ISO/IEC 27001:2022 — Gap Analysis

Privacy Policy

ISO Xpert Ltd ("ISO Xpert", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our ISO 27001 Gap Analysis Tool and visit iso-xpert.com.

1. Information We Collect

• Profile Information: Name, email, phone, organisation, role, and country you voluntarily enter in the Profile section of this tool.
• Assessment Data: Gap analysis responses, compliance scores, and notes. All data is stored locally in your browser's localStorage and is not transmitted to our servers unless you explicitly export and share it.
• Usage Data: When visiting iso-xpert.com, we may collect standard internet log data including IP address, browser type, and pages visited.
• Communications: Records of correspondence if you contact us by email or phone.

2. How We Use Your Information

• To provide, operate, and maintain our gap analysis tools and services.
• To respond to enquiries and provide consultancy support.
• To send communications where you have consented.
• To improve our products and services.
• To comply with legal obligations.

3. Local Data Storage

All profile and assessment data entered in this tool is stored exclusively in your browser's localStorage. This data never leaves your device unless you export it. Clearing your browser storage permanently deletes this data. ISO Xpert has no access to it.

4. Data Sharing

We do not sell, trade, or transfer your personal data to third parties without consent, except as required by law or to trusted service providers operating under confidentiality agreements.

5. Cookies

Our website may use cookies to enhance experience. This tool uses browser localStorage only — no cookies are set by this tool.

6. Your Rights (UK GDPR)

You have the right to access, correct, or delete personal data we hold. Contact us at info@iso-xpert.com to exercise these rights.

7. Data Retention

We retain personal data only as long as necessary to fulfil the purposes collected and comply with legal obligations.

8. Third-Party Links

This tool links to external websites (LinkedIn, YouTube, etc.). We are not responsible for their privacy practices.

9. Contact

ISO Xpert Ltd
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UK
Email: info@iso-xpert.com  |  Phone: +44 7853 109840

Terms of Use

Please read these Terms carefully before using the ISO Xpert ISO 27001 Gap Analysis Tool ("the Tool") and website at iso-xpert.com, operated by ISO Xpert Ltd ("ISO Xpert", "we", "us").

By accessing or using the Tool, you agree to be bound by these Terms. If you disagree, please discontinue use immediately.

1. Ownership and Intellectual Property

The ISO Xpert ISO 27001 Gap Analysis Tool, including all content, design, text, structure, branding, and code, is the exclusive intellectual property of ISO Xpert Ltd. All rights reserved.

• You may not copy, reproduce, distribute, modify, or create derivative works of this tool without prior written consent from ISO Xpert Ltd.
• The ISO Xpert name, logo, and associated branding are trademarks of ISO Xpert Ltd and may not be used without permission.

2. Permitted Use

You are permitted to use this Tool solely for your own internal, non-commercial ISO 27001 gap analysis activities. You may:

• Use the tool to assess your organisation's compliance with ISO/IEC 27001:2022.
• Export and retain generated reports for internal records.
• Share exported reports within your organisation.

3. Prohibited Use

• Redistribution, resale, or sublicensing of this tool.
• Removing or altering copyright notices or branding.
• Using the tool for unlawful purposes or in violation of applicable law.
• Reverse engineering or decompiling for commercial purposes.

4. Disclaimer of Warranties

This Tool is provided "as is" for informational and self-assessment purposes only. ISO Xpert does not warrant that the Tool is error-free or constitutes legal, certification, or professional advice. Gap analysis outputs should be reviewed by a qualified ISO 27001 consultant before making certification or security decisions.

5. Limitation of Liability

To the fullest extent permitted by applicable law, ISO Xpert Ltd shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of, or inability to use, this Tool. This tool does not constitute a security audit and should not be relied upon as the sole basis for information security decision-making.

6. ISO Standards Reference

References to ISO/IEC 27001:2022 (incorporating Amendment 1:2024 - Climate action changes) and Annex A controls within this tool are for guidance purposes only. The authoritative version of this standard, including Amd 1:2024, is published by the International Organization for Standardization (ISO) and must be obtained directly from ISO or national standards bodies.

7. Governing Law

These Terms shall be governed by and construed in accordance with the laws of England and Wales. Disputes shall be subject to the exclusive jurisdiction of courts of England and Wales.

8. Changes to Terms

ISO Xpert reserves the right to modify these Terms at any time. Continued use constitutes acceptance of revised Terms.

9. Contact

ISO Xpert Ltd
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UK
Email: info@iso-xpert.com  |  Phone: +44 7853 109840