Privacy and data protection
We take privacy seriously and handle personal data in a clear, responsible, and proportionate way.
This page explains what data we process, why we process it, and how we protect it — in plain language.
​
​Who we are
27001 Compliance Resources provides guidance and toolkits to help organisations manage information security, data privacy, and related obligations.
​
For the purposes of data protection law, we act as a data controller for the personal data described on this page.
​
What personal data we collect
We only collect data that is necessary to operate our website and provide our products.
This may include:
​
-
Name and contact details (such as email address)
-
Billing and transaction details
-
Account or order information
-
Communications you send to us
-
Technical data such as IP address and browser information
We do not collect special category data unless explicitly required and clearly explained.
​
Why we use personal data
We use personal data to:
​
-
Provide access to purchased products
-
Process payments and manage orders
-
Respond to enquiries and support requests
-
Maintain the security of our systems
-
Meet legal and regulatory obligations
We do not use personal data for purposes that are incompatible with these activities.
​
Our legal basis for processing
Depending on the context, we process personal data based on:
​
-
Performance of a contract
-
Legitimate interests (such as operating and securing our services)
-
Legal obligations
-
Consent, where required
Where consent is used, it can be withdrawn at any time.
​
​Who we share data with
We do not sell personal data.
​
We may share limited data with trusted service providers who support:
​
-
Payment processing
-
Website hosting
-
Email delivery
-
Security and fraud prevention
All providers are required to protect data appropriately and only process it on our instructions.
​
How long we keep data
We keep personal data only for as long as necessary to fulfil its purpose, including legal and accounting requirements.
When data is no longer needed, it is securely deleted or anonymised.
​
​
How we protect data
We use appropriate technical and organisational measures to protect personal data, including:
​
-
Access controls
-
Secure systems and hosting
-
Regular review of data handling practices
Our approach aligns with recognised good practice for information security and privacy protection.
​
Your data protection rights
You have rights under data protection law, including the right to:
​
-
Access your personal data
-
Correct inaccurate data
-
Request deletion in certain circumstances
-
Object to or restrict processing
-
Request data portability
Requests can be made using the contact details below.
​​​
​Cookies and analytics
We use cookies to ensure the website functions correctly and to understand how it is used.
Where required, consent is obtained before non‑essential cookies are placed.
You can manage cookie preferences through your browser settings.
​​​
Contact us
For privacy or data protection enquiries, please contact:
​
Email: information@27001-compliance-resources.com
​
We aim to respond promptly and transparently.
​​​
Updates to this page
This Privacy page may be updated from time to time to reflect changes in law or how we operate.
The latest version will always be published here.
​
​
​
This page explains our privacy approach. It does not replace contractual or statutory rights.
​