Privacy

How we handle your data

What we collect

When you complete the assessment we collect your answers and, at the email gate, your email address plus any name, company, sector, company size and standards you choose to share. That is everything.

Why we collect it

To score your assessment, show you your report, and follow up with you about your results and the services they point to, such as an OS Blueprint scoping call. We do not sell your data or share it for marketing by anyone else.

Where it lives

Responses and contact details are stored with Supabase in the UK (London region). Notification emails are sent through Resend. If you book a paid service, payment is handled by Stripe; we never see or store your card details.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email hello@is3.co.uk and we will sort it, normally within a few working days. Your report link is private to whoever holds the link; if you want it removed, ask.

iS3 · governance.is3.co.uk