How we handle your data on this site.
This notice is written the way we write them for clients, in plain English.
This page covers aesurus.io itself: what we collect when you visit or use this site, why, how long we keep it, and what you can do about it. It doesn't cover data we process on behalf of clients under a separate engagement; that's governed by the terms of that engagement.
Form submissions
If you register for the Directors' Liability Briefing, we collect your name, firm, role, email address, and, if you provide it, phone number. We use this only to send you session details and any directly related follow-up. We don't sell it, rent it, or use it for unrelated marketing.
The free assessment tools
The DPA Exposure Score and Cyber Readiness Check ask a set of self-reported questions about your organization, then ask for your name, company, role, sector, company size, email, and phone number before showing your score. We collect this to calculate and send you the result, and to follow up about services relevant to what the assessment shows. Submission requires your explicit, unticked consent to that follow-up; we don't assume it. Your answers and score are indicative and self-reported; we treat them as sensitive (they describe your organization's compliance and security gaps) and restrict internal access accordingly.
Booking a call
When you book a call through this site, you're taken to (or shown an embed of) a third-party scheduling tool. That tool collects the details you enter, typically name, email, and the time you selected, under its own privacy policy, not ours. We recommend reading it before you book if that matters to you. We receive the booking details necessary to have the call with you.
Cookies and analytics
This site sets no tracking or advertising cookies. It may use Plausible Analytics and/or Vercel Analytics, both cookieless and unable to track you across other websites. If enabled, they record aggregate, anonymised information (page views, referring sites, device type), never anything that identifies you personally. The only cookies this site sets are strictly necessary ones, for example keeping you signed in to the admin portal, or basic security protections, and those apply regardless of any cookie choice, because they don't involve tracking or profiling. If that ever changes and we add a script that does track you, a proper consent banner (equal Accept/Decline, nothing pre-ticked) will appear before it loads, and a "Cookie preferences" link will let you change your mind at any time.
How long we keep it
Briefing registrations are kept only as long as needed to organise the session and any immediate follow-up, then deleted or archived. Assessment submissions (your answers, score, and contact details) are kept for 12 months from submission and then deleted, unless you've become a client, in which case your engagement records are kept under the terms of that engagement instead. If you ask us to delete your information sooner, we will, unless we're required to keep it for a legitimate reason (for example, an active registration you haven't yet attended).
Your rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email us and we'll respond directly: no portal, no ticket number, no runaround.
Contact
Questions about this notice, or about data you've submitted through this site, can go to info@aesurus.io.