Privacy Policy

Effective Date: July 15, 2025

At ISO27001PRO.COM, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our website, download our digital products, or contact us for support. By using our website, you agree to the terms of this Privacy Policy.

Who We Are

We are ISO27001PRO.COM – a website dedicated to providing premium templates, toolkits, and resources related to ISO 27001 compliance and certification.

Contact Email: support@iso27001pro.com

What Personal Data We Collect and Why

When You Make a Purchase

• Full Name
• Email Address
• Billing Information (processed securely via our payment gateway)
• Order History

We use this information to deliver your digital products, provide customer support, and comply with legal obligations (e.g., tax records).

When You Contact Us

If you email us or use our contact forms, we collect your:

• Name
• Email Address
• Any message content you send us

This information is used solely to respond to your inquiry.

Payment Processing

We use trusted third-party payment processors (such as Stripe, PayPal, and other card payment methods) to handle all transactions. Your credit card information is never stored on our servers. All payment details are processed securely through the payment provider’s encrypted and PCI-DSS-compliant gateway. In fact, we do not have access to your payment data, as it is entirely managed by the secure infrastructure of the payment service providers.

Embedded Content from Other Websites

Our blog and resources may include embedded content (e.g., YouTube videos, images, PDFs, etc.). Embedded content from other websites behaves the same way as if you visited the other site directly.

These third-party websites may collect data, use cookies, and monitor your interaction with their content. For example, YouTube videos follow YouTube’s Community Guidelines.

Analytics

We may use privacy-focused analytics tools (e.g., Google Analytics, Plausible, or Fathom) to understand general website usage trends.

Who We Share Your Data With

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share data only with trusted service providers such as:

• Payment processors (Stripe, PayPal, or other payment gateways)
• Email service providers (e.g., MailerLite, ConvertKit, or other similar service providers)
• Cloud storage (e.g., Google Drive, Dropbox, or other similar service providers)

All providers are GDPR-compliant and only process data on our instructions.

How Long Do We Retain Your Data

• Support Emails: Retained for up to 90 days
• Order Information: Retained for up to 6 years for tax and accounting purposes
• Newsletter Subscribers: Until you unsubscribe

Your Rights Under GDPR

If you’re a resident of the EU or UK, you have the right to:

• Access the personal data we hold about you
• Correct any inaccuracies
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at support@iso27001pro.com

How We Protect Your Data

We implement strong security measures, including:

• Secure servers (HTTPS/SSL)
• Encrypted backups
• Two-factor authentication on admin accounts
• Limited access to data for essential staff only

Automated Decision Making and Profiling

We do not use automated decision-making or user profiling.

Contact Information

If you have any questions or concerns regarding this Privacy Policy, please contact:
Email: support@iso27001pro.com