Your privacy is important to us. It is Foundation Cyber Security’s policy to respect your privacy regarding any information we may collect from you across our website, Foundation Cyber Security https://www.foundationsecurity.org, and other sites we own and operate.
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used. We may store and use your de-identified data to provide aggregate information in providing this service to you and others.
We only retain collected information for as long as necessary to provide you with your requested service. What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. When using the Foundation Cyber Security Framework, when you complete the Framework in place, you allow us to gather your data with the sole purpose of providing you and similar organisations de-identified comparison data to further enable decision-making and improved reporting. If you do not with for us to gather de-identified comparison data, you are most welcome to create a copy for your own use under the terms of the purchase.
We don’t share any personally identifying information publicly or with third-parties, except when required to by law.
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.
You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services. When using the Foundation Cyber Security Framework, we request that you complete the original sheet provided to you. While you are free to create a copy for your own use under the terms of the purchase, when making a copy you will be unable to take advantage of comparison data between organisations, nor the automatically-generated Executive Summary report.
Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us.
This policy is effective as of 1 January 2021.