Privacy Policy
Last updated: August 2026
ISSEAD Innovations Ltd respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we may collect when you visit our website or contact us, why we process it, how we protect it, and the rights you have under the General Data Protection Regulation, GDPR, and applicable Cyprus data-protection law.
1. Who We Are
ISSEAD Innovations Ltd is the data controller responsible for the personal data described in this Privacy Policy.
Registered address: see Legal Notice
Email: support@issead.eu
Further company information is available in our Legal Notice.
2. Personal Data We May Collect
The personal data we collect depends on how you interact with us.
Information You Provide to Us
When you contact us, submit an enquiry or otherwise communicate with ISSEAD, we may receive information such as:
your name;
email address;
telephone number, where provided;
organisation and professional information, where relevant;
the content of your enquiry or communication;
and other information you voluntarily provide.
Please do not provide sensitive or confidential personal information unless it is necessary for your enquiry.
Website and Technical Information
When you visit our website, certain technical information may be processed automatically. Depending on your cookie preferences and the services used on the website, this may include:
IP address;
browser and device information;
pages visited;
date and time of visits;
referring website or traffic source;
and information about how visitors interact with the website.
Our website is hosted by Squarespace.
For further information about cookies, analytics and embedded services, please see our Cookie Policy.
3. Why We Process Personal Data
We may process personal data for the following purposes:
responding to enquiries and communications;
providing information about our services;
taking steps requested by you before entering into a contract;
providing and administering services where you engage ISSEAD;
operating, maintaining and securing our website;
understanding and improving website performance;
complying with legal and regulatory obligations;
protecting our legitimate business interests and legal rights;
and maintaining appropriate business and administrative records.
We do not sell your personal data.
4. Legal Bases for Processing
Under the GDPR, we must have a lawful basis for processing personal data.
Depending on the circumstances, we may rely on:
Consent
We may rely on your consent where you have actively agreed to a particular type of processing, including certain non-essential cookies.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Contract
We may process personal data where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.
Legal Obligation
We may process personal data where necessary to comply with an obligation imposed on ISSEAD by applicable law.
Legitimate Interests
We may process personal data where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.
These interests may include responding to business enquiries, operating and securing our website, maintaining business records and protecting our legal interests.
5. Cookies and Website Analytics
Our website uses cookies and similar technologies.
Necessary cookies may be used to operate and secure the website. Non-essential cookies are restricted according to the cookie preferences you select.
We use Squarespace functionality and analytics and embed video content from YouTube.
For information about the technologies used, third-party services and how to manage your preferences, please see our Cookie Policy.
6. YouTube Content
Our website may contain videos embedded from YouTube, a service provided by Google.
When you access or interact with embedded YouTube content, Google or YouTube may process information relating to your device and interaction with the content.
Where consent is required for non-essential technologies, your cookie preferences apply.
Google processes personal data according to its own privacy practices.
Further information is available in our Cookie Policy.
7. Artificial Intelligence
ISSEAD uses artificial intelligence tools to support certain research, analysis, content, project development and internal activities.
Where personal data is processed using an AI-assisted system, applicable data-protection requirements continue to apply.
We seek to minimise the personal data processed through external AI systems and apply additional care to confidential, sensitive or personally identifiable information.
For more information about how we use artificial intelligence, please see our Artificial Intelligence Policy.
8. Who May Receive Your Personal Data
We may use third-party service providers where necessary to operate our website or business.
Depending on how you interact with the website, these may include providers of:
website hosting and infrastructure;
website analytics;
embedded media;
email and communication services;
IT and security services;
and professional services where necessary.
Our known website providers include Squarespace and, for embedded videos, YouTube/Google.
Service providers acting as processors may process personal data only for the relevant services and subject to applicable data-protection requirements.
We may also disclose personal data where required by law, a court, a competent public authority, or where necessary to establish, exercise or defend legal claims.
We do not sell or rent personal data to third parties.
9. International Data Transfers
Some of the technology providers we use may process personal data outside Cyprus or the European Economic Area.
Where personal data is transferred outside the European Economic Area, we require an appropriate legal basis and safeguards as required by the GDPR.
Depending on the recipient and destination, these may include an adequacy decision adopted by the European Commission or appropriate contractual safeguards.
10. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting or contractual requirements.
Retention periods therefore depend on the type of information and the reason it is processed.
For example, information relating to a business relationship may need to be retained for longer than a general website enquiry where this is necessary for contractual, accounting, tax or legal purposes.
When personal data is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.
11. Your Data Protection Rights
Depending on the circumstances, the GDPR gives you rights concerning your personal data, including:
the right to be informed about how your personal data is processed;
the right to access your personal data;
the right to correct inaccurate or incomplete personal data;
the right to request erasure of your personal data in certain circumstances;
the right to restrict processing in certain circumstances;
the right to object to certain processing;
the right to data portability where applicable;
the right to withdraw consent at any time where processing is based on consent;
and rights relating to certain forms of automated decision-making and profiling.
These rights are subject to the conditions and exceptions established by applicable law.
To exercise your rights, contact us at support@issead.eu.
We may need to verify your identity before responding to a request.
12. Automated Decision-Making
ISSEAD does not currently use solely automated decision-making through this website that produces legal effects concerning you or similarly significantly affects you.
If this changes, we will provide the information and safeguards required by applicable data-protection law.
13. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
No internet-based system can provide absolute security. We therefore regularly consider the nature of the information processed and the measures appropriate to the associated risks.
14. Children's Privacy
Our website and services are intended primarily for businesses, organisations, professionals and adult users and are not directed at children.
We do not knowingly seek to collect personal data from children through the website.
If you believe that a child has provided personal data to us inappropriately, please contact us.
15. Links to Other Websites
Our website may contain links to websites operated by other organisations.
When you follow an external link, the privacy practices of the external website apply. ISSEAD does not control the processing of personal data carried out independently by those third parties.
We recommend reviewing the relevant privacy information when visiting third-party websites.
16. Your Right to Complain
If you have concerns about how we process your personal data, please contact us first so that we have an opportunity to address them.
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
For ISSEAD in Cyprus, this is the Office of the Commissioner for Personal Data Protection.
You may also have the right to contact another competent supervisory authority in the European Union depending on your circumstances.
17. Changes to This Privacy Policy
We may update this Privacy Policy when our activities, website, technology providers or applicable legal requirements change.
The current version will be published on this page and the "Last updated" date will be revised accordingly.
18. Contact
For questions about this Privacy Policy, the processing of your personal data or the exercise of your data-protection rights, contact:
ISSEAD Innovations Ltd
Email: support@issead.eu