Privacy Policy

Last updated: [Insert Date]

1. Introduction

ISORQ respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679, the Malta Data Protection Act, the ePrivacy Directive and applicable data protection laws. This Privacy Policy explains how ISORQ collects, uses, stores, shares and protects personal data when you visit www.isorq.com, contact us, submit an enquiry or engage with our professional advisory services.

2. Data Controller Information

The data controller is ISORQ, a Malta-based provider of governance, risk management, quality management, ISO consulting, auditing, compliance support, certification preparation, management systems implementation, training and related professional advisory services.

Email: [email protected]
Registered Address: [Registered Address]
Website: www.isorq.com

3. Data Collected

We may collect and process the following categories of personal data:

• name, job title and organisation;
• business contact details, including email address and telephone number;
• information you submit through forms, emails or other communications;
• details about enquiries, proposals, services, projects or professional engagements;
• website usage data, including IP address, device information, browser type, pages visited, referral source and approximate location derived from technical data;
• cookie preferences and consent records;
• marketing preferences, where applicable.

4. Contact Form Data

When you submit information through a contact form, we process the information provided to respond to your enquiry, understand your requirements, prepare communications, assess potential services, provide proposals and manage follow-up correspondence. You must confirm that you have read and agreed to this Privacy Policy before submitting a form.

5. Analytics Data

Where consent is provided, we may use analytics technologies such as Google Analytics or Google Tag Manager to understand how visitors use the website and to improve content, performance and user experience. Analytics cookies or tags are not loaded unless and until relevant consent has been granted through the cookie consent mechanism.

6. Legal Basis for Processing

We rely on one or more of the following legal bases:

• Consent for non-essential cookies, analytics, marketing communications or where consent is otherwise required;
• Contract where processing is necessary to take steps before entering into a contract or to provide services;
• Legal obligation where processing is necessary to comply with applicable law;
• Legitimate interests where processing supports our business operations, client communications, website security, service improvement or professional activities, provided your rights do not override those interests.

7. How We Use Personal Data

We use personal data to respond to enquiries, provide professional services, manage communications, prepare proposals, improve the website, manage security, maintain business records, comply with legal obligations and protect ISORQ’s rights and legitimate business interests.

8. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, reporting, contractual and professional requirements. Enquiry information is retained for a reasonable period to manage follow-up communications unless a business relationship is established. Cookie consent records may be retained to demonstrate compliance.

9. Data Security

ISORQ applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction. No website, email system or electronic transmission is entirely secure, and users should take appropriate precautions when submitting information online.

10. International Transfers

ISORQ operates internationally and may use service providers located outside Malta or the European Economic Area. Where personal data is transferred internationally, appropriate safeguards will be used where required by data protection law, such as adequacy decisions, standard contractual clauses or equivalent lawful transfer mechanisms.

11. Third-Party Service Providers

We may use trusted providers for website hosting, analytics, contact forms, email services, IT support, security, document management, professional tools and business operations. Such providers may process personal data only as required to provide their services and subject to appropriate contractual, confidentiality and data protection obligations.

12. GDPR Rights

Subject to applicable law, you may have the right to request access to your personal data, rectification of inaccurate data, erasure of data, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent.

12.1 Right of Access

You may request confirmation as to whether we process your personal data and request a copy of that data.

12.2 Right of Rectification

You may request correction of inaccurate or incomplete personal data.

12.3 Right of Erasure

You may request deletion of personal data where there is no lawful reason for continued processing.

12.4 Right to Restrict Processing

You may request restriction of processing in certain circumstances.

12.5 Right to Object

You may object to processing based on legitimate interests or to direct marketing.

12.6 Right to Data Portability

You may request certain personal data in a structured, commonly used and machine-readable format.

12.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal.

13. Complaints Process

If you have concerns about how we process your personal data, please contact us first so that we can review and respond. You also have the right to lodge a complaint with the competent supervisory authority. In Malta, this is the Office of the Information and Data Protection Commissioner.

14. Contact Details

For privacy enquiries or to exercise your rights, contact:
Email: [email protected]
Registered Address: [Registered Address]

15. Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, website functionality or our business activities. The updated version will be published on this website.