Your credentials contain personal information, such as your name and email address. Here is how we look after it and what rights you have.
Do you sell my data?
No. We never sell your personal data.
We use a small number of trusted suppliers to run our service, for example to host our databases (Digital Ocean) and to provide our support desk (Intercom). Each one is under contract to keep your data secure and not to pass it on or sell it.
How we protect your data
Our databases are hosted in a SOC2-certified data centre.
Only staff who need access to personal data for their role can see it.
Our security and data privacy controls are audited every year, internally and independently, and we run regular penetration tests.
Certify is Cyber Essentials Plus certified.
We comply with UK GDPR, EU GDPR and Brazil's LGPD.
Can I have my data deleted?
Yes. The organisation that issued your credential is responsible for your credential data, and Certify processes it on their behalf. So the first step is to ask your issuer to delete your credentials.
Once they have done so, email [email protected] to ask us to delete your remaining personal data. We aim to complete these requests within 30 working days.
You can also ask us what personal data we hold about you at the same address.
For full details, see our Privacy Policy.