consent, by emailing hello@isogrcadvisory.com. We respond within the period required by applicable law.