Privacy Policy

Last updated: 26 October 2026

This policy explains how Inform-ISO Limited collects, uses and protects personal data when you visit our website, contact us, book a consultation or work with us. Information security is our business, and we hold ourselves to the same standard we set for clients.

1. Who we are

Inform-ISO Limited (company number 15501061), 124 City Road, London EC1V 2NX, is the data controller for the personal data described in this policy. For any privacy question or request, email hello@inform-iso.com.

2. The personal data we collect

When you email us: your name, email address, organisation, and anything you include in your message.
When you book a consultation: your name, email address, any phone number or notes you provide, and the time of your booking. Bookings are handled through Microsoft Bookings.
When you become a client: business contact details for you and your colleagues, and information needed to deliver our services, such as audit evidence and records you share with us.
When you visit our website: our hosting provider records technical information, such as your IP address and browser type, to keep the site secure and working.
With your consent, how you use our website: pages visited, how you arrived and the device you use, collected through analytics cookies. See section 9.
When you subscribe to our updates: your name, email address, organisation, and whether you open or click our emails, so we can keep content relevant.

3. How we use your data, and our lawful basis

To reply to enquiries and arrange consultations: steps taken at your request before entering a contract, or our legitimate interest in responding to business enquiries.
To deliver the services you engage us for: performance of a contract.
To keep accounting and business records: compliance with our legal obligations.
To manage enquiries and client relationships in our customer relationship management (CRM) system, and to understand and improve how our website is used: our legitimate interests, and your consent where analytics cookies are involved.
To send our newsletter and updates about our services: your consent where you subscribe, or our legitimate interests for existing business contacts. Every email includes an unsubscribe link, and you can opt out at any time.

We do not sell your personal data, and we do not use it for automated decision-making.

4. Who we share it with

We share personal data only where needed, with:

service providers who process it on our behalf, including Microsoft (email and bookings), Webflow (website hosting), and the CRM, email marketing and website analytics tools we use. They may only use your data on our instructions;
professional advisers such as accountants and lawyers;
certification bodies or other parties, only where you have asked us to or as part of the service you have engaged us for;
regulators or law enforcement, where the law requires it.

5. International transfers

Some of our providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Addendum.

6. How long we keep it

Enquiries that do not lead to an engagement: up to 2 years from our last contact.
Client and contract records: 6 years after the engagement ends, to meet legal and tax requirements.

7. How we protect it

We apply technical and organisational security measures appropriate to the risk, in line with the ISO/IEC 27001 practices we implement for our clients, including access control, encryption and supplier assurance.

8. Your rights

Under UK data protection law you have the right to access your personal data, have it corrected or erased, restrict or object to its use, and receive a copy in a portable format. To use any of these rights, email hello@inform-iso.com. We will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Cookies

We use cookies that are strictly necessary to run the website and keep it secure. We may also use analytics cookies to understand how visitors use the site so we can improve it. We will only set analytics or any other non-essential cookies with your consent, which you can withdraw at any time.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.