This policy explains what Northbridge Accreditation Services collects when you use this website, why we collect it, and how to exercise your rights. Last updated 31 October 2026.
Who we are
Northbridge Accreditation Services, 1201 Fannin Street, Suite 262, Houston, TX 77002, USA. For any privacy question, contact info@theisocertification.com.
What we collect
- Enquiry details — company name, contact person, email, phone, country, industry, standard of interest, employee range and the requirements you describe.
- Certificate verification queries — the certificate number you search for, together with standard server logs.
- Technical data — IP address, browser type, pages requested and referring URL, retained in server logs for security and troubleshooting.
- Analytics data — aggregated page usage if analytics is enabled, used to understand which content is useful.
We do not ask for payment card details through this website, and we do not collect special category data through the enquiry form. Please do not include personal data about third parties in the requirements field.
Why we use it
- To respond to your enquiry and prepare a scope and quotation.
- To administer an engagement if you become a client, including audit scheduling and certification records.
- To operate and secure the website, including preventing spam and abuse.
- To meet legal, accounting and record-keeping obligations.
Our legal bases, where the GDPR or similar law applies, are: taking steps at your request before entering a contract, performance of a contract, our legitimate interest in operating the business securely, and compliance with legal obligations.
Certificate register
Our public register publishes a limited set of certificate data: client name, certificate number, standard, scope, issue date, expiry date and status. This is published because verification is the purpose of the register and because buyers have a legitimate interest in confirming a certificate’s validity.
We do not publish client addresses, contact details, audit reports or commercial terms. Verification result pages are excluded from search engine indexing. If you believe a register entry is inaccurate, contact us and we will correct it once the certification body confirms the position.
Who we share it with
- The authorized certification body, where needed to scope or schedule your assessment.
- Service providers who host the website, deliver email or provide analytics, under contract and only for those purposes.
- Professional advisers, auditors or authorities where required by law.
We do not sell personal data.
Retention
Enquiries that do not become engagements are retained for up to 24 months, then deleted. Certificate records are retained for the life of the certificate plus the period required for verification queries and legal record-keeping. Server logs are rotated on a short cycle.
Cookies
This site uses essential cookies required for the content management system to function. If analytics or marketing cookies are enabled, a consent banner is displayed and non-essential cookies are set only after consent. You can clear or block cookies in your browser at any time; essential site functions may stop working if you do.
Your rights
Depending on where you live, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. Texas residents may also request disclosure of categories of personal data collected. Email info@theisocertification.com and we will respond within the period required by applicable law. You may also complain to your local data protection authority.
International transfers
We are based in the United States and our service providers may process data there. Where personal data originates in the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.
Changes
We may update this policy. The revision date at the top of the page always reflects the current version.