Privacy Policy

ipsrm.org — last updated 7 April 2026

Who we are:

This website is operated by Stephen Beels, creator of IPSRM™ — the Integrated Physical Security Review Methodology. For the purposes of data protection law, Stephen Beels is the data controller for personal data collected through this website.

Contact: stephen@ipsrm.org

What personal data we collect and why

Contact form

When you submit the contact form on this website, we collect your name, organisation (if provided), email address, and the content of your message. We use this information solely to respond to your enquiry. We do not add you to any mailing list as a result of a contact form submission.

Legal basis: Legitimate interests — responding to an enquiry you have initiated.

Sample extract request

If you request a sample extract from the Practitioner Guide, we collect your name and email address in order to send you the requested document. We may occasionally send relevant updates about IPSRM™ to addresses collected this way. You can unsubscribe at any time using the link in any email we send.

Legal basis: Consent — you have actively requested the document and agreed to receive it.

Purchases

Purchases of IPSRM™ products are processed by Gumroad, Inc. Gumroad collects and processes payment and delivery information on our behalf. We receive your email address from Gumroad for the purpose of order fulfilment and product support. Gumroad's own privacy policy governs their handling of your data and is available at gumroad.com.

Legal basis: Contract — processing is necessary to fulfil your purchase.

How long we keep your data:

Contact form enquiries are retained for as long as necessary to resolve the matter, and for up to two years thereafter for reference purposes.

Sample extract email addresses are retained until you unsubscribe or request deletion.

Purchase-related data is retained for seven years in accordance with UK financial record-keeping requirements.

Who we share your data with:

We do not sell, rent or share your personal data with third parties for marketing purposes.

We use the following services which may process data on our behalf:

Gumroad — purchase processing and product delivery
Squarespace — website hosting and contact form processing

Each of these providers operates under their own privacy policy and data processing terms.

Cookies:

This website uses cookies. A cookie consent banner is displayed on your first visit and you can manage your preferences at any time. Strictly necessary cookies are used to operate the website. Analytics or marketing cookies are only set with your consent.

Your rights:

Under UK GDPR you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing in certain circumstances
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact stephen@ipsrm.org. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy:

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after any change constitutes acceptance of the updated policy.