Skip to main content

Legal

Privacy notice

How we collect, use and protect personal data when you use our website, ask for a quote, or take part in an audit.

Last reviewed 30 October 2026

1.Who we are

VeriCert Global ("cert.solutions", "we") is responsible for the personal data described here. Our registered office is in Redwood Shores, California, United States. Contact us about privacy at privacy@cert.solutions.

2.What we collect

  • Details you send through our quote and contact forms: name, organisation, email, phone, country and your message
  • Contact details of people at client organisations, and records of interviews and evidence seen during audits
  • Names and roles printed on certificates, such as signatories
  • Technical data when you visit our site, such as IP address, browser and pages requested, kept in security logs
  • Account details for staff and client users of our online services

3.How and why we use it

  • To answer enquiries and prepare quotes (our legitimate interest, or steps before a contract)
  • To plan and carry out audits and make certification decisions (contract, and our obligations under accreditation rules)
  • To publish certificate status in our public register (legitimate interest in letting third parties verify certificates)
  • To keep our website and services secure and prevent abuse (legitimate interest)
  • To meet legal, regulatory and accreditation record-keeping requirements (legal obligation)

4.Who we share it with

We share personal data only where needed: with our auditors and offices working on your engagement, with accreditation bodies who assess our work, with service providers who host our systems under contract, and with authorities where the law requires it. We do not sell personal data.

5.International transfers

We have offices in the United States, United Kingdom, United Arab Emirates, India and Singapore, so personal data may be accessed from more than one country. Where data leaves a country with data protection rules, we use safeguards recognised by those rules.

6.How long we keep it

Enquiries are kept for up to two years if they do not lead to work. Audit and certification records are kept for the current certification cycle plus the period our accreditation rules require. Security logs are kept for a limited period and then deleted.

7.Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict use of your personal data, to object to its use, and to complain to a data protection authority. To use these rights, email privacy@cert.solutions.

8.Cookies

We use only the cookies needed to run the site and keep you signed in. See our cookie notice.