Contact details

This website belongs to IsecT Ltd., an independent consultancy.

Our registered company address is: Castle Peak, 1262 Taihape Road, RD9 Hastings 4179, New Zealand.

We can be reached at any time by email through info (at) isect (dot) com.

Guiding principles

IsecT Ltd. respects your right to privacy, just as we expect you to respect ours. Given that we are information security professionals, we truly understand the implications of privacy and data protection ... but we are human too. Unfortunately, we cannot offer you an absolute total guarantee of security and privacy but we faithfully promise to do our utmost to protect any information you provide to us against unauthorized disclosure or use, meaning that which you have not explicitly authorized or which is not in your best interests.

Governing laws

We are a New Zealand company registered in New Zealand, governed by New Zealand law. We comply with New Zealand’s Privacy Act 1993 both in letter and in spirit, and uphold the OECD privacy principles. That means we take care to keep any personal data we hold confidential, complete and accurate, and we try not to collect any more information than we need for our legitimate business purposes nor do we keep it longer than necessary. We comply with other laws relating to information security and of course applicable laws and regulations relating to corporate governance, financial control and so forth. It’s what we do.

Use of personal data

We would like to establish a reasonable commercial dialogue with colleagues, clients and potential clients, website visitors and other interested parties who contact us. This is why we record details such as names, phone numbers and email addresses from the people who contact us. We do not and will not release your email address, telephone number, name or any other personal information to anyone else unless we are required to do so by an enforceable court order. We may use the information you supply to contact you directly by email, post or telephone but if you wish us to stop, simply tell us and we will do so. It’s up to you. We do not send you marketing blurb, advertising or promotional materials unless requested.

Upon request, we can provide you with access to contact information you have supplied to us (e.g. your name and email address) in order for you to check, update and/or delete the details. We will validate any such requests before supplying the information in order to prevent unauthorized access to the data. Naturally we have information security measures in place to protect the information that we have collected from you against loss, misuse, disclosure or alteration. We are information security specialists, as you know!

Information collected from website visitors

We do not use cookies (except those nice ones with the chocolate and peanuts). We do not use or condone spyware, adware, keystroke loggers, phishing, Trojans, worms, viruses or a zillion other unethical and unsavoury practices. We hate spam - detest it in fact.

For each visitor to our website, the webserver automatically recognises information such as the visitor's IP address and browser type. The information from our webserver logs is used in aggregate for statistical purposes to track usage of the website (e.g. the number of unique visitor IP addresses indicates approximately how many unique visitors we have) and to help us improve the website (e.g. we identify and repair broken internal hyperlinks using the log file records of ‘page not found’ messages). We do not normally take any notice of the individual IP addresses of our visitors, except in circumstances where we suspect a security incident may have occurred. Such information may then be used to trace connections and investigate possible incidents but if nothing turns up, it will not be retained or used in any other way.

Our main office is connected to the Internet through telecommunications services provided by the usual range of commercial telecomms suppliers. They potentially have access to all data coming to and from the office systems through the network, and can potentially read any information which is transmitted through the network connections in cleartext (i.e. not encrypted). Our website is hosted by a commercial hosting company that potentially has access to any information your system sends to the website. We also use their services and those of other third parties to send and receive email. These are straightforward commercial services with minimal security and privacy implications as far as we can ascertain. We believe all our service providers have broadly similar privacy policies to ours.

The ISO27k Forum (mailing list, newsgroup, reflector, group ...)

If you sign-up for the ISO27k Forum, your email address will be shared with the company providing the mailing list facility (currently Google, an American corporation). We WILL NOT disclose your email address to other third parties or use it for any other purpose than to send forum messages and (on very rare occasions) administrative notices concerning the forum. If, being fellow information security professionals, you are dubious about giving us your normal email address despite the promises we are making in this policy, by all means open a separate disposable email account for this purpose and check whether it receives any spam. If it does, please let us know immediately as that would presumably indicate a failure of our security controls, a serious incident as far as we are concerned.

Changes to this policy

It is vaguely conceivable but unlikely that we may use website visitor or mailing list information for new, unanticipated uses not previously disclosed in our privacy policy but we promise always to act in your best interests. If our information practices change at some time in the future we will post the policy changes here on the website. If you are concerned about how your information is used, you should revisit our website periodically but please rest assured that we have absolutely no intention of ever sending you spam ourselves, nor of passing your details to spammers. Spam is repulsive. We utterly detest spam.

Compliance and conformity

If you feel that we are not complying with the applicable laws and regulations, not conforming with this privacy policy or if you have concerns about our use of your personal data, you are very welcome to contact us at any time. We will make all reasonable efforts to ensure that any privacy concerns are settled to your complete satisfaction. After all, securing information is our home turf.