Who we are
ISSLA RISK is operated by ISSLA Risk Global Service LLC, a limited liability company incorporated in the State of New Mexico, United States (“ISSLA RISK”, “we”, “us”). This notice covers this website and the enquiries sent through it. Personal data handled inside client engagements is governed by the engagement terms and by this notice where it applies.
Contact for privacy matters: info@isslarisk.com.
What we collect
- Enquiries. If you use the contact form, we receive the details you type: work email, organisation, your question and, if you choose, your name and the type of matter.
- Messages. If you write to us by email or WhatsApp, we receive the content of your message and your contact details.
- Visits. With your consent, Google Analytics measures how the site is used: pages viewed, clicks on contact buttons and links, whether a form was started or sent, and which service or matter type was chosen. It never receives what you type in a form. Without your consent, no analytics cookie is set.
- Insights readership. For articles in Insights we count views, distinct daily visitors, time spent and how far an article is read. This uses no cookies and keeps no personal profile: a daily-changing code derived from the connection is used only to avoid counting the same visit twice and is deleted the next day.
- Editors. The staff panel uses a session cookie so editors can stay logged in.
Why we use it
- To read and answer your enquiry, and to check for lawful purpose, conflicts of interest and practical feasibility before any work begins.
- To keep the website secure and working.
- With your consent, to understand which pages are useful and improve them.
- To meet legal obligations.
We do not sell personal data and we do not use enquiries for advertising.
Basis for processing
Depending on where you are, we rely on your consent (analytics cookies), on taking steps at your request before an engagement (answering your enquiry), on our legitimate interest in running a secure professional website, and on legal obligations.
Who receives it
- Form delivery: Web3Forms, which passes the message to our inbox.
- Hosting: DreamHost, which hosts this website.
- Analytics (only with consent): Google.
- Messaging: if you choose WhatsApp, the conversation takes place on that service under its own terms.
Within ISSLA RISK, access to an enquiry is limited to the people who need it to respond. Where we use other service providers, they act on our instructions and only for the service they provide.
International transfers
We are based in the United States and work with investigators and analysts in several countries. Your data may therefore be processed outside your country. We limit access to what each task needs and rely on confidentiality commitments and, where required, appropriate transfer safeguards. More detail is in our Data Sources & International Transfers page.
How long we keep it
We keep an enquiry only as long as needed to respond, to document the conflict and lawful-purpose checks, and to meet legal obligations. If an enquiry does not lead to an engagement, we delete it once those purposes are met. Readership figures are kept in aggregate.
Your choices and rights
Depending on the law that applies to you, you may ask to access, correct, delete or restrict the use of your personal data, object to certain uses, withdraw consent, or receive a copy. To exercise a right, write to info@isslarisk.com. You may also complain to your local data protection authority.
You can change your cookie choice at any time with “Cookie Preferences” in the footer.
Security
We use access controls, encrypted connections and the principle of least access. No system is perfectly secure; please avoid sending highly sensitive personal information until a secure route has been agreed with us.
Children
This website is for professional use and is not directed at children.
Changes
We may update this notice. The date at the top shows the latest version.