Privacy Policy
How ISS Global collects, uses, and protects your personal data.
Last updated: January 2025
1. Who We Are
ISS Global Ltd ("we", "us", "our") is a company registered in England & Wales (Company No: 08254400) with its registered office at Discovery Park, Sandwich, Kent, CT13 9FF, United Kingdom.
We are the data controller for personal data collected through this website (www.issglobal.eu) and are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data We Collect
We may collect and process the following categories of personal data:
2.1 Information You Provide
- Contact form submissions: name, email address, telephone number, organisation, enquiry type, and message content.
- Email correspondence: any personal data you include when contacting us directly.
2.2 Information Collected Automatically
- Technical data: IP address, browser type and version, operating system, referral source, pages visited, and visit timestamps.
- Cookies: We use strictly necessary cookies only. See Section 8 below.
3. How We Use Your Data
We process personal data on the following lawful bases under Article 6 of UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Responding to enquiries submitted via the contact form | Legitimate interest / Consent |
| Providing information about our products and services | Legitimate interest |
| Website security monitoring and abuse prevention | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
We do not use your personal data for automated decision-making or profiling.
4. Data Sharing
We do not sell, rent, or trade your personal data. We may share data with:
- Formspree Inc. — our contact form processor (US-based; data processed under Standard Contractual Clauses).
- Microsoft Azure — our website hosting provider (data centre location: UK South / West Europe).
- Legal authorities — where required by law or to protect our legal rights.
We ensure all third-party processors provide adequate safeguards for your personal data.
5. International Transfers
Contact form data is processed by Formspree Inc. in the United States. This transfer is protected by EU Standard Contractual Clauses (SCCs) as adopted under UK GDPR. All other data processing occurs within the UK and European Economic Area.
6. Data Retention
We retain personal data only for as long as necessary:
- Contact form enquiries: 24 months from the date of last correspondence, unless an ongoing business relationship is established.
- Website analytics data: 26 months (anonymised/aggregated after this period).
- Legal or regulatory records: as required by applicable law.
7. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Access — request a copy of data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — request we limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at info@issglobal.eu. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.
8. Cookies
This website uses only strictly necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
cookie_consent | Records your cookie consent choice | 1 year |
We do not use analytics cookies, advertising cookies, or any third-party tracking scripts. No data is shared with advertising networks.
9. Security
We implement appropriate technical and organisational measures to protect your data, including:
- TLS 1.2+ encryption for all data in transit
- Content Security Policy (CSP) headers
- HTTP Strict Transport Security (HSTS)
- Regular security reviews and updates
- Access controls and principle of least privilege
10. Third-Party Links
This website may contain links to external sites (e.g., LinkedIn, Twitter). We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.
11. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be noted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the revised policy.
13. Contact
For privacy-related enquiries or to exercise your data rights, contact:
ISS Global Ltd
Discovery Park, Sandwich, Kent, CT13 9FF
Email: info@issglobal.eu