Privacy Policy

Iskander Global Limited ("we", "us", "our") is the data controller responsible for your personal data. We are a company incorporated in England and Wales.

If you have any questions about this policy or wish to exercise your rights, please contact us at: team@iskander.global

We are registered with the Information Commissioner's Office (ICO) as required under UK data protection law. Our ICO registration number is available on request.

We collect personal data only when you voluntarily submit it to us via our website contact form. The categories of data we may collect are:

• Identity data: your name
• Contact data: your email address
• Professional data: your organisation name (optional)
• Communication data: the content of your enquiry message
• Preference data: the area of interest you select

Technical Data

When you visit our website, your browser may transmit your IP address to third-party services referenced in this policy (see Third-Party Services below). We do not ourselves collect or store server access logs containing your IP address through this website.

Data You Do Not Need to Provide

You are not required to provide your organisation name. Providing name, email address, area of interest, and message is necessary to allow us to respond to your enquiry; if you choose not to provide these, we will be unable to engage with your request.

We use the personal data you provide solely for the following purposes:

• To receive, review, and respond to your enquiry
• To manage our business relationship with you if your enquiry progresses
• To maintain a record of our communications for internal administrative purposes

We do not use your personal data for marketing, profiling, or any automated decision-making. We will not sell, rent, or trade your personal data to any third party.

We process your personal data on the basis of our legitimate interests under Article 6(1)(f) of the UK GDPR. Our legitimate interest is to receive and respond to business enquiries submitted voluntarily through our contact form.

We have carried out a legitimate interests assessment and are satisfied that this processing is necessary for that purpose, that it would not be overridden by your interests or fundamental rights, and that it is proportionate. You have the right to object to this processing at any time (see Your Rights below).

Where an enquiry progresses to a formal engagement, we may additionally rely on Article 6(1)(b) (processing necessary for the performance of a contract) to the extent applicable.

Form Submission — Web3Forms

Our contact form is processed by Web3Forms (operated by Hemant Joshi, registered in the United States). When you submit a form, the data you enter is transmitted to and temporarily processed by Web3Forms' servers in order to deliver the form submission to us by email. Web3Forms does not retain your personal data beyond the period required for delivery. Their privacy policy is available at web3forms.com/privacy.

Fonts — Google Fonts

Our website loads typefaces from Google Fonts (Google LLC, United States). This causes your browser to make a network request to Google's servers, which may result in Google receiving your IP address. We use Google Fonts solely to render the website's typography. Google's privacy policy is available at policies.google.com/privacy.

No other third-party services are used on this website. We do not use any analytics, advertising, or tracking services.

Both Web3Forms and Google LLC are based in the United States. Transfers of personal data to the United States fall outside the UK's adequacy decisions and are therefore international transfers for the purposes of UK GDPR Chapter V.

We rely on the following safeguards for these transfers:

• Web3Forms: transfers are covered by the International Data Transfer Addendum to the EU Standard Contractual Clauses (UK SCCs) as approved by the ICO, or by the UK Extension to the EU–US Data Privacy Framework where applicable.
• Google LLC: Google participates in the UK Extension to the EU–US Data Privacy Framework and relies on Standard Contractual Clauses for transfers not covered by that framework.

You may request a copy of the relevant transfer safeguards by contacting us at team@iskander.global.

We retain enquiry data (delivered to us via email) for a period of two years from the date of receipt, unless a longer retention period is required or permitted by law or a continuing business relationship warrants retention for a longer period.

If an enquiry progresses to a formal engagement, we will retain relevant data in accordance with our contractual obligations and applicable legal requirements, including any applicable limitation periods under English law.

When personal data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access (Article 15): to obtain a copy of the personal data we hold about you and information about how it is used.
• Right to rectification (Article 16): to have inaccurate or incomplete personal data corrected.
• Right to erasure (Article 17): to request deletion of your personal data in certain circumstances, including where it is no longer necessary for the purpose for which it was collected.
• Right to restriction (Article 18): to request that we limit our use of your personal data in certain circumstances, for example while accuracy is contested.
• Right to data portability (Article 20): to receive a copy of personal data you have provided to us in a structured, commonly used and machine-readable format, where processing is based on your consent or a contract and is carried out by automated means.
• Right to object (Article 21): to object to processing based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.
• Rights related to automated decision-making: we do not engage in automated decision-making or profiling with your personal data.

These rights are not absolute and may be subject to conditions and exemptions under UK data protection law.

To exercise any of the rights described above, please submit a written request to us at team@iskander.global. Please include sufficient information to allow us to identify you and locate the relevant data.

We will respond to all valid requests within one calendar month of receipt, as required by UK GDPR Article 12. In cases of complexity or volume, we may extend this period by a further two months and will inform you accordingly.

We will not charge a fee for responding to your request unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee or decline to act.

If you are unhappy with how we have handled your personal data, please contact us in the first instance at team@iskander.global so we can attempt to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will be revised accordingly.

We encourage you to review this policy periodically. Continued use of our website following any changes constitutes acknowledgement of the updated policy.