Privacy Policy

Template — review with your legal counsel before publishing.

1. Who we are

The Certification People ("we", "us", "our") is the data controller for personal data we process about prospects, clients, auditees, and visitors to our website. Contact: privacy@thecertificationpeople.com.

2. What data we collect

• Identity & contact: name, business email, phone, job title, company name.
• Quote & audit data: standards, scope, staff count, sites, evidence files you upload.
• Account data: credentials, role, sign-in events.
• Technical: IP, browser, device, cookies (see Cookie Policy).

3. Why we process it (lawful basis)

• Contract: to provide certification services, manage audits, issue certificates.
• Legitimate interests: to operate, secure and improve our services and respond to enquiries.
• Legal obligation: to retain audit records under accreditation rules.
• Consent: for marketing emails and non-essential cookies.

4. Sharing

We share data with sub-processors that support our services (cloud hosting, email delivery, accreditation bodies). A current list is available on request. We do not sell personal data.

5. International transfers

Where data is transferred outside the UK/EEA, we rely on adequacy decisions or UK IDTA / SCCs.

6. Retention

Audit records are retained for the period required by our accreditation rules (typically the certification cycle plus one cycle). Marketing data is kept until you unsubscribe.

7. Your rights

You may access, rectify, erase, restrict, or port your personal data, and object to processing. Contact privacy@thecertificationpeople.com. You may also complain to the ICO at ico.org.uk.

8. Security

We protect data with role-based access, encryption in transit, audit logging, and least-privilege controls. See our Security page.

9. Changes

We will notify material changes to this notice via the website or email.