Privacy policy.
Last updated: 24 August 2026
ISOReady respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit isoready.eu, purchase an ISO documentation package, submit information for document customization, contact us, or otherwise use our services.
WHO WE ARE
ISOReady is an online service providing customizable management-system documentation and related digital products.
Data Controller: [INSERT LEGAL COMPANY NAME]
Registered Address: [INSERT REGISTERED ADDRESS]
Email: support@isoready.eu
Website: isoready.eu
The legal company name and registered address will be completed before this Privacy Policy is published.INFORMATION WE COLLECT
Depending on how you use ISOReady, we may collect your name or responsible person's name, email address, company or organization name, country or jurisdiction, industry or business sector, approximate number of employees, description of your organization's activities, information about locations, activities or management-system scope that you choose to provide, document date, responsible person or role, company logo, customization information submitted through our forms, order and transaction information, communications you send to us, and technical information such as IP address, browser type, device information and website usage information where collected by our website platform or analytics tools. We may also create customized documentation and generated files based on the information you submit.HOW WE USE YOUR INFORMATION
We use your personal data to provide the service you purchased, process and confirm orders and payments, associate your customization with the correct order, create and customize your documentation package, generate and deliver your files, send service-related communications and private download links, provide customer support, maintain and secure our systems, prevent fraud, troubleshoot technical issues and comply with applicable legal, accounting, tax or regulatory obligations. We do not use customer customization information to make unrelated claims about your organization.AI-ASSISTED DOCUMENT CUSTOMIZATION
ISOReady uses artificial intelligence technology to assist with the preparation and personalization of management-system documentation. Information submitted during customization may be processed through an AI service in order to transform customer-provided information into professional documentation wording and draft management-system content. AI may also assist with producing suggested or draft content such as potential risks, opportunities, objectives, environmental aspects, occupational health and safety hazards, recommended controls and suggested processes. Customer-provided information remains the primary source of factual information about the organization. ISOReady is designed not to intentionally present AI-generated assumptions as verified facts about your organization. Customers remain responsible for reviewing and approving generated documentation before using it operationally. AI-assisted customization is used to provide the service requested by the customer and is not intended to make decisions that produce legal or similarly significant effects about individuals.LEGAL BASES FOR PROCESSING
Where the GDPR applies, we generally process personal data on one or more of the following legal bases: performance of a contract where processing is necessary to process your purchase, customize your package and deliver your documentation; legal obligation where information must be retained for accounting, taxation or other legal requirements; legitimate interests where necessary to operate, secure, maintain and improve the ISOReady service, provided those interests do not override your rights; and consent where required, for example for optional marketing communications or non-essential cookies.PAYMENTS
Payments are processed through the payment services available through our website and checkout infrastructure. Payment providers may collect information necessary to process your transaction in accordance with their own privacy policies. ISOReady does not intend to directly collect or store complete payment-card details such as your full card number or card security code where these are handled by the payment provider.SERVICE PROVIDERS
We use third-party technology providers to operate ISOReady. Depending on the service configuration, these may include providers for website hosting and e-commerce, including Squarespace; cloud application hosting; artificial intelligence processing, including OpenAI; email and communications, including Microsoft 365; payment processing; security; infrastructure; and technical support. These providers may process information on our behalf where necessary to provide their services. We do not sell personal data to third parties.INTERNATIONAL DATA TRANSFERS
Some technology providers used by ISOReady may process information outside the European Economic Area. Where personal data is transferred internationally, we aim to use service providers and transfer mechanisms that provide appropriate safeguards as required by applicable data-protection law. These may include adequacy decisions, contractual safeguards or other legally recognized transfer mechanisms where applicable.HOW LONG WE KEEP INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected. Retention periods may differ depending on the type of information. Order and transaction records may be retained for the period required by applicable accounting, tax or legal obligations. Customization information and generated documentation will be retained only for the period reasonably necessary to generate, deliver and support your purchased package, after which it may be deleted or anonymized in accordance with our retention practices. Customer-support communications may be retained for as long as reasonably necessary to resolve the request and protect our legitimate business and legal interests. We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.GENERATED FILES AND PRIVATE DOWNLOAD LINKS
Customized documentation may be delivered using a unique download link. Customers should treat download links as private and should not publish or share them with unauthorized persons. We take reasonable technical and organizational measures to protect generated documentation, but no internet-based system can be guaranteed to be completely secure.YOUR RIGHTS
Where the GDPR applies, you may have the right to be informed about how your personal data is used, request access to personal data we hold about you, request correction of inaccurate or incomplete information, request deletion of your personal data in certain circumstances, request restriction of processing, object to certain processing, receive certain personal data in a portable format, withdraw consent where processing relies on consent, and lodge a complaint with a competent data-protection supervisory authority. To exercise a privacy right, contact support@isoready.eu. We may need to verify your identity before fulfilling certain requests.COOKIES
ISOReady may use cookies and similar technologies that are necessary for website operation, checkout, security and user experience. Additional analytics or marketing cookies should only be used in accordance with applicable consent requirements. Where appropriate, further information will be provided through our cookie notice or cookie preferences tool.MARKETING COMMUNICATIONS
We will not automatically subscribe customers to marketing communications solely because they purchased a documentation package. Where we offer optional marketing communications, users will be given an appropriate way to opt in or opt out as required by applicable law. Service messages relating to purchases, documentation delivery, security or customer support are not marketing communications.INFORMATION YOU PROVIDE ABOUT OTHER PEOPLE
If you provide personal information relating to another person, such as an employee name or responsible person, you should ensure that you are authorized to provide that information for the intended purpose. We recommend avoiding unnecessary personal information when completing ISOReady customization forms.SENSITIVE INFORMATION
Please do not submit special-category or highly sensitive personal information unless it is genuinely necessary and specifically requested. Customers should not include medical information, passwords, payment-card details, government identification numbers or unrelated employee records in customization fields.SECURITY
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, loss, misuse or disclosure. Access to systems and service providers is limited according to operational requirements.CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy as ISOReady develops, our technology providers change or legal requirements evolve. When significant changes are made, we will update the Last Updated date shown at the top of this page.CONTACT US
For privacy questions, requests or concerns, contact ISOReady at support@isoready.eu or visit isoready.eu. You also have the right to lodge a complaint with the competent data-protection authority if you believe your personal data has been processed unlawfully.