Last updated: November 1, 2024
This privacy policy applies to Dynamic Standards International (DSI) and our handling of personal information. DSI is a standards company that provides solutions for governments, organizations, and individuals (i.e. our customers). Due to the commercial nature of our services, DSI, for the most part, collects the information of individuals in their professional capacity. For example, we collect information of the person who completes a license agreement associated to our products, as part of their role within the customer organization. That being said, we recognise and value the protection of your personal information, which is an important part of our relationship with customers. This privacy policy outlines how we collect, use, store, and share your information, in accordance with international data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws. Importantly, we:
Personal information is information that identifies a person (or could reasonably lead to them being identified). When providing our services, we collect some personal information. The types of personal information we collect and process depends on our relationship with you. We generally collect and process personal information from the following groups of people:
The types of personal information we collect and process are set out below. We generally collect this information when you interact with our platform and website. We may also collect this information in person, via email, mail or phone.
We collect and use analytics and cookie data from a person’s use of the website (https://dsi.org), to understand how people interact with our site. We generally collect this information through the use of cookies. More information about this is contained in our Cookie Notice. Information we collect and process when you use our website and platforms includes:
If you are a contact person for an organization, we collect and process minimal personal information when you ask about our platforms and services. Enquiries can be made via email, post, or when you submit an online ‘contact us’ form. Information we collect and process may include the name of an organization’s contact person, the organization’s preferred phone, email and address details, and details of the enquiry or correspondence with us.
We may use the details of a customer’s nominated contact person to communicate with our customer, including in regards to the platform, our services, sales, and accounts. Information we collect and process may include the name of the customer’s contact person, the organization’s preferred phone, email and address details.
We may send promotional emails to a customer’s nominated contact person, where they have opted to receive marketing material. Whilst these emails may be sent to a customer’s contact person, they are intended for our customers, i.e. organizations. If at any time the customer wishes not to receive promotional communication from us, they may unsubscribe using the unsubscribe method described in the email.
We collect and process limited personal information to register or activate our customer’s DSI account. We collect details of the customer’s nominated person via our platform when you register your organization’s account, including:
When a customer uses our platform, they may provide us with contact information or other personal information that relates to an individual in their professional capacity, working for our customer’s suppliers or customers. We collect and use this information for the purpose of providing our cybersecurity services to our customers.
A customer may submit a question or request support by submitting a form located within the customer’s administrator or user account. When the customer requests support, we collect the name of the customer’s contact person, business email address and details of the question, issue or support request, and our correspondence with you in regard to the request.
We collect and process payment information to provide our products and services. When customers provide payment information to us, they will usually provide the payment information of the customer organization; not payment information of an individual. There may be limited circumstances where personal payment information is provided to and processed by us (such as name on card, card type, amount purchased). We do not knowingly receive payment information of a person; rather, we ask our customers to use their approved corporate payment facilities.
We collect and process feedback information to improve the types and quality of services offered, and the manner in which those services are provided to customers. We may collect your opinions and feedback by conducting surveys or market research, or by seeking other information from you on a periodic basis.
When you submit a request to access or correct your personal information, or submit a privacy complaint, we use this information to process your request or investigate your concern, and to communicate with you. We collect and use your name, contact information and details regarding your request or concern.
When you apply for a job with us, we collect and process your personal information as part of the application, and potentially, the hiring process. Recruitment information we collect and process may include name, email, phone, address, resume, cover letter details and references.
We collect and process personal information for a number of reasons, which have been described in the table below:
We collect and use...
Purpose
Analytics data
To analyse the usage of our website and platform, including through the use of cookies, to improve your user experience. If you do not wish for us to use cookies, you can follow the process set out in our Cookie Notice.
Enquiries information
To answer your questions about our cybersecurity maturity assessment platform and services
Customer contact information
To enter into a contract with you (e.g. Terms of Use) To provide you with access to the DSI platform To communicate with you as part of our cybersecurity services To send our customers promotional emails. Whilst these emails may be sent to a customer’s contact person, they are intended for our customers organizations.
Help and support information
To provide help and support in our customer’s use of the DSI platform
Payment information
To accept payment for your purchase of our products or services
Feedback information
To improve the types and quality of services offered, and the manner in which those services are provided to customers
Access and correction requests, and privacy complaint information
To process your request or investigate your concern, and communicate with you
Recruitment information
To process your job application and, if you are successful, to offer you a job and commence your employment
DSI uses external parties (i.e. vendors) to provide services and functions on our behalf. In order for vendors to provide these services, we may share personal information that relates to the services being provided. We ensure that vendors only process personal information for the purpose it was provided to them, and not for any other purpose.
Our primary vendors that provide services on our behalf include:
We also have contracts with other domain specialists, subject matter experts, management consultants and information technology professionals to assist in providing our services. There may be limited instances where we share your information with these external parties for the purpose of providing services on our behalf. We do not sell or share personal information with any advertisers, sponsors, content providers, media outlets, law enforcement or other person or entity, unless:
At DSI, we securely manage and dispose of personal information that we collect and process, as outlined below:
We store personal information that we collect using public cloud services that are secured using best practice authentication techniques to protect your data from unauthorised access, modification or disclosure. DSI stores data, including personal information, with Google and Amazon Web Services. The information is stored in the jurisdiction in which we collected it from (for example, where personal information is collected from within the US, the data is stored on servers located in the US) when it is possible to do so.
We also use vendors to store specific types of personal information (such as analytics and accounting information) on our behalf. The personal information stored by vendors relates directly to their functions and services, and is stored in accordance with our contract with these providers.
DSI have implemented a range of data security practices and controls, including (but not limited to):
Protection of personal information from unauthorised access, disclosure, alteration or loss is a priority for us. Any concerns about the security of personal information collected or processed by DSI should be reported to us using our contact details below.
We keep your personal information for different periods, depending on the purpose that it was collected for. Where we no longer require personal information for the purpose it was collected, we will securely destroy that data.
DSI supports your right to:
If you would like to access personal information we hold about you, we are happy to tell you what it is. We will not, however, tell someone else what personal information we hold about you (unless you permit us or there is a lawful ability or requirement for us to do so).
If you think the personal information we hold about you is incorrect, out of date or misleading, we are happy to correct it.
If you have a question about this Privacy Policy or are concerned about how we handle personal information, please contact us at:
Via the Contact Form on the footer of our website
Dynamic Standards International (DSI)
Level 2, 1500 K Street, Washington, D.C. 20005
United States
If you have made a privacy compliant and are not happy with how we responded to your concern, you are able to contact the Office of the Australian Information Commissioner (OAIC). The OAIC’s process is available here.
We may decide to update this Privacy Policy to ensure that our personal information handling practices are correctly reflected. If we make a significant change to this policy, we will notify you by publishing a notice on our website.