Legal

Privacy Notice

Publication status

Official privacy notice must be supplied or approved by ISCA’s legal advisers. Do not publish prototype wording as the final legal policy.

Required content topics

Data controller and contact details
Categories and purposes of personal data
Legal bases
Recipients and subprocessors
Cross-border transfers
Retention schedules
Cookies and analytics
User rights and how to exercise them
Security practices in accurate, proportionate terms
Notice version and effective date