GDPR Data and Information Policy

Data and information handling

Assess Audit Assure Limited, trading as AAA Certification, uses information to respond to enquiries and provide independent certification services. The website and portal privacy notice explains the information involved, purposes, legal bases, recipients, international processing, retention criteria and individual rights.

Sharing audit evidence

Only provide evidence relevant to the agreed audit scope. Remove unnecessary personal details and do not upload passwords, full payment-card information or sensitive personal records unless a specific need and appropriate arrangements have been agreed with AAA. Your organisation should be entitled to share the material and inform affected people where appropriate.

Access and record handling

Portal access follows assigned roles and programme responsibilities. Uploaded documents may be held for security review before use. Certification records, communications and payment references may need to be retained for the programme, oversight, complaints, accounting or legal purposes; the privacy notice explains the criteria. A refund does not itself erase the programme record or close portal access.

Questions and requests

Contact info@aaa-cert.co.uk for a privacy request or if information is inaccurate, unnecessary or shared in error. The privacy notice explains the available rights and the right to complain to the Information Commissioner’s Office.

Read the full privacy notice · Certification policies