Privacy Policy

How we handle personal data submitted through this website, including enquiries and certificate verification queries.

LEGAL & COMPLIANCE

Privacy Policy

How Northbridge Accreditation Services collects, processes, and protects your information across our website, enquiry systems, and public register. Last updated: October 2026.

1. Data Controller Information

This website is operated by Northbridge Accreditation Services, headquartered at 1201 Fannin Street, Suite 262, Houston, TX 77002, USA. For data privacy inquiries or requests, contact our compliance team at info@theisocertification.com.


2. Information We Collect

  • Client Enquiry Data: Name, business email, phone number, company name, operational headcount, facility locations, and standard of interest submitted through quote request forms.
  • Certificate Directory Queries: Certificate numbers queried via our public verification lookup tool and corresponding system access logs.
  • Technical Logs: Standard web server connection data including IP address, user agent, requested URLs, and error timestamps.

We do not collect sensitive payment card details through this website or request consumer personal categories.


3. Legal Basis & Purpose of Processing

We process collected data exclusively to:

  • Formulate customized scoping proposals and evaluate audit mandays.
  • Coordinate client assessments, auditor scheduling, and certificate issuance with our authorized certification body partners.
  • Maintain our public verification register in accordance with ISO transparency obligations.
  • Ensure infrastructure security and prevent fraudulent misuse of certificates.

4. Public Certificate Register Disclosure

Certificates coordinated through Northbridge Accreditation Services are published in an open public register. Displayed information is strictly limited to commercial certification facts: Legal Client Name, Certified ISO Standard, Operational Scope, Certificate Identifier, Issuance Date, and Expiration Status. No internal business financial records or trade secrets are published.


5. Data Retention & Rights

Enquiry data is retained for three years or the duration of your active certification engagement. Under applicable data privacy laws (including GDPR and CCPA), you have the right to request access, rectification, or deletion of personal contact information by contacting info@theisocertification.com.