Privacy Policy
Last updated: 2026-10-01
This policy explains how Alegria Media and Consulting Ltd. ("we") handles personal data on ISO 27001 Compare at iso27001compare.com. The site has no user accounts, no payments and no comments. You can read every page and use the cost estimator, side by side and other comparison tools without giving us any personal data.
Who we are
Alegria Media and Consulting Ltd. publishes ISO 27001 Compare and is the controller of the personal data described here. The only way to reach us is the contact form at /contact.
What we collect
We collect only what the site actually needs to work:
- Contact form messages. When you send a message we receive your name, email address, the topic you chose and your message. For a copyright notice we also receive the extra details the form asks for, including your electronic signature.
- Server logs. Our hosting provider automatically records technical data for each request: IP address, browser and device details, the page requested and the time. This is used to run and secure the site.
- Google Fonts. Pages load their typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When the fonts load, Google receives your IP address and browser details, as with any web request.
The site loads no analytics, advertising or social media scripts. The comparison tools and the cost estimator run entirely in your browser; what you select is not sent to us and is not stored in cookies, localStorage or sessionStorage. Closing or reloading the page clears it.
Why we use it and on what legal basis
- Operating and securing the site (server logs, font delivery): our legitimate interest in running a working, secure website.
- Answering your message and handling corrections, privacy requests and copyright notices: our legitimate interest in responding to people who contact us, and, for privacy requests, our legal obligations.
- Where a law requires your consent for a particular use, we rely on consent, and you can withdraw it at any time.
Who receives it
- Hosting and infrastructure providers that run the site for us.
- The form delivery provider that passes contact form messages to us, once one is configured.
- Public authorities, where the law requires us to disclose information.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
International transfers
Your data may be processed outside your country, including by providers in other regions. Where that happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses. Israel, where we are based, has an adequacy decision from the European Commission.
How long we keep it
- Contact messages: as long as needed to handle your message, then deleted.
- Server logs: for a limited period set by the hosting provider.
Your rights
EU and UK readers (GDPR and UK GDPR): you can ask for access to your data, correction, deletion, restriction of use or a copy in a portable format; you can object to processing based on legitimate interests and withdraw consent; and you can complain to your local supervisory authority.
California readers (CCPA as amended by the CPRA): you can ask to know what personal information we hold, to delete it and to correct it, and to opt out of its sale or sharing, which we do not do. We will not treat you differently for using these rights.
Israeli readers: you have the rights given by the Protection of Privacy Law, including the right to review information held about you and to ask for it to be corrected or deleted.
To use any of these rights, send a message through the contact form and choose the topic "Privacy request". We may need to confirm your identity before acting.
Children
The site is written for businesses and is not directed to children under 16. We do not knowingly collect their data.
Changes to this policy
If what the site collects changes, we update this page and the date at the top.