Privacy Policy

Last updated: January 2026

The International Council for Standards & Certification (“ICSC”, “we”, “our", “us”) is committed to protecting your privacy and ensuring the lawful, fair, and transparent processing of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website, services, and verification systems.

1. Who We Are

International Council for Standards & Certification (ICSC)
Registered Office:
124–128 City Road
London
England
EC1V 2NX

2. Information We Collect

2.1 Information you provide to us

We may collect personal data when you submit forms, report suspicious certificates, request information, verify a certificate, or communicate with us by email. This may include name, email address, organisation, certificate number and any information you voluntarily provide.

2.2 Information collected automatically

When you visit our website, we may collect IP address, browser type, device information, pages visited and access times for security, analytics, and service improvement.

3. How We Use Your Information

We process personal data to respond to enquiries, verify certificates, investigate misuse, maintain the integrity of our certification ecosystem, improve services and comply with legal obligations. We do not sell your data or use it for advertising.

4. Legal Basis for Processing

We rely on legitimate interests, consent and legal obligations as appropriate when processing personal data.

5. How We Store and Protect Your Data

We use secure servers, encrypted communications, access controls and regular security reviews. Reports handled through internal systems are stored securely.

6. Sharing Your Information

We may share data with authorised personnel, investigators and legal authorities where required. We do not share data with third‑party marketers.

7. Data Retention

We retain personal data only as long as necessary for the purposes described, including verification records and compliance investigations.

8. Your Rights

Under UK GDPR you have rights to access, correct, request deletion, object to processing, restrict processing and complain to the ICO. To exercise these rights contact: privacy@councilforstandards.org

9. Cookies

We may use essential and analytical cookies. A detailed cookie notice will be added if we introduce non‑essential cookies.

10. Contact Us

For privacy enquiries: privacy@councilforstandards.org
For general enquiries: info@councilforstandards.org
For compliance matters: integrity@councilforstandards.org

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.