Privacy Notice

What this notice covers

This notice explains how 1Cert.org collects, uses and retains personal information in connection with this website and the registry and due diligence functions it describes.

Information we collect

This website collects information you provide directly through its enquiry forms — recognition applications, due diligence commission requests, general contact, and vulnerability reports — limited to the fields shown on each form. This website does not use third-party analytics or advertising trackers by default.

How we use information

Information submitted through an enquiry form is used to respond to that enquiry and, where the enquiry proceeds, to progress the recognition application or due diligence engagement it relates to. It is not used for marketing purposes without your consent.

Due diligence information

Information gathered in the course of a due diligence engagement is governed by the terms of that engagement and the practices described on the data and security page, in addition to this notice. Sensitive case material is not accepted through the public enquiry forms on this website.

Cookies and tracking

This website does not set non-essential cookies. See the cookies notice for details of any cookies that are used.

Retention

Enquiry information is retained for as long as necessary to respond to the enquiry and, where applicable, for the duration of any resulting engagement, consistent with the retention practices described on the data and security page.

Your rights

You may request access to, correction of, or deletion of personal information you have submitted to us, subject to any legal or contractual retention requirement. Requests relating to a registry record or due diligence finding should be made through the review and correction process.

Contact

Questions about this notice may be sent to privacy@1cert.org.