ISO/IEC 27701:2025 — Gap Analysis

Privacy Policy

ISO Xpert Ltd is committed to protecting your privacy. This policy explains how we collect, use and safeguard information when you use our ISO 27701 Gap Analysis Tool and visit iso-xpert.com.

1. Information We Collect

• Profile Information: Name, email, phone, organisation and role you voluntarily enter.
• Assessment Data: Gap analysis responses, scores and notes stored locally in your browser's localStorage — not transmitted to our servers unless you export it.
• Usage Data: Standard internet log data when visiting our website.

2. How We Use Your Information

• To provide and maintain our gap analysis tools.
• To respond to enquiries.
• To comply with legal obligations.

3. Local Data Storage

All data entered in this tool is stored exclusively in your browser's localStorage. ISO Xpert has no access to it.

4. Your Rights (UK GDPR)

You have the right to access, correct or delete personal data we hold. Contact info@iso-xpert.com.

5. Contact

ISO Xpert Ltd  |  71-75 Shelton Street, London WC2H 9JQ  |  info@iso-xpert.com  |  +44 7853 109840

Terms of Use

By using the ISO Xpert ISO/IEC 27701 Gap Analysis Tool ("the Tool"), you agree to these Terms.

1. Ownership and Intellectual Property

This Tool and all its content, design, branding and code is the exclusive intellectual property of ISO Xpert Ltd. All rights reserved. Reproduction or redistribution without prior written consent is prohibited.

2. Permitted Use

• Internal, non-commercial gap analysis against ISO/IEC 27701:2025.
• Exporting and retaining reports for internal PIMS implementation records.
• Sharing reports within your organisation.

3. Prohibited Use

• Redistribution, resale or sublicensing of this tool.
• Removing or altering copyright notices or ISO Xpert branding.
• Reverse engineering for commercial purposes.

4. Privacy & Data Protection Disclaimer

This Tool is provided "as is" for informational and self-assessment purposes only. ISO Xpert does not provide legal or data protection advice, and this tool does not constitute a Data Protection Impact Assessment (DPIA), legal compliance audit, or official GDPR assessment.

ISO 27701 certification requires formal assessment by an accredited certification body and a pre-existing ISO 27001 certification. This tool must not be used as the sole basis for GDPR compliance claims, responses to regulatory enquiries, or representations to data subjects or supervisory authorities (including the UK ICO, EU data protection authorities, or other national regulators). Data protection obligations must be assessed by a qualified Data Protection Officer or legal counsel.

5. ISO Standards Reference

References to ISO/IEC 27701:2025 are for guidance only. The authoritative version must be obtained from ISO, IEC or national standards bodies. ISO 27701 must be implemented as an extension to a certified ISO/IEC 27001 ISMS.

6. Limitation of Liability

ISO Xpert Ltd shall not be liable for any indirect, incidental, special or consequential damages, including any data breach or regulatory action, arising from use of this Tool.

7. Governing Law

These Terms are governed by the laws of England and Wales.

8. Contact

ISO Xpert Ltd  |  71-75 Shelton Street, London WC2H 9JQ  |  info@iso-xpert.com  |  +44 7853 109840