Privacy Notice
How we handle your personal data under UK GDPR and the Data Protection Act 2018.
Who we are
Arden Al Certification Charity (“we”, “us”) is the data controller for personal data processed in our certification activities.
What we collect
- Contact details for applicants, clients and suppliers
- Audit records, including notes and photographs where necessary
- Website usage data for analytics (if you consent)
Why we use it
- To run certification services and fulfil contracts
- To comply with legal obligations (e.g., record‑keeping, regulatory reporting)
- With consent, to improve our site
Lawful bases
Contract, legal obligation, legitimate interests, and consent (for optional analytics).
Sharing
We share data only where necessary—for example with auditors, regulators, or UKAS (if accredited). We do not sell personal data.
Retention
We retain certification records for as long as required by law and accreditation rules; other data is kept only as long as needed.
Your rights
You have rights to access, rectification, erasure, restriction, portability and objection. Contact privacy@ardenalcertificationcharity.dedyn.io.
Contact
Data protection queries: privacy@ardenalcertificationcharity.dedyn.io
Updates
We may update this notice from time to time. Last updated 2025-09-27.