InfoSec Governance is the controller for personal information recorded by this download service. We use this limited information to provide Cyber Essentials Plus assessment evidence, protect the service, investigate misuse and demonstrate that authorised test downloads were requested. Our lawful basis is our legitimate interests in delivering and evidencing security-assessment services and maintaining the security and integrity of this platform.

Download audit records and associated operational logs are retained for 12 months, aligned with the Cyber Essentials certificate lifecycle, and are then scheduled for automatic deletion. The records are stored in AWS's London region, and access is restricted to authorised InfoSec Governance personnel and service providers supporting the platform. We do not use this information for advertising or automated decision-making.

A secure assessment link normally identifies the customer assessment rather than the individual using the device. To ask about your information or exercise your data-protection rights, contact info@isgovern.com. You may also complain to the Information Commissioner's Office.