Privacy Policy Page
Effective Date: June 21, 2026 | Audit Premortem Ltd
This Privacy Policy describes how Audit Premortem Ltd (“we,” “us,” or “our”) collects, uses, and protects your information when you visit our website, ismspremortem.com (and any related corporate properties under auditpremortem.com), or use our front-end digital diagnostic tools and resources.
We operate under a strict framework of data minimization. We treat your operational and personal privacy with the standard expected by information security professionals.
1. Data Controller
The data controller responsible for your personal data under the laws of England and Wales is:
Audit Premortem Ltd Contact Email: [email protected]
2. Governing Law
This Privacy Policy, our data processing practices, and all matters arising from or in connection with them are governed exclusively by the laws of England and Wales and are subject to the exclusive jurisdiction of the English courts.
3. The Data Minimization Principle & Un-Gated Content
To respect the operational confidentiality of cybersecurity leaders, we enforce a strict data minimization policy across our digital footprint:
- No Gated Check-Sheets: We do not require you to provide your name, email address, corporate title, or telephone number to access our core compliance check-sheets, templates, or insights.
- No Hidden Enrichment: We do not use third-party background data brokers to silently match your IP address to your corporate employer identity when you download our un-gated resources.
4. Interactive Diagnostic & Assessment Tools
The Diagnostic Isolation Standard: When you input parameters, operational gaps, or compliance metrics into our on-site interactive diagnostic widgets or pre-mortem assessment tools, those inputs are processed entirely within your local browser session state.
We do not capture, log, store, or transmit the specific governance parameters or gap selections you enter into our tools. These tools are designed for immediate, local isolation analysis to allow you to benchmark structural risk safely. No technical metadata regarding your internal system failures is ever harvested for marketing profile creation.
5. Information We Do Collect
We only collect information that you explicitly and knowingly provide to us, or basic technical metadata required to securely serve our website:
- Direct Communications: If you intentionally contact us via email regarding our forensic auditing or diagnostic services, we retain your email address and message contents solely to process your business inquiry.
- Web Analytics & Cookies: We utilize privacy-respecting, anonymized web analytics to measure aggregate site performance. This data contains no personally identifiable information (PII) and cannot be tracked back to a specific corporate network or individual.
6. Data Sharing and Third Parties
We do not sell, lease, trade, or share any information collected through this website with third-party marketing networks, commercial vendors, or corporate data collectors. We only disclose information if required to do so by a binding legal order issued under the jurisdiction of the courts of England and Wales.
7. Data Retention
Inbound professional inquiries and corresponding email interactions are retained only for as long as necessary to fulfill the commercial or diagnostic evaluation purpose for which they were collected, or to comply with statutory corporate retention obligations under English law.
8. Your Rights
Subject to applicable UK data protection laws, you retain the right to request access to, rectification of, or erasure of any personal information you have explicitly submitted to us. To exercise these rights, contact [email protected].