Legal & Compliance

Privacy Policy

Last updated: 20 February 2026  ·  ISAR Global Ltd  ·  Company No. 16771241

Contents

  1. Contact Details
  2. What Information We Collect
  3. Lawful Bases & Your Rights
  4. Where We Get Your Information
  5. How Long We Keep It
  6. Who We Share It With
  7. International Transfers
  8. Cookies
  9. How to Complain

1. Contact Details

This privacy notice is provided by:

ISAR Global Ltd
71-75 Shelton Street, Covent Garden, London WC2H 9JQ
United Kingdom
Company Registration Number: 16771241

For data protection enquiries, please contact us at directorate@isar-global.org. We aim to respond within five working days.

2. What Information We Collect, Use, and Why

Newsletter Subscriptions

When you subscribe to our governance intelligence updates, we collect:

  • Email address
  • First name and last name (optional, to personalise communications)

This information is used solely to send you notifications about new ISAR Global publications and analysis.

Contact Form Enquiries

When you contact us via our website, we collect:

  • Name
  • Organisation or institution
  • Email address
  • Nature of enquiry and message content

This information is used to respond to your enquiry and, where appropriate, to maintain a record of our correspondence.

Website Analytics

We may collect anonymised data about how visitors use our website, including pages visited and time spent on site. This data cannot be used to identify you personally.

3. Lawful Bases & Your Data Protection Rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018), we must have a lawful basis for collecting and using your personal information.

Newsletter Subscriptions

Our lawful basis is Consent — we have your permission, given after providing all relevant information. You have the right to withdraw consent at any time using the unsubscribe link in any email we send, or by contacting us directly.

Contact Enquiries

Our lawful basis is Legitimate Interests — responding to correspondence you have initiated.

Your Rights

The following rights are available to you under UK data protection law:

Right What it means
Access You can ask for copies of your personal information held by us.
Rectification You can ask us to correct inaccurate or incomplete personal information.
Erasure You can ask us to delete your personal information.
Restriction You can ask us to limit how we use your personal information.
Objection You can object to our processing of your personal information.
Portability You can ask us to transfer your information to another organisation or to you.
Withdraw Consent Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at directorate@isar-global.org. We must respond within one month.

4. Where We Get Your Information From

All personal information we hold is provided directly by you, either by completing our subscription form, submitting a contact form enquiry, or corresponding with us by email.

We do not obtain personal information about you from any third party, data broker, or public source.

5. How Long We Keep Your Information

Newsletter Subscribers

We retain your information for as long as you remain a subscriber. Upon unsubscribing, your data is removed from our active mailing list. Brevo (our email service provider) may retain anonymised analytics data in accordance with their own retention policy.

Contact Enquiries

We retain correspondence records for a maximum of two years from the date of last contact, after which they are securely deleted.

6. Who We Share Your Information With

We do not sell, rent, or trade your personal information. We share data only with the following data processors who act on our behalf:

Brevo (Email Marketing)

We use Brevo (formerly Sendinblue) to manage our newsletter subscription list and send communications. Brevo processes subscriber email addresses and names on our behalf. Brevo is subject to the EU GDPR and maintains appropriate data processing agreements.

Brevo privacy policy: brevo.com/legal/privacypolicy

Cloudflare

We use Cloudflare Turnstile on our contact form for spam protection. Cloudflare processes limited technical data (such as browser signals) to determine whether a submission is from a human. No personal data from your form submission is shared with Cloudflare.

Cloudflare privacy policy: cloudflare.com/privacypolicy

FastHosts (Web Hosting)

Our website is hosted by FastHosts, who process data solely to provide hosting services and do not use your data for any other purpose.

7. Sharing Information Outside the UK

Some of our data processors operate outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in compliance with UK GDPR.

Organisation Country Safeguard
Brevo European Union & United States EU Standard Contractual Clauses (SCCs) with UK Addendum
Cloudflare United States EU-US Data Privacy Framework; UK adequacy

For further information or to obtain a copy of the relevant safeguard documentation, please contact us at directorate@isar-global.org.

8. Cookies

Our website uses only essential cookies required for the site to function. We do not use advertising cookies or third-party tracking cookies.

A session cookie may be set by WordPress for logged-in users. Visitors who are not logged in are not tracked by any cookie.

9. How to Complain

If you have concerns about how we use your personal data, please contact us in the first instance at directorate@isar-global.org. We will respond within five working days.

If you remain unhappy after raising a complaint with us, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113
Website: ico.org.uk/make-a-complaint