Beyond the Lines™

    Legal

    Privacy Policy

    Effective date: March 2026

    1. Who we are

    Beyond the Lines™ (beyondthelines.ai) helps Internal Audit, Risk, Controls and Assurance teams close the Assurance Impact Gap using the Assurance to Action System™, our proprietary methodology, through the free Assurance Impact Scorecard, the Assurance to Action Toolkit™ Individual Edition, the Assurance to Action Team System™, the Assurance Impact Lab and Enterprise applications. It is operated by Integral Assurance Ltd, a company registered in England and Wales.

    When we refer to "we", "us" or "our" in this Privacy Policy, we mean Integral Assurance Ltd trading as Beyond the Lines™.

    For any privacy-related queries, please contact us at: hello@beyondthelines.ai

    2. What personal data we collect

    We may collect the following personal data when you interact with our website, forms or services:

    • First name
    • Email address
    • Job title or role
    • Organisation name (where provided)
    • Form source and context (e.g. which form or page you submitted from)
    • Product or service interest (for example the Scorecard, the Individual Toolkit, the Team System, the Lab, Enterprise applications or events)
    • Consent status and preferences
    • Technical data such as IP address, browser type, device information and pages visited

    3. How we collect your data

    We collect personal data in the following ways:

    • Newsletter signup forms, when you subscribe to receive Beyond the Lines™ updates and content.
    • Newsletter and content forms, when you request access to guides, frameworks or other Beyond the Lines™ content.
    • Enquiry forms for the Team System, the Assurance Impact Lab and Enterprise applications, when you ask about options for your team or organisation.
    • Event and session registration forms, when you sign up to attend live sessions, webinars or other events.
    • Contact and enquiry forms, when you get in touch with us directly.
    • Cookies and analytics tools, when you browse the website (see Section 8 below).

    4. How and why we use your data

    We use your personal data for the following purposes:

    • To deliver our newsletter and email communications
    • To provide access to the Individual Toolkit and other purchased or requested content
    • To respond to Team System, Lab and Enterprise enquiries and to administer events
    • To respond to enquiries and support requests
    • To administer events, webinars and other offerings
    • To understand how visitors use the website and improve our content and services
    • To manage and operate the Beyond the Lines™ platform

    5. Lawful basis for processing

    Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

    • Consent, where you have opted in to receive our newsletter, marketing communications, or submitted a form to access resources or register interest. You may withdraw consent at any time.
    • Legitimate interests, where we process data to operate, improve and grow the Beyond the Lines™ platform, provided this does not override your rights and freedoms.
    • Contract, where processing is necessary to deliver a service, product or event you have signed up for or purchased.

    6. Newsletter and marketing communications

    When you subscribe to our newsletter, your data is processed through our email and subscriber management platform. We currently use Beehiiv to manage our newsletter, subscriber lists and email communications.

    You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in every email, or by contacting us at hello@beyondthelines.ai.

    7. Third-party service providers

    We use a number of third-party providers to help us operate the website and deliver our services. These may include:

    • Beehiiv, newsletter, subscriber management, email delivery and Toolkit purchases
    • Lovable, website hosting, delivery and sending of transactional emails such as enquiry confirmations
    • Supabase, backend services that process website form submissions
    • Google Analytics 4, website usage measurement, used only where you accept analytics cookies
    • LinkedIn Insight Tag, marketing measurement, used only where it is enabled and you accept the relevant cookies

    We only share your data with third-party providers where it is necessary to deliver our services. We do not sell your personal data to any third party.

    8. Cookies and analytics

    Our website may use cookies and similar technologies to improve your experience, understand how visitors use the site and support the operation of the platform.

    Cookies we may use include:

    • Essential cookies, required for the website to function properly.
    • Analytics cookies, used to collect anonymised data about website usage and visitor behaviour.
    • Third-party cookies, set by services we integrate with, such as analytics or newsletter platforms.

    You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of the website.

    9. Data sharing

    We do not sell, rent or trade your personal data. We may share your data only in the following circumstances:

    • With trusted third-party service providers who help us operate the platform (as described in Section 7)
    • Where required by law, regulation or legal process
    • To protect the rights, safety or property of Integral Assurance Ltd, Beyond the Lines™ or others

    10. International data transfers

    Some of the third-party providers we use may process or store data outside the United Kingdom. Where this occurs, we take reasonable steps to ensure that appropriate safeguards are in place, in accordance with UK data protection law.

    11. Data retention

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. For example:

    • Newsletter subscriber data is retained for as long as you remain subscribed. Once you unsubscribe, your data will be removed or anonymised within a reasonable period.
    • Enquiry interest data is retained for as long as needed to respond to your enquiry and any related follow-up, unless you ask us to remove it sooner.
    • Enquiry and contact data is retained for a reasonable period to manage correspondence and follow-ups.

    12. Your rights

    Under UK data protection law, you have the right to:

    • Access the personal data we hold about you
    • Request correction of inaccurate or incomplete data
    • Request deletion of your personal data
    • Object to or restrict certain types of processing
    • Withdraw consent at any time, where processing is based on consent
    • Request data portability, where applicable
    • Lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully

    To exercise any of these rights, please contact us at hello@beyondthelines.ai.

    13. Changes to this Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically.

    14. Contact us

    If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

    Integral Assurance Ltd
    Trading as Beyond the Lines™
    Email: hello@beyondthelines.ai