ISMS DirectoryPrivacy Policy
Last updated: January 26, 2025
Our Commitment to Your Privacy
We believe privacy should be simple. Unlike most websites, we don't track you, collect your data, or sell your information. This page explains exactly what we do (and don't do) with your data when you visit ISMS Directory.
What We DON'T Collect
Here's what we explicitly do NOT collect or use on this website:
- No personal information - We don't collect names, emails, phone numbers, or addresses directly
- No analytics or tracking - No Google Analytics, Facebook Pixel, or similar tracking tools
- No user accounts - No login system or user registration
- No third-party data sharing - Your data stays private because we don't have it
- No advertising networks - No targeted ads or ad tracking
What We DO Use
We use exactly one cookie for a better user experience:
Cookie: sidebar:state
- Purpose: Remembers whether you've collapsed or expanded the sidebar navigation
- Duration: 7 days
- Type: Functional cookie (UI preference only)
- Storage: Stored locally in your browser
- Data shared: None - this cookie never leaves your device
This is a strictly functional cookie that improves your experience by remembering your UI preferences. No personal data is collected or transmitted.
Your Control & Rights
You have complete control over your data:
- You can clear the sidebar preference cookie at any time through your browser settings
- You can browse our site with all cookies disabled (the sidebar just won't remember your preference)
- No personal data means nothing to request, delete, or export
Service Submissions
When you submit a service to be listed in our directory, your information is collected through Google Forms. This includes:
- Company name and service details
- Contact information for verification purposes
- Service descriptions and specializations
This information is used solely for the purpose of reviewing and listing your service in our directory. Google Forms' privacy policy applies to data collected through their platform.
Paid Submissions & Stripe
For paid submission options, payment processing is handled securely by Stripe. When you make a payment:
- Payment details are processed directly by Stripe and never stored on our servers
- We receive only the information necessary to fulfill your order (name, email, transaction confirmation)
- This information is used exclusively for processing your listing and providing customer support
Stripe's privacy policy applies to all payment data. Visit stripe.com/privacy for more details.
Third-Party Services
Beyond the submission process described above, we use the following third-party services:
Contact Form (Tally)
Our contact form is provided by Tally. When you submit a contact request, removal request, or change request, your information is processed by Tally. This may include your name, email, and message content. Tally's privacy policy applies to data collected through their platform. Visit tally.so/help/privacy-policy for more details.
AI Search Assistant (Chatbase)
Our AI-powered search feature is provided by Chatbase. When you interact with the search assistant, your queries are processed by Chatbase to provide relevant answers. Chatbase may collect usage data in accordance with their privacy policy. Visit chatbase.co/privacy-policy for more details.
All other website functionality runs client-side in your browser. External links to tools and resources on other websites are clearly marked, and their privacy policies apply once you leave our site.
Questions About This Policy?
If you have any questions about our privacy practices, please feel free to reach out to us. As a GRC-focused resource, we take privacy seriously and are happy to address any concerns.
Please use our contact form to reach out to us directly.
Changes to This Policy
If we ever change this privacy policy, we'll update the "Last updated" date at the top of this page. Given our minimal data collection approach, we don't anticipate significant changes. Any updates will be posted here.