Privacy Policy

Certinova Management Pvt. Ltd.. (“CERTINOVA”) is a globally recognized and IAS-accredited ISO certification body that values and protects the confidentiality, integrity, and lawful use of personal and business-related information. As part of our operations, we interact with a wide range of individuals and organizations across sectors, jurisdictions, and digital platforms.

This Privacy Policy reflects our commitment to maintaining the highest standards of data privacy and governance while delivering ISO certification, audit, and assessment services. It outlines how we collect, store, process, share, and safeguard data in compliance with Indian laws, international data protection standards, and accreditation body requirements.

This Privacy Policy outlines our approach to data collection, processing, sharing, retention, and security, in accordance with applicable national and international data protection regulations.

1. Scope of Policy

This Privacy Policy applies to all personal, organizational, and technical data collected and processed by Certinova Management Pvt. Ltd.. (CERTINOVA) during the delivery of its ISO certification, audit, training, and compliance services. It also extends to interactions via CERTINOVA’s official website, client support platforms, communication tools, surveys, and documentation exchanges.

The scope of this policy includes:

1. Clients: Individuals and organizations applying for certification, participating in audits, or receiving training services
2. Employees & Auditors: Individuals engaged with CERTINOVA in a professional capacity who may share or receive personal or professional data
3. Third Parties: Vendors, assessors, external experts, and accreditation stakeholders involved in service delivery
4. Website Visitors: Any user accessing CERTINOVA’s website or interacting with online forms, feedback tools, or informational content

This policy governs all forms of data collection—manual or automated—and applies regardless of whether data is stored digitally, physically, or in hybrid formats. It ensures that all data processing is lawful, transparent, secure, and limited to legitimate business or regulatory purposes.

2. Types of Information We Collect

We may collect the following categories of personal and organizational data:

2.1 Identification Information: Name, designation, job title, and photo (if applicable)

2.2 Contact Information: Phone number, email address, mailing address

2.3 Professional Details: Company name, industry type, size, location, business operations

2.4 Certification Data: Audit reports, application forms, corrective actions, scope statements

2.5 Digital Interactions: Website behavior analytics, IP addresses, device information, cookies, browser type, geographic data

3. Purpose of Data Collection and Use

We collect and use data for multiple legitimate purposes, including but not limited to:

1. Processing certification, training, or application-related requests
2. Conducting audits, assessments, and issuing certifications
3. Managing contractual relationships, billing, and service delivery
4. Sending operational and technical updates, audit schedules, and compliance reminders
5. Responding to inquiries, handling complaints, and resolving disputes
6. Performing internal quality checks and improving operational efficiency
7. Meeting legal, regulatory, and accreditation obligations

4. Legal Basis for Processing

Certinova Management Pvt. Ltd.. processes personal data on the following lawful grounds:

4.1 Consent: Provided voluntarily by clients or website users

4.2 Contractual Necessity: When data processing is required to fulfill contractual obligations

4.3 Legal Compliance: As required by regulatory and accreditation authorities

4.4 Legitimate Interest: For ensuring high-quality service delivery, risk mitigation, and information security

5. Data Retention

We retain personal and organizational data only as long as necessary for the purpose it was collected, or as mandated by laws, regulatory authorities, or accreditation bodies. Once the retention period ends, data is securely archived or permanently destroyed in accordance with our internal retention and disposal policies.

6. Information Disclosure and Third-Party Sharing

Certinova Management does not sell, lease, or rent personal information to third parties. However, data may be shared under controlled conditions with:

1. Accreditation bodies (e.g., IAS) for audits and surveillance
2. External auditors, trainers, or assessors under signed confidentiality agreements
3. Legal or regulatory authorities if disclosure is mandated by law
4. IT service providers, database hosts, or platform vendors (only when necessary and under strict data protection clauses)

7. Data Security Measures

We have implemented a combination of physical, organizational, and technological safeguards to protect data. These include:

1. Role-based access control and data encryption
2. Secure document transmission and storage systems
3. Regular cybersecurity audits and employee awareness training
4. Monitoring of system activity and breach detection protocols

8. Cookies, Analytics, and Tracking Technologies

Our website may use cookies, beacons, session identifiers, and third-party analytics tools (e.g., Google Analytics) to:

1. Understand user behavior and optimize site navigation
2. Personalize user experience and content delivery
3. Measure campaign effectiveness and improve service offerings

Users may manage cookie preferences or disable cookies via browser settings. Some features may be limited if cookies are disabled.

9. International Data Transfers

CERTINOVA may process or store data on servers located in jurisdictions outside the country of origin. When data is transferred internationally, we ensure protection through legally binding agreements, adherence to standard contractual clauses, and alignment with GDPR and similar global data protection standards.

10. Your Data Protection Rights

Depending on your jurisdiction, you may have the right to:

1. Access, view, and request a copy of your personal data
2. Correct inaccurate or outdated data
3. Object to or restrict processing of your data
4. Request deletion, where legally permissible
5. Withdraw previously given consent without affecting the lawfulness of earlier processing

11. Compliance with Legal and Regulatory Frameworks

Certinova Management Pvt. Ltd. complies with all applicable data protection laws, including:

1. The Indian Information Technology Act (2000)
2. Guidelines from the Ministry of Electronics & IT (MeitY)
3. Applicable accreditation body requirements (e.g., IAS)
4. Best practices aligned with the General Data Protection Regulation (GDPR) and global privacy frameworks

12. Changes to This Privacy Policy

We reserve the right to modify or update this policy periodically to reflect changes in applicable laws, regulatory requirements, or service enhancements. The latest version will always be published on our official website. We encourage all users to check the policy regularly for updates.

13. Contact Information

For questions regarding this policy or to exercise your rights under applicable privacy laws, please contact our Data Privacy Officer:

Email: support@certinova.co.in
Website: www.certinova.co.in