Privacy Policy

How ISO Compliance collects, uses and protects your personal information

Last updated: January 2026 | In accordance with the UK GDPR and Data Protection Act 2018

1. Information We Collect

We collect information you provide directly to us, including name, email address, phone number, company details, and messages when you complete our contact form, request a quotation, or engage with our certification services. We also collect website usage data through standard server logs.

2. How We Use Your Information

Your information is used to provide and improve our certification services, respond to enquiries, process certification applications, maintain the certificate register, and comply with legal obligations. We do not sell your personal information to third parties.

3. Certificate Register

As part of our accreditation obligations, certified organisations' names, certificate numbers, standard, scope, and validity dates are published in our public certificate register. This is a requirement of ISO/IEC 17021-1 and UKAS accreditation. By accepting certification, you consent to this publication.

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmissions.

5. Your Rights (POPIA)

Under the UK GDPR, you have the right to access, correct, and request deletion of your personal information. To exercise these rights, contact our Information Officer at privacy@isocompliance.org.uk.

6. Contact

For privacy-related queries, contact our Information Officer: privacy@isocompliance.org.uk | +44 1908 886 200